Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IukoIvvv-jm2QtThFebePjhN_A0.roa
File:                     IukoIvvv-jm2QtThFebePjhN_A0.roa (raw, json)
Hash identifier:          Ot68ZN+rUnn58jUY5UScIVPtElN6S3j92C2w5z+SZRI=
Subject key identifier:   22:E9:28:22:FB:EF:FA:39:B6:42:D4:E1:15:E6:DE:3E:38:4D:FC:0D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       012E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IukoIvvv-jm2QtThFebePjhN_A0.roa
Signing time:             Tue 30 May 2023 17:29:59 +0000
ROA not before:           Tue 30 May 2023 17:29:59 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9300::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:29:59 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=22E92822FBEFFA39B642D4E115E6DE3E384DFC0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:f7:d3:40:85:a3:ff:65:e3:0d:2d:8d:69:
                    8e:1e:af:96:51:01:2c:d0:cc:86:36:6d:0b:75:7d:
                    d8:20:dc:a2:93:35:6f:5e:38:81:5a:f3:c7:4e:34:
                    b3:00:67:84:b1:13:ee:91:b1:ea:4c:6d:eb:07:ee:
                    9a:f5:5b:5a:e7:aa:78:0f:a7:9a:d4:d5:6b:40:3a:
                    8d:67:3e:cb:7e:f0:1f:bf:0b:b7:a7:86:05:24:28:
                    cb:bc:31:e6:de:87:5e:f9:2d:e2:85:65:97:27:8e:
                    12:af:75:52:36:ea:43:aa:ed:fd:27:b0:f9:df:3c:
                    2b:be:a9:d0:ee:e6:09:a0:be:4e:55:fe:4d:1f:d9:
                    47:63:8f:c0:a5:19:11:5c:7f:21:0b:8c:16:d1:cd:
                    f0:20:84:3e:f7:e8:dd:03:77:55:02:d8:6d:bb:30:
                    47:33:05:db:79:3e:ae:15:4f:65:04:eb:ad:71:23:
                    40:54:34:0f:c0:75:2f:d3:1b:e3:45:60:15:46:c4:
                    74:2b:e1:d3:46:91:66:03:b8:2e:4e:f8:d0:48:a0:
                    76:7b:ba:fe:3f:04:d7:87:e3:e4:81:c4:eb:f2:83:
                    42:69:92:bb:d1:4c:52:48:35:83:98:d9:65:96:89:
                    7a:48:60:85:43:ed:f6:fc:98:22:da:72:c2:cd:81:
                    e6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E9:28:22:FB:EF:FA:39:B6:42:D4:E1:15:E6:DE:3E:38:4D:FC:0D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IukoIvvv-jm2QtThFebePjhN_A0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9300::/40

    Signature Algorithm: sha256WithRSAEncryption
         c3:30:9a:8d:5c:77:87:fc:29:7f:16:45:6d:51:e7:92:95:95:
         9b:e3:c8:3b:2a:39:c6:61:2a:cc:cf:4e:60:c1:97:00:31:18:
         3e:98:67:82:ea:c4:54:64:f9:e8:5c:ea:6a:f8:04:c8:84:e3:
         18:23:58:8f:bf:30:f1:29:d5:5b:45:e8:06:46:f7:94:23:32:
         d6:17:c9:5d:15:56:ef:81:63:1d:b5:8e:53:25:e8:c8:d3:fd:
         30:75:26:7a:d6:b9:ce:e4:66:73:93:28:1b:99:fd:28:b7:06:
         66:0e:7f:1b:b9:4e:66:d2:a2:10:32:70:0c:0d:d0:3d:aa:3e:
         a0:e1:a4:b8:ad:32:87:71:2e:74:31:f8:bb:a6:b1:8f:7d:62:
         38:6e:66:37:9a:d7:bf:f7:17:40:47:75:75:02:da:81:ce:98:
         36:a8:34:5f:f2:5d:02:f5:45:b4:59:3d:f0:b1:95:fe:32:88:
         30:d2:f0:db:8b:82:fc:82:a0:78:44:a8:cf:7d:c8:87:04:c2:
         f6:3c:8c:f1:df:ff:62:65:9d:b2:3e:dd:73:db:7e:11:91:27:
         4c:6e:49:56:ee:a8:18:db:21:98:d2:28:64:66:c1:11:2b:34:
         dc:53:6e:a5:cb:6a:43:0d:21:3b:73:c2:a1:df:16:e1:06:b4:
         cf:e7:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org