Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/J5k6ej7xgUqPpPPdr5UU9laIKBo.roa
File:                     J5k6ej7xgUqPpPPdr5UU9laIKBo.roa (raw, json)
Hash identifier:          JkKA1HbOePx5Q3VFYT4Ob2Totxoj/skczBBRP48tMBo=
Subject key identifier:   27:99:3A:7A:3E:F1:81:4A:8F:A4:F3:DD:AF:95:14:F6:56:88:28:1A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01DE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/J5k6ej7xgUqPpPPdr5UU9laIKBo.roa
Signing time:             Tue 30 May 2023 17:38:28 +0000
ROA not before:           Tue 30 May 2023 17:38:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:be00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=27993A7A3EF1814A8FA4F3DDAF9514F65688281A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cf:33:05:e2:9f:a4:c8:79:63:cd:0d:04:99:
                    76:c6:d0:4d:0d:b0:f6:87:fc:44:f4:be:c5:14:b1:
                    40:7e:26:29:05:f4:1b:b6:b0:33:23:fa:a4:68:3e:
                    2c:90:cc:6b:ed:de:17:61:c0:bc:d0:3b:d1:fc:90:
                    72:85:eb:62:1e:e2:19:f0:b1:e9:6d:6f:31:98:b9:
                    12:d3:84:0f:f8:46:38:99:e7:d0:9a:68:cb:14:72:
                    b4:6c:07:74:86:69:47:8b:95:38:b9:b2:b3:16:8f:
                    73:d0:43:a7:5c:31:96:d2:69:a4:e8:26:27:26:93:
                    d2:3b:71:de:a2:5e:9d:64:92:8e:56:01:5c:be:34:
                    92:6c:68:fc:8b:57:ed:e6:7f:e7:47:b6:4b:6e:f0:
                    6b:86:31:1f:f9:e0:19:44:e7:d5:28:97:e6:93:22:
                    39:db:68:68:1e:30:79:1c:8b:3f:12:a3:7b:79:c3:
                    04:00:0b:89:88:4c:fb:b2:cb:bd:f5:1e:40:f9:83:
                    6d:bd:d7:e1:95:ed:65:47:f5:b0:e5:ea:b7:2c:3d:
                    7d:7c:09:d6:85:e5:ac:64:11:5a:35:ba:45:3f:fd:
                    57:1d:c5:86:14:a3:63:c9:1d:48:ce:43:61:d7:b6:
                    2a:b8:c4:a3:1e:80:a3:f0:d1:01:d4:0f:cc:b2:e8:
                    a0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:99:3A:7A:3E:F1:81:4A:8F:A4:F3:DD:AF:95:14:F6:56:88:28:1A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/J5k6ej7xgUqPpPPdr5UU9laIKBo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:be00::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:59:37:12:54:f0:5f:42:8c:58:c3:f9:cd:20:bc:f4:35:33:
         ea:c8:c6:04:5c:33:ef:b7:89:ac:87:7d:39:23:ec:5c:9c:f7:
         ce:9b:e3:5c:c5:3c:07:9e:2c:e2:94:87:02:a6:9a:5f:8b:17:
         d5:68:5e:4c:04:6c:d7:bd:ba:0a:99:8a:bd:67:dc:e0:ac:a1:
         70:2b:f9:90:5b:34:fb:ed:21:01:7e:72:44:b2:fb:f9:69:9c:
         f4:63:9a:86:cd:00:59:9f:24:7c:d3:59:61:b6:63:74:8c:d2:
         5c:22:66:09:ea:af:c8:d9:93:f6:d8:69:49:7a:1f:67:45:ef:
         b1:10:10:e6:cd:f1:ab:6e:23:3c:25:db:3d:96:3f:04:30:ea:
         70:08:f6:e7:19:6a:57:f5:e0:a9:15:31:26:77:db:86:aa:49:
         ff:ff:df:a1:08:13:c7:10:e0:33:87:3f:15:a5:69:46:e0:cf:
         f8:81:07:58:2a:90:fd:8a:56:f5:fb:6a:97:5c:ee:02:f0:0c:
         69:b1:d3:21:b3:f5:2f:9b:e5:70:f3:2f:75:8b:9e:ac:67:82:
         54:1f:de:43:b3:1a:fa:2e:96:ef:a1:e4:59:d6:99:19:6e:cb:
         41:73:3f:4a:da:c8:7a:c2:a0:dc:23:80:18:bb:74:f4:d0:be:
         ee:e6:80:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org