Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JA6jCciIIhkTJ8EYLBKy8EEt3RE.roa
File:                     JA6jCciIIhkTJ8EYLBKy8EEt3RE.roa (raw, json)
Hash identifier:          XowqQYATV1ZQvwDx+8F9LH3we/HkKMDsvOxX9mpul7g=
Subject key identifier:   24:0E:A3:09:C8:88:22:19:13:27:C1:18:2C:12:B2:F0:41:2D:DD:11
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0153
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JA6jCciIIhkTJ8EYLBKy8EEt3RE.roa
Signing time:             Tue 30 May 2023 17:32:27 +0000
ROA not before:           Tue 30 May 2023 17:32:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:17:f90::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=240EA309C88822191327C1182C12B2F0412DDD11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:0b:2e:48:da:04:5e:cf:15:9a:4b:84:58:e7:
                    68:18:89:fb:51:ff:ce:7d:c1:c9:73:24:7f:69:b1:
                    13:b4:1e:a3:c6:fb:cd:69:01:d6:69:21:30:31:55:
                    7a:a8:cb:bc:37:ab:7f:ad:53:62:34:79:51:77:54:
                    a8:82:9b:5c:a8:74:9d:60:3a:79:69:3a:2c:55:7b:
                    56:40:88:e5:e3:c1:ce:2e:2b:d9:a4:1f:f7:a6:34:
                    ae:bb:bc:fa:37:27:86:f2:dd:bb:bf:ff:7d:46:f2:
                    02:29:7a:eb:d1:6e:be:60:51:a2:b2:43:df:95:bd:
                    59:72:17:fd:64:7e:67:68:ca:79:97:88:b9:1e:f5:
                    0d:43:39:5a:68:7b:86:83:99:c3:2e:0f:45:44:62:
                    fa:c1:24:78:80:22:b1:40:b8:3f:12:b4:06:95:2c:
                    f0:3a:7e:65:34:f9:80:2e:0b:2b:a5:ba:86:26:51:
                    65:3a:21:0e:dc:31:da:28:1d:09:6b:1c:fd:79:18:
                    25:9e:99:3e:9c:c3:e7:f3:c0:66:19:83:b8:fa:06:
                    88:64:b1:b6:4a:b5:12:8d:60:23:b2:2c:2d:a2:7b:
                    19:91:2c:9f:50:86:da:53:13:e3:76:ed:ab:b5:ad:
                    8e:d4:87:55:90:10:e8:3d:52:f5:52:66:bd:64:96:
                    ed:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0E:A3:09:C8:88:22:19:13:27:C1:18:2C:12:B2:F0:41:2D:DD:11
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JA6jCciIIhkTJ8EYLBKy8EEt3RE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:17:f90::/44

    Signature Algorithm: sha256WithRSAEncryption
         c1:95:7f:bb:a2:98:b7:e0:db:4e:ed:28:5a:aa:4d:9d:18:5e:
         47:c1:f4:e0:ea:5a:8b:44:2e:81:69:3d:27:37:64:5f:6c:de:
         3f:10:f3:6a:a1:b1:bd:cd:81:97:f7:b9:06:14:11:da:21:f5:
         e1:bf:32:d2:0b:85:fd:10:54:6d:27:22:b6:da:92:eb:90:8c:
         59:d1:44:b7:b0:b6:a5:0e:54:4f:5c:d5:ef:8c:9e:54:30:30:
         9e:d5:62:2c:a0:57:68:16:fd:75:ac:c9:9f:c7:bd:bd:e5:63:
         da:fb:6b:67:38:e1:60:ca:fa:ba:72:89:91:e1:88:d6:cd:54:
         a9:40:75:07:54:64:20:e0:dd:de:c6:b8:32:a2:a7:86:5a:2a:
         84:17:76:b4:05:ed:5e:29:f9:5f:2b:d2:6a:f8:b4:22:57:97:
         55:5f:ef:d4:ee:62:c3:a5:6f:5d:a0:96:f1:b6:55:3d:15:9d:
         b0:ad:f9:0a:90:59:59:71:7b:f8:ee:19:52:65:b2:c6:6e:ec:
         e2:5c:98:da:75:a3:dd:49:25:6b:ba:56:7a:57:7e:e6:e9:0d:
         1d:eb:c5:a3:7d:8c:71:2b:a0:b8:5c:1f:a6:aa:05:c3:66:eb:
         f3:19:6c:1e:38:45:b7:7f:08:47:d2:7d:3b:bc:ba:c6:36:ce:
         a3:c7:64:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org