Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JGuunZCCHAb49fKBHRnszF5qyxA.roa
File:                     JGuunZCCHAb49fKBHRnszF5qyxA.roa (raw, json)
Hash identifier:          ELCN7aNgHGLd7QQdoLjXMHrp9gN8J48Qed9uTyxPhSQ=
Subject key identifier:   24:6B:AE:9D:90:82:1C:06:F8:F5:F2:81:1D:19:EC:CC:5E:6A:CB:10
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0231
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JGuunZCCHAb49fKBHRnszF5qyxA.roa
Signing time:             Tue 30 May 2023 17:42:25 +0000
ROA not before:           Tue 30 May 2023 17:42:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f700::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=246BAE9D90821C06F8F5F2811D19ECCC5E6ACB10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b8:5b:88:80:aa:dc:c8:43:f3:60:73:55:43:
                    0e:49:00:6f:f8:24:ad:57:fd:76:b8:29:85:84:c9:
                    b6:1d:d8:0f:14:df:41:7b:29:f8:6f:7a:e3:e2:ac:
                    b7:51:a8:53:35:e0:1b:5e:35:6d:2d:e9:75:9e:64:
                    c7:cf:c5:10:b3:b9:b7:f2:d7:28:aa:3d:dd:87:09:
                    d7:7d:68:a9:17:7a:0e:c4:41:0b:99:10:50:9c:c9:
                    86:1b:1f:dd:dd:45:c5:54:6d:57:b0:43:c1:11:f5:
                    98:15:6f:27:d9:7c:35:c7:47:4d:dd:dc:c4:2d:af:
                    9f:55:77:46:d9:28:fc:3c:a5:79:ca:33:a8:49:37:
                    0d:01:8f:98:5b:24:70:03:b3:18:2e:6c:e1:28:07:
                    22:3e:49:eb:92:83:06:9c:59:6f:eb:53:bd:bd:2e:
                    50:0c:ce:8d:b9:bc:b8:a7:5a:f7:6e:62:e0:be:75:
                    fd:34:9f:59:89:e6:30:75:f1:28:18:9b:95:8f:1f:
                    f0:03:39:9a:9d:1c:a2:6a:76:71:b3:9d:f6:cd:cb:
                    e5:33:ef:1d:4b:b5:87:9d:91:bb:6c:89:1d:f6:2b:
                    44:92:4c:c4:10:a9:f2:bf:38:9a:b1:dd:66:4e:b3:
                    44:e9:56:b4:71:6b:b0:f4:72:a0:22:d9:3c:bf:23:
                    c9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6B:AE:9D:90:82:1C:06:F8:F5:F2:81:1D:19:EC:CC:5E:6A:CB:10
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JGuunZCCHAb49fKBHRnszF5qyxA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f700::/40

    Signature Algorithm: sha256WithRSAEncryption
         37:e9:9a:b4:b3:d0:70:23:02:58:a0:6f:7e:9a:00:c5:61:9f:
         97:ee:c0:06:04:ec:38:a2:fb:a0:7e:0e:3d:39:2d:e6:f0:1f:
         d4:b5:95:5f:00:0f:e6:f1:f4:8f:64:37:ec:16:92:00:96:d2:
         90:19:0c:31:b2:1d:b9:22:f2:82:a2:22:62:f7:c4:f9:10:09:
         c2:df:3b:8c:f5:80:82:68:f5:00:a1:e0:31:12:40:f0:bb:1b:
         a1:a8:42:80:15:75:67:f0:e9:7d:de:54:58:6c:12:72:82:15:
         4c:ea:05:45:8d:b7:73:b1:c4:f8:50:35:21:95:10:b3:68:59:
         27:67:2a:bb:b4:c3:57:99:a8:54:1f:bb:bd:0e:e3:b2:9f:53:
         93:51:5e:3e:65:1b:18:9c:b7:b4:62:91:ec:ff:a9:5c:1e:da:
         35:79:42:02:b6:67:c1:b6:bc:ca:23:a4:0c:eb:d5:ca:2c:77:
         a6:61:7a:34:34:19:c7:01:0a:88:20:03:a8:51:21:85:05:41:
         e6:77:c4:c5:62:2a:03:79:70:ba:84:e5:5c:30:2e:1f:51:44:
         63:a1:62:9b:84:96:b3:53:a0:0f:be:8d:a9:4c:d0:b9:87:23:
         02:08:da:c7:38:0d:8b:32:36:3c:d4:39:ca:1b:20:ef:24:8c:
         2f:df:ee:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org