Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JcnFBsz7edD_7-9QtGgeu3HmTKM.roa
File:                     JcnFBsz7edD_7-9QtGgeu3HmTKM.roa (raw, json)
Hash identifier:          T6KnBrojvwLE0r77MHviTAy3YzSRp4IpalPGJMa+tyY=
Subject key identifier:   25:C9:C5:06:CC:FB:79:D0:FF:EF:EF:50:B4:68:1E:BB:71:E6:4C:A3
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       1D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JcnFBsz7edD_7-9QtGgeu3HmTKM.roa
Signing time:             Wed 29 Mar 2023 16:47:20 +0000
ROA not before:           Wed 29 Mar 2023 16:47:20 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:0:100::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 29 16:47:20 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=25C9C506CCFB79D0FFEFEF50B4681EBB71E64CA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a5:d9:c2:e1:80:68:31:6e:54:fc:fd:4f:bc:
                    1c:b0:ae:73:3f:49:b4:7d:92:77:35:dc:85:67:e4:
                    aa:c1:76:26:d8:2a:57:dd:d0:64:f9:db:74:7b:4c:
                    bf:36:00:d7:78:80:1d:a6:a0:3e:e9:4a:d0:41:98:
                    eb:a2:02:de:e4:f6:63:0d:35:07:6b:99:b4:13:2b:
                    e9:b2:6d:3d:d3:b0:72:42:41:e0:2f:dd:56:1c:ff:
                    f9:dd:9a:9b:32:8d:51:df:10:b0:cd:ce:71:d2:ef:
                    eb:98:a7:45:07:5d:91:2a:ff:93:7d:c6:a7:0d:78:
                    92:0f:51:b6:58:da:0f:45:73:92:73:57:cb:6c:43:
                    b7:56:16:f4:8f:7f:69:07:82:43:33:39:8b:27:42:
                    15:96:ef:72:cb:e1:ef:27:b6:90:d6:de:dc:78:76:
                    98:51:0b:24:fc:9f:c2:9e:85:38:06:cf:87:0c:d3:
                    aa:96:3a:00:76:92:9f:cc:c0:4f:b9:3c:e3:0c:c6:
                    b4:80:44:d8:ba:10:29:c8:7e:f9:56:d5:e6:24:4a:
                    36:e7:76:ee:dd:cd:f4:74:9b:6a:2e:35:f5:ad:9e:
                    f3:db:72:56:f1:85:89:95:fc:bf:be:2c:c1:fa:3f:
                    34:22:62:25:89:82:50:c5:2c:1a:b6:52:80:24:6e:
                    13:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C9:C5:06:CC:FB:79:D0:FF:EF:EF:50:B4:68:1E:BB:71:E6:4C:A3
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JcnFBsz7edD_7-9QtGgeu3HmTKM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         c5:96:ff:fc:c5:ae:57:32:d4:58:4d:42:67:f3:56:e1:f4:76:
         bf:5e:29:1c:66:01:35:31:6e:a5:0b:25:57:68:b0:98:a6:f0:
         73:e1:90:39:05:7e:08:34:db:07:a5:e7:e3:98:f9:3e:a5:f8:
         39:16:ef:0a:25:96:3b:01:21:01:e0:ad:9d:00:b7:20:a0:a2:
         ee:b8:86:e0:9f:e7:a9:a9:8e:c9:05:dc:d7:67:3c:5e:33:e1:
         83:b9:19:67:96:d9:ed:41:d3:55:8e:47:e9:4e:e6:7d:f0:23:
         72:90:82:a4:52:ed:a4:0f:cc:db:25:f2:3d:55:a2:cc:d9:01:
         5f:35:12:9c:d1:cf:9c:72:ed:63:a6:d1:5e:95:1a:11:82:84:
         b3:d6:47:75:46:de:81:a8:12:ae:b9:7f:ce:75:ee:44:e9:59:
         86:65:42:d9:ce:ee:be:ce:a2:2b:06:8e:f9:45:54:07:92:f8:
         e0:00:9d:f3:03:87:5d:de:3c:2e:64:ba:46:54:68:4f:4a:7e:
         1b:96:74:49:5f:1d:91:da:f8:e4:93:e7:fb:eb:7e:50:dc:9e:
         72:2d:df:10:04:bf:4e:45:50:7f:bf:db:2a:3d:15:d9:46:3f:
         64:24:0c:7b:3d:c0:e6:01:c4:86:d0:ec:cb:7f:11:78:f8:12:
         47:a8:49:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org