Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JiclJpKMUR-2iGwGVcsxaMP3w_4.roa
File:                     JiclJpKMUR-2iGwGVcsxaMP3w_4.roa (raw, json)
Hash identifier:          PAZhVVOznsUxaamnyIxsnx7I2f55CCCq6+I4Od3Y8tY=
Subject key identifier:   26:27:25:26:92:8C:51:1F:B6:88:6C:06:55:CB:31:68:C3:F7:C3:FE
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       95
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JiclJpKMUR-2iGwGVcsxaMP3w_4.roa
Signing time:             Tue 30 May 2023 16:08:15 +0000
ROA not before:           Tue 30 May 2023 16:08:15 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2b00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:15 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=26272526928C511FB6886C0655CB3168C3F7C3FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:cb:bf:b1:a7:b4:b6:48:3f:34:58:02:84:6e:
                    a8:56:1b:02:50:44:d3:d7:bd:0d:b8:db:7d:b2:11:
                    a5:b1:1c:e7:3c:a9:99:82:c3:2d:09:61:87:8b:b1:
                    37:c2:97:33:23:fb:98:d9:e4:83:2c:d9:37:5c:83:
                    ce:b4:10:f2:ea:dc:ca:04:81:ca:0f:ac:bd:9e:67:
                    f6:90:aa:29:af:91:71:fc:7c:81:f1:1c:ad:fc:fe:
                    bd:1d:c6:59:7d:b0:04:50:2c:6d:19:fd:c2:e7:7c:
                    3e:34:2f:83:df:86:eb:66:16:01:bf:26:6d:3b:34:
                    61:53:b0:7f:26:da:d5:59:08:10:31:ce:05:bc:ff:
                    22:83:19:b7:53:da:ef:88:42:6c:e5:bd:c7:2f:09:
                    72:01:4e:79:d4:00:4e:50:51:5c:2b:53:ec:7b:36:
                    ca:9b:59:42:b9:5b:d1:03:ff:61:8c:0a:b3:a9:1c:
                    64:68:26:ae:88:f2:e7:74:fb:a7:21:1b:18:fa:e8:
                    4c:79:6e:76:b6:a4:c9:5c:c9:bf:8d:cc:5c:54:37:
                    29:a3:9b:d9:57:22:44:37:7c:c7:a7:5e:82:44:e2:
                    e5:cf:62:ce:ae:2e:53:66:27:69:fd:6e:db:b3:e4:
                    97:88:58:3c:6a:0d:92:80:07:b0:6c:87:5c:75:74:
                    76:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:27:25:26:92:8C:51:1F:B6:88:6C:06:55:CB:31:68:C3:F7:C3:FE
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JiclJpKMUR-2iGwGVcsxaMP3w_4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c3:b4:6f:ed:0c:43:64:f0:62:cb:02:e3:e1:1c:58:1c:f5:6d:
         0f:3f:56:0a:e7:85:08:59:37:44:82:a4:f9:f4:29:86:23:d2:
         7c:f3:d9:90:93:19:6f:04:21:44:ce:08:b2:11:73:67:5f:5c:
         e1:fc:6d:c8:6c:5b:07:56:8b:48:33:95:6d:28:d1:03:e0:38:
         e3:93:16:53:3d:76:3f:50:b9:fb:86:54:b9:7a:51:16:eb:2c:
         10:5d:f5:63:9f:41:6b:f6:25:03:5a:90:9c:3c:35:2e:83:62:
         08:c0:c5:9d:0b:08:29:aa:74:14:c2:78:27:0f:5c:6b:86:2b:
         f8:60:f9:3d:e2:dc:dc:ab:4a:71:8e:a4:ea:c1:b0:f8:2a:cc:
         c1:83:34:a1:0d:b7:08:64:45:f8:6f:29:33:36:ce:d8:23:c3:
         5d:1e:d8:7d:4e:bf:83:cc:77:4a:18:b7:15:b4:28:51:ec:22:
         2b:8f:ac:53:36:c0:a2:1f:53:c1:f7:67:a3:e1:23:51:43:50:
         a2:72:82:82:f7:59:bc:7d:a0:ea:9e:f7:5c:eb:8f:30:6a:db:
         d1:6d:b0:3c:f4:98:3b:f3:d0:3f:74:40:fc:e1:80:4e:27:e1:
         61:75:9c:89:99:79:92:46:85:13:aa:a6:fe:d5:ff:a4:df:c5:
         80:3f:d9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org