Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JmCmy30vzJmrtHgd8qoJXpt8AZI.roa
File:                     JmCmy30vzJmrtHgd8qoJXpt8AZI.roa (raw, json)
Hash identifier:          GznlgT45d/6gpGkSCFZRV7wWnuW0mRFjhJyOneQLkP8=
Subject key identifier:   26:60:A6:CB:7D:2F:CC:99:AB:B4:78:1D:F2:AA:09:5E:9B:7C:01:92
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       D4
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JmCmy30vzJmrtHgd8qoJXpt8AZI.roa
Signing time:             Tue 30 May 2023 16:10:21 +0000
ROA not before:           Tue 30 May 2023 16:10:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:d800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=2660A6CB7D2FCC99ABB4781DF2AA095E9B7C0192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d2:2a:cb:23:7f:29:dd:ee:a8:28:78:20:dd:
                    1e:5f:11:77:3f:2d:3e:64:d3:11:48:b5:e6:c5:86:
                    99:28:3e:e8:37:33:91:1a:39:db:08:86:25:8b:4a:
                    64:aa:27:b0:91:88:20:75:85:11:a2:f4:d4:f0:76:
                    bc:83:cf:91:62:70:ab:fd:f7:49:ad:9b:ad:b5:cc:
                    1d:03:58:3d:48:4b:cf:c2:ed:4a:35:e0:99:fe:ab:
                    5d:bb:36:30:93:85:44:23:b9:a1:6d:a2:04:71:56:
                    58:6f:2c:17:a1:00:63:d9:22:dc:af:ed:4f:9f:22:
                    3d:e8:a1:14:d1:a0:6b:a1:d9:c3:45:85:49:df:8a:
                    8e:72:59:67:98:f0:dd:4a:59:d0:5d:e2:a9:8a:d5:
                    dc:52:f9:1e:aa:25:87:7b:81:67:f0:03:c1:e1:61:
                    32:33:00:80:fd:cf:a0:7c:2b:a8:54:74:36:d5:3c:
                    37:68:7c:85:28:83:75:88:30:02:05:70:a8:ac:39:
                    12:65:5e:a3:09:62:01:f8:a3:eb:69:18:a5:1b:e0:
                    fc:10:9a:62:5d:69:0c:46:07:5f:f8:ad:7a:d9:c2:
                    fc:82:fc:56:60:73:43:f7:4a:77:40:49:6f:4f:c9:
                    52:c3:a5:eb:81:18:13:dc:3c:56:9d:46:0a:5f:b1:
                    42:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:60:A6:CB:7D:2F:CC:99:AB:B4:78:1D:F2:AA:09:5E:9B:7C:01:92
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JmCmy30vzJmrtHgd8qoJXpt8AZI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d800::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:67:b4:a7:f3:cf:2d:4b:8b:b6:19:0d:7c:11:7f:1d:57:92:
         a7:91:0c:eb:bb:13:3e:90:53:55:0b:31:4a:6e:0c:49:1f:b1:
         f7:ba:f4:63:b7:47:55:34:f0:cb:08:84:f1:58:d1:d3:ad:e1:
         e4:55:bb:b3:b1:2b:90:f3:03:b9:da:9d:b6:2d:19:81:25:a2:
         e4:f3:72:ec:04:b9:ac:fd:37:53:0a:8f:bf:f6:2e:c3:d7:f5:
         9f:f0:f6:b0:cb:7a:33:43:1d:52:fc:b3:2f:43:a1:40:38:39:
         18:4f:6f:b8:c9:1c:9c:fb:f5:d5:1f:94:62:ff:8c:15:8a:ea:
         bb:ba:ed:19:0e:75:7a:b0:cf:67:0a:86:ba:42:ae:cc:39:a4:
         af:d2:ed:ff:f8:15:04:62:cb:fa:a5:5a:7d:70:10:80:e7:14:
         2b:bb:82:bd:96:21:98:78:99:62:d8:f2:5e:c3:40:f3:c5:36:
         a7:4b:88:d6:bc:0b:15:61:52:d9:17:da:af:6f:9d:46:83:1a:
         78:8b:76:32:fb:4e:44:08:82:7b:a8:35:29:f5:dd:2a:45:9f:
         ea:a6:54:e1:7c:91:e5:8f:86:d5:8d:c0:06:19:e9:9e:06:38:
         11:ad:2e:74:29:a6:62:5e:d0:7d:81:26:b5:55:b5:c1:a4:dc:
         58:70:d9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org