Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Jq_BcaHU3CdwVaX0LZ_7YTKbs7E.roa
File:                     Jq_BcaHU3CdwVaX0LZ_7YTKbs7E.roa (raw, json)
Hash identifier:          59syg8Z3oLbyicHynWFFoD526eSLWQicjKBPoUTuzkI=
Subject key identifier:   26:AF:C1:71:A1:D4:DC:27:70:55:A5:F4:2D:9F:FB:61:32:9B:B3:B1
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0215
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Jq_BcaHU3CdwVaX0LZ_7YTKbs7E.roa
Signing time:             Tue 30 May 2023 17:40:29 +0000
ROA not before:           Tue 30 May 2023 17:40:29 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2d00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:29 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=26AFC171A1D4DC277055A5F42D9FFB61329BB3B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:85:f1:8d:f0:e7:34:8f:eb:b9:63:e4:85:16:
                    3d:e8:01:ac:1a:1f:dd:d4:5d:13:56:50:65:dc:ae:
                    0c:b7:0e:1c:c0:ee:69:6a:3d:84:5d:ef:34:10:dd:
                    04:f8:10:99:19:28:1a:19:40:dd:d8:2f:9f:fb:24:
                    fb:2f:88:00:7b:c4:2a:95:8f:d9:71:ad:1d:12:5e:
                    b1:c0:c1:09:79:c2:89:3f:46:c1:62:c3:ba:5d:04:
                    33:45:f4:4b:ef:63:ab:77:fd:a8:f6:2b:9f:f7:c8:
                    75:cc:47:dc:24:e0:04:81:55:2b:00:25:8d:f4:37:
                    01:38:c2:73:30:fe:b9:da:d2:2a:85:d8:37:8e:14:
                    31:c9:6c:1e:da:6e:7a:de:6c:39:19:95:d1:f2:d6:
                    25:0c:8f:09:9c:b1:c0:62:bf:db:45:98:86:12:7b:
                    86:83:4e:6b:ac:06:5b:90:e8:d3:5b:93:51:a2:91:
                    e5:66:aa:a0:cb:04:e2:0f:bf:4d:79:6c:75:f6:de:
                    1c:55:2a:50:9c:90:29:e2:f1:ff:fa:78:84:58:e1:
                    13:8a:ee:e8:2d:bf:16:d0:45:2c:86:45:8d:70:8b:
                    f4:f1:83:56:eb:f3:c4:34:2c:47:31:73:ec:5f:3f:
                    0a:90:76:ff:de:01:02:aa:6b:46:d1:9c:3b:0c:94:
                    84:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AF:C1:71:A1:D4:DC:27:70:55:A5:F4:2D:9F:FB:61:32:9B:B3:B1
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Jq_BcaHU3CdwVaX0LZ_7YTKbs7E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:b4:3c:c8:14:eb:50:46:00:aa:fa:8c:59:2d:d2:c6:51:64:
         e9:83:21:a2:1b:e1:c5:5b:db:4d:e5:ba:b9:29:7f:7b:d6:15:
         c0:d3:ea:c7:a4:1a:95:5f:e6:49:6f:e8:8d:c7:74:61:b2:47:
         7d:eb:4c:a8:0d:1f:fa:cf:9a:66:04:5e:80:65:8d:74:83:07:
         69:55:4d:49:60:04:17:c5:ba:5a:6a:99:bf:83:b5:16:ce:52:
         51:0f:3a:32:9e:ff:dc:5a:54:8b:36:3c:54:ea:e2:a7:6b:a0:
         b8:13:07:d4:3f:ab:5f:02:b6:88:ab:cf:20:f3:18:c2:37:cc:
         65:b1:95:fd:20:96:ac:9a:c1:29:92:c3:2d:18:39:ea:6f:2b:
         3b:1b:d4:aa:00:8b:fd:a8:ee:98:76:81:a7:a8:4d:6b:b2:3b:
         d2:89:d5:b0:0e:50:f4:d3:90:68:e8:aa:17:25:ec:0b:85:03:
         f5:fd:fc:00:d9:5e:61:e9:b4:4d:63:5f:10:0f:e1:67:91:a7:
         4b:e5:18:0d:03:ca:a8:f2:6f:c8:dc:2e:41:2a:8f:21:90:fb:
         a1:7a:e5:58:62:17:65:b0:6d:80:82:1a:ac:44:30:94:4b:a7:
         fe:fb:1e:46:68:b0:c7:d3:28:1b:e1:86:0c:28:f3:6e:ea:fa:
         36:dc:db:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org