Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JteN1aekS1WQRaC7lfcizjb2vv0.roa
File:                     JteN1aekS1WQRaC7lfcizjb2vv0.roa (raw, json)
Hash identifier:          6LYmaGI1qukqRBy1ZXKQuW8agnFkVLB7OHOol30ieZ4=
Subject key identifier:   26:D7:8D:D5:A7:A4:4B:55:90:45:A0:BB:95:F7:22:CE:36:F6:BE:FD
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       023A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JteN1aekS1WQRaC7lfcizjb2vv0.roa
Signing time:             Tue 30 May 2023 17:42:28 +0000
ROA not before:           Tue 30 May 2023 17:42:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:fc00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=26D78DD5A7A44B559045A0BB95F722CE36F6BEFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3b:86:7e:12:02:f7:95:15:af:ad:0e:01:df:
                    ef:94:0c:99:8d:86:52:f8:15:83:98:af:eb:3d:d7:
                    6b:25:dd:bb:1e:03:05:b0:77:7a:a2:35:fd:57:b8:
                    77:b3:ad:0b:5f:e5:a0:e0:d6:03:2c:0b:6d:7d:c3:
                    63:5d:a9:7b:51:4a:1d:3d:bf:36:16:75:2e:39:b0:
                    e8:7e:ec:4c:5e:64:c2:dc:30:6d:8a:7c:0f:b4:92:
                    b3:02:b2:f2:5c:b8:1e:26:af:72:aa:2f:1e:0c:a7:
                    43:9a:fe:23:13:62:60:03:88:1a:41:20:b9:63:77:
                    fd:65:11:81:19:87:45:b2:36:7f:11:38:a5:6f:55:
                    d5:98:7d:ef:29:60:05:33:71:e1:2c:da:28:3a:2c:
                    b7:2d:7c:6d:c1:85:1c:9a:16:c6:0e:09:7b:3c:99:
                    15:93:59:4f:25:08:47:6e:3d:ce:a9:17:ac:30:43:
                    5b:96:19:e5:50:4f:bd:85:bb:20:12:0c:0e:db:84:
                    37:54:fd:85:4c:7b:ad:4a:e9:be:00:79:35:3d:be:
                    53:5b:0a:49:52:20:9b:02:d7:b6:d1:25:e4:3a:f7:
                    60:2a:27:23:1d:39:c9:ed:11:eb:4a:25:f9:50:e1:
                    ba:74:0e:b6:ec:7a:8b:73:9e:37:27:0d:7f:e5:70:
                    5c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D7:8D:D5:A7:A4:4B:55:90:45:A0:BB:95:F7:22:CE:36:F6:BE:FD
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JteN1aekS1WQRaC7lfcizjb2vv0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:fc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9a:04:12:c4:dc:43:70:fe:0b:14:73:b7:67:c0:2a:0e:75:0f:
         d6:9f:c1:bc:b8:bf:e0:f0:67:05:55:ee:4b:32:c2:46:e2:ee:
         1e:93:7f:5e:c0:f4:b7:ee:6c:ff:53:1a:9e:ab:0b:08:84:09:
         04:cc:b0:c7:aa:a2:4f:d7:2a:fc:fc:d1:9e:6d:1d:b6:79:3d:
         09:f2:62:0b:2c:ce:89:76:01:e9:ad:f8:0a:eb:d5:e4:6a:46:
         51:05:18:77:f4:f3:1d:f6:ac:0a:e3:80:43:d7:18:17:a2:2a:
         21:bf:2d:f3:d4:cd:a6:9f:ef:11:6f:48:d6:6c:9c:fb:a3:a0:
         c9:cc:4e:df:ea:32:12:eb:cd:c4:cf:96:8d:27:b4:f1:74:1c:
         3c:2e:33:e0:68:85:1a:5b:b4:1c:d2:4c:0c:bb:5f:b7:35:0f:
         a2:d8:11:2c:80:16:33:e7:d9:e4:fd:be:78:1a:9a:1f:df:b0:
         5f:b2:48:b8:95:c1:f0:82:2f:3e:76:11:7a:25:c8:cc:05:c2:
         6b:3c:8d:d5:be:6a:72:6f:bc:23:be:b3:40:00:0b:b7:df:55:
         24:3e:e5:4a:10:a7:52:49:95:8f:fe:74:93:72:60:60:07:27:
         da:5f:ff:07:26:f4:c7:c9:83:0f:4c:c8:f7:d5:42:95:1e:c7:
         f3:50:d9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org