Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ly_2hSicaXAPMR8tgpY_-hDGVcA.roa
File:                     Ly_2hSicaXAPMR8tgpY_-hDGVcA.roa (raw, json)
Hash identifier:          3vwCeytox2vNTPpKj820SoDuVWKwlVIG6pxN3UDv49A=
Subject key identifier:   2F:2F:F6:85:28:9C:69:70:0F:31:1F:2D:82:96:3F:FA:10:C6:55:C0
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       5E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ly_2hSicaXAPMR8tgpY_-hDGVcA.roa
Signing time:             Tue 30 May 2023 16:04:25 +0000
ROA not before:           Tue 30 May 2023 16:04:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=2F2FF685289C69700F311F2D82963FFA10C655C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4b:e8:e3:2a:ed:c3:35:a4:1a:49:e2:4f:a2:
                    71:e7:62:ef:d6:20:d5:ef:4e:ff:a0:f8:a8:c1:fc:
                    f7:88:16:7f:1f:e5:72:52:01:ae:dd:42:fb:ff:41:
                    13:57:1e:a5:d2:aa:06:e8:cf:85:b6:fa:9a:4c:97:
                    c6:c1:e6:4d:a1:b7:d4:8f:22:a5:4b:b1:5b:6a:d1:
                    c1:2c:6c:f2:ef:bc:49:59:e4:20:98:20:0a:29:bb:
                    18:ee:78:8b:c8:5d:5f:46:b6:70:a6:66:18:ac:a6:
                    dc:2e:fc:28:c6:c5:b2:59:68:44:b2:5c:58:34:3e:
                    c2:cd:28:36:c7:70:45:fb:c2:5a:05:cb:8f:61:e9:
                    fe:17:12:63:d7:10:aa:26:79:43:37:6b:ad:b0:5e:
                    38:cc:c7:a8:ce:c3:2f:18:24:5f:79:e7:69:f3:66:
                    dd:0d:44:cb:22:20:ce:c7:18:44:01:41:d6:47:d9:
                    a3:01:d7:82:37:00:df:a9:9b:99:0e:31:33:0c:64:
                    43:50:44:0c:d2:92:14:92:af:10:3c:51:40:4f:6f:
                    26:0e:f0:10:25:05:fa:2e:31:82:2f:90:97:a6:f1:
                    65:d9:4d:61:02:94:32:4d:72:e5:14:70:20:1c:82:
                    76:f1:b5:a0:05:19:df:0e:c9:07:48:12:94:fd:40:
                    a2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2F:F6:85:28:9C:69:70:0F:31:1F:2D:82:96:3F:FA:10:C6:55:C0
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ly_2hSicaXAPMR8tgpY_-hDGVcA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c800::/40

    Signature Algorithm: sha256WithRSAEncryption
         33:a4:b3:58:83:89:d0:96:32:24:45:21:0f:38:f3:62:11:91:
         c5:fe:1b:d5:68:f2:3b:a5:1a:ec:94:df:a1:12:4f:a4:93:0c:
         39:f9:48:02:b3:77:98:e9:c4:26:79:b4:e0:1d:0e:12:b5:ee:
         18:5a:15:a6:78:e1:83:07:47:c9:46:67:ed:63:f9:c5:c2:32:
         22:8e:5d:62:fd:30:44:72:81:1b:e1:ac:6e:2d:c0:a1:02:69:
         64:6b:fb:64:4d:4c:f7:76:6f:c8:09:49:f4:85:40:af:85:63:
         c0:f8:87:be:c4:88:2e:d5:b6:a4:8e:71:cb:51:fc:5b:c6:bf:
         c0:07:f5:ab:16:73:20:67:6d:98:0c:17:e5:ee:94:61:dc:0c:
         22:53:a0:81:a3:f7:26:7f:3d:f1:6b:fa:93:46:23:5d:c1:b6:
         a2:b9:90:c4:3e:e0:c9:14:d0:99:3b:e8:89:ca:e1:b6:a6:f1:
         a1:11:bb:86:03:7e:97:91:9a:41:30:73:17:4a:2d:43:ab:ca:
         4a:a7:b3:a9:f2:4d:2f:f2:12:b4:06:97:e1:c2:0b:30:d3:02:
         e5:bc:fe:d6:69:86:59:df:34:21:e9:e3:ed:3d:5d:96:1b:f7:
         a0:ce:49:4f:bc:a2:19:64:42:34:14:02:e0:91:a9:05:fa:b8:
         e3:3f:e9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org