Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/N6yDjG2PxnCh_ehfL7h8eRznQWA.roa
File:                     N6yDjG2PxnCh_ehfL7h8eRznQWA.roa (raw, json)
Hash identifier:          U6key6cufbm0Qg8s99c78D1rg5I7RHOT0RReiE4+z4g=
Subject key identifier:   37:AC:83:8C:6D:8F:C6:70:A1:FD:E8:5F:2F:B8:7C:79:1C:E7:41:60
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       A3
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/N6yDjG2PxnCh_ehfL7h8eRznQWA.roa
Signing time:             Tue 30 May 2023 16:08:20 +0000
ROA not before:           Tue 30 May 2023 16:08:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e600::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=37AC838C6D8FC670A1FDE85F2FB87C791CE74160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:4d:0a:3b:c3:e8:8d:14:d4:ed:a7:d2:67:
                    d8:ab:27:63:bb:65:09:29:25:eb:b1:6f:11:b8:30:
                    8c:c5:e7:01:db:f7:81:19:ef:cd:3c:a2:a8:56:ec:
                    93:7b:cc:14:f1:f9:36:fd:82:d4:df:a5:9d:97:8d:
                    5d:ff:49:82:d1:ee:ee:33:1f:f1:a3:f4:21:e1:86:
                    10:6e:48:ec:3c:ed:be:47:e7:c5:f1:d9:96:f2:8a:
                    4a:06:6f:61:27:cb:8f:8e:50:15:43:64:4b:49:4d:
                    77:3a:ec:78:3c:9c:ee:bc:a1:4e:e9:8e:df:8e:0d:
                    c6:ce:73:7a:c5:28:fc:a7:dd:04:db:0c:83:49:24:
                    79:8d:f4:96:c1:d9:0f:ac:7a:bf:61:48:59:0e:02:
                    c2:ff:a0:26:2b:61:d2:af:e6:e9:5c:a0:0b:18:e6:
                    7f:3e:e5:61:2c:7f:6c:6e:a0:2e:70:7e:87:d7:69:
                    bc:2a:26:96:3e:b2:71:39:b7:1f:ee:eb:39:09:aa:
                    c0:a9:e4:a2:32:3d:98:53:1f:59:33:b1:83:7c:59:
                    ee:e7:96:10:65:31:14:fc:c8:ac:a8:af:74:a9:78:
                    3a:26:8c:14:84:d8:3d:01:a3:5f:56:bd:bc:a3:c2:
                    7d:4a:5d:5f:bf:3b:08:b4:5e:d0:d4:df:78:fa:c2:
                    22:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AC:83:8C:6D:8F:C6:70:A1:FD:E8:5F:2F:B8:7C:79:1C:E7:41:60
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/N6yDjG2PxnCh_ehfL7h8eRznQWA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e600::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:bb:7f:46:9a:ec:b6:2c:19:c1:25:79:8c:d7:c5:6d:2c:44:
         49:d1:69:c6:2d:45:51:44:27:18:11:2e:68:b0:9c:e5:8c:a6:
         7e:37:81:59:45:76:64:46:03:df:fb:24:be:03:39:50:be:e7:
         55:87:9d:e1:9d:72:40:a2:6a:70:4e:4c:71:7c:8e:3e:0a:b5:
         74:50:64:55:91:e8:a9:2c:24:d5:78:99:57:a1:3a:19:0b:b8:
         a6:91:90:fb:b0:03:72:0c:68:fb:e2:63:f9:37:b6:41:61:52:
         5f:36:c0:50:5e:da:02:54:d3:c1:df:30:48:1c:26:ba:99:ec:
         9b:ef:9c:5d:ac:1c:d0:51:c1:ec:c5:c9:fb:36:19:86:fd:e1:
         7e:d2:cc:cc:cb:d5:ca:82:2b:b2:a0:61:9e:62:8d:1f:01:53:
         9e:66:a7:0b:d0:14:74:7d:4e:f4:4f:3e:87:e9:0a:66:87:ad:
         e8:7c:4f:19:9b:2f:d5:48:33:2e:ee:5a:b7:71:57:7c:6c:7a:
         ec:37:c5:f7:e4:16:97:30:9d:ac:a6:2b:73:32:62:a9:91:8a:
         84:ce:f4:48:c8:51:f9:03:01:03:fb:9e:88:e0:34:61:e6:47:
         64:b3:0b:91:11:eb:f9:b9:21:2f:8f:51:cc:b4:cc:66:17:85:
         62:40:ff:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org