Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/N8gReFUAw1pfXLBe79jIxtMTHZY.roa
File:                     N8gReFUAw1pfXLBe79jIxtMTHZY.roa (raw, json)
Hash identifier:          Z5nynujnAqRnq9i0yKc6oX5Uoyv2oFLZZA7TpxtvNrQ=
Subject key identifier:   37:C8:11:78:55:00:C3:5A:5F:5C:B0:5E:EF:D8:C8:C6:D3:13:1D:96
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       39
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/N8gReFUAw1pfXLBe79jIxtMTHZY.roa
Signing time:             Tue 30 May 2023 16:02:12 +0000
ROA not before:           Tue 30 May 2023 16:02:12 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3700::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:02:12 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=37C811785500C35A5F5CB05EEFD8C8C6D3131D96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:42:46:13:67:7b:ad:df:07:bf:4f:32:17:17:
                    9b:dc:d9:2d:4f:fc:ca:78:f7:a5:b1:10:ad:ea:e7:
                    cb:32:98:d9:46:02:46:7b:ea:74:9e:8d:43:b1:10:
                    04:d9:0a:55:b5:38:5b:99:dc:4f:d7:f4:7b:b0:10:
                    ed:42:b3:ec:1a:0a:bb:d0:ca:4e:95:46:44:ce:57:
                    c6:02:52:c3:dc:26:22:81:70:05:49:9c:2a:3a:18:
                    9b:43:27:1d:2b:57:92:75:e2:8c:1c:a8:1c:a6:75:
                    33:9a:10:11:6b:6f:de:7a:70:df:fa:40:d2:67:96:
                    05:a6:2d:c8:d9:1f:a8:f1:b8:a6:f4:d1:ee:5d:90:
                    f9:49:42:43:bc:14:73:3e:fb:13:80:bd:f8:c5:41:
                    64:fa:9a:37:86:1c:00:da:63:6f:13:67:a9:9f:eb:
                    a8:64:fd:3a:20:f2:be:69:44:5c:63:97:4d:57:73:
                    82:f8:13:22:b7:ce:a0:18:c6:78:9b:4e:33:e8:91:
                    80:28:4f:c3:b2:11:f0:84:1c:12:08:b7:fa:69:5f:
                    d1:e0:01:78:69:96:6b:da:04:ad:4d:3a:9e:c9:ea:
                    ea:a9:53:86:e6:96:58:70:a9:b3:d2:af:7f:ed:89:
                    fd:b8:40:cd:bf:d6:84:69:e3:73:a8:67:c0:83:60:
                    a8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C8:11:78:55:00:C3:5A:5F:5C:B0:5E:EF:D8:C8:C6:D3:13:1D:96
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/N8gReFUAw1pfXLBe79jIxtMTHZY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3700::/40

    Signature Algorithm: sha256WithRSAEncryption
         90:fd:c8:00:eb:78:8e:5c:ba:ee:0d:cc:23:66:50:42:fa:66:
         79:44:ed:5c:50:1d:0d:26:86:21:d6:c8:23:2a:40:b9:15:9d:
         71:09:72:1e:57:c3:75:4e:67:fd:5d:d7:05:cd:d5:20:ff:0e:
         ab:04:79:dc:1d:24:b3:f3:fc:9c:45:04:6d:fa:6e:3d:56:48:
         9c:01:40:70:9e:93:47:e7:0b:88:74:eb:26:9a:41:f5:f6:b4:
         9b:21:9e:dc:97:4b:e3:9f:c9:37:aa:ae:eb:4c:30:4e:48:10:
         be:07:9d:87:10:90:f0:07:67:35:f6:a5:bd:ea:0a:59:0d:dd:
         05:e5:85:d7:f8:8c:1c:93:36:78:4d:33:5d:7d:ee:04:27:ce:
         dc:df:ac:60:f2:22:60:12:d1:63:6b:1e:96:05:e0:be:80:25:
         ef:52:53:9d:c7:7a:09:94:1d:1c:eb:ce:42:70:63:2d:33:df:
         e0:15:f1:e6:47:b9:d6:77:69:73:a3:1b:32:86:ac:1b:8e:eb:
         bb:ca:29:7d:02:79:05:8c:56:0e:6f:94:68:e9:45:a5:7d:5f:
         85:e8:a2:ce:0b:67:f2:3e:aa:40:31:41:bc:c4:4e:5a:7a:3a:
         72:35:1b:e4:fa:0c:ce:64:db:81:87:de:1a:13:15:21:fa:1c:
         04:e7:fe:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org