Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NNynvXX-gsifFAUZvCuYOr6Ade0.roa
File:                     NNynvXX-gsifFAUZvCuYOr6Ade0.roa (raw, json)
Hash identifier:          zri4QqHHPaJFMUZqGwPHYGiEt7eM2wMoo+U3eK+yCq0=
Subject key identifier:   34:DC:A7:BD:75:FE:82:C8:9F:14:05:19:BC:2B:98:3A:BE:80:75:ED
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       3C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NNynvXX-gsifFAUZvCuYOr6Ade0.roa
Signing time:             Tue 30 May 2023 16:04:13 +0000
ROA not before:           Tue 30 May 2023 16:04:13 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4200::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:13 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=34DCA7BD75FE82C89F140519BC2B983ABE8075ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c1:4d:b4:bf:e1:4b:ee:0c:6a:bd:d8:a3:3f:
                    29:62:c8:83:77:6b:28:0c:82:ea:69:3e:89:64:14:
                    39:67:8f:26:a5:38:da:0e:52:6a:80:fe:51:fc:a5:
                    98:43:20:df:68:cd:42:df:8d:34:d7:2d:cc:07:b7:
                    18:00:bd:5c:3e:34:49:10:06:d0:47:8b:02:5b:06:
                    8e:7d:5a:23:9b:41:e7:19:5b:42:60:60:cc:28:20:
                    35:c3:03:fb:b0:eb:fe:a0:11:fe:a4:bb:2c:8e:ac:
                    7b:1a:d4:24:45:16:2c:ff:d1:e1:2f:1a:e8:d3:f6:
                    fb:47:c1:07:bb:af:96:c0:3b:3f:b9:a6:a6:3e:aa:
                    f5:33:20:fe:ed:95:d1:b6:2c:e2:1c:e7:25:09:d8:
                    82:15:b0:6d:6f:35:48:11:4d:9c:6f:6b:60:a6:0e:
                    5e:5a:05:4d:bc:19:c5:3e:cf:4d:05:46:ac:d7:a3:
                    4c:ce:de:6e:3c:55:7a:39:b6:ed:77:03:bc:2e:83:
                    8c:3b:5c:46:eb:5b:cf:25:d2:ab:70:57:4a:41:e1:
                    a3:5c:1d:34:b5:84:40:a5:58:87:62:36:a4:c1:1d:
                    68:08:2a:0a:db:fc:35:65:c0:62:0c:8a:e5:ea:2f:
                    dd:25:ac:6e:ad:e5:ce:94:a2:ee:e2:0c:fc:b8:09:
                    c7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DC:A7:BD:75:FE:82:C8:9F:14:05:19:BC:2B:98:3A:BE:80:75:ED
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NNynvXX-gsifFAUZvCuYOr6Ade0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4200::/40

    Signature Algorithm: sha256WithRSAEncryption
         9a:1c:cd:b7:06:ab:20:3a:c1:af:19:34:e6:08:70:51:d5:2c:
         ad:1d:11:48:e1:ab:61:08:92:89:c5:ed:13:53:75:73:de:e4:
         2a:fb:8e:e2:28:62:4f:47:b5:64:37:46:59:8e:db:8b:41:52:
         55:4d:f5:7e:b9:c3:f9:26:6b:9d:cc:e4:7e:92:42:d6:40:74:
         b2:27:e4:90:71:da:62:67:cc:f6:ef:8c:3d:9e:56:35:36:1f:
         fc:d2:17:f3:1b:a5:78:fa:af:f4:eb:cf:97:5b:e7:05:40:7a:
         30:4f:84:26:91:a7:5e:80:4b:bf:66:83:aa:5d:d6:26:fa:7b:
         77:1f:a7:35:ca:31:f4:3a:c4:33:2c:ee:f0:73:a3:4d:7e:0b:
         46:32:33:22:62:ff:27:3c:fe:5f:83:83:1c:17:7a:f3:07:0f:
         45:89:62:76:1a:54:b7:3d:e7:42:a9:e0:7c:bf:46:01:fa:a6:
         d9:8b:8f:d7:07:9f:48:27:c9:f0:aa:2d:a3:0e:26:67:51:2f:
         c7:ff:c1:45:87:b1:b0:05:bb:fa:f3:66:bf:e4:77:9e:72:33:
         b0:5b:69:93:90:fc:84:77:d9:0c:fb:2a:e4:fa:4e:b7:1b:4d:
         78:a9:35:4c:a6:82:a8:c5:83:4f:9d:14:ab:93:2f:34:d7:3f:
         88:1a:ab:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org