Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NmPUFjOdufbbb6n0o_hQofEXjzU.roa
File:                     NmPUFjOdufbbb6n0o_hQofEXjzU.roa (raw, json)
Hash identifier:          Z7W/ci+pEMqafRkYYQS54+aYPDqbeMQMLbiqDScxRHs=
Subject key identifier:   36:63:D4:16:33:9D:B9:F6:DB:6F:A9:F4:A3:F8:50:A1:F1:17:8F:35
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01A9
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NmPUFjOdufbbb6n0o_hQofEXjzU.roa
Signing time:             Tue 30 May 2023 17:36:25 +0000
ROA not before:           Tue 30 May 2023 17:36:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:cf00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=3663D416339DB9F6DB6FA9F4A3F850A1F1178F35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:1f:41:66:df:01:f9:1a:c0:44:21:5f:71:
                    f5:0a:08:3a:94:b9:77:cf:e8:ff:b4:bc:09:c1:38:
                    e6:10:ab:76:6d:42:a1:af:5d:71:26:38:43:48:b8:
                    47:8f:5b:21:bd:9e:ef:a8:04:f2:6e:6a:a1:fc:8a:
                    60:b2:3d:05:d5:fa:e7:35:b4:a2:bf:1f:8c:8a:92:
                    c6:33:f2:11:f7:58:60:3c:14:16:48:1e:cf:bc:6a:
                    76:43:f4:ad:22:ca:25:bf:e9:f7:74:18:f0:4e:27:
                    ec:9b:8b:7a:9d:1a:14:1f:ee:85:64:78:3a:f7:04:
                    0c:15:7d:ca:a6:d4:ce:df:1c:c2:d6:08:de:dd:0b:
                    31:26:01:b3:4c:67:8e:4f:c7:e9:8b:de:be:aa:5c:
                    a7:ee:f0:39:01:25:ab:d6:96:b4:ad:25:e8:b1:51:
                    6a:25:7e:68:0d:82:42:47:8d:80:27:d9:cc:0f:04:
                    da:99:b9:45:58:10:9a:ab:5b:05:30:b9:12:53:64:
                    49:08:fa:c1:15:c4:c2:44:97:0f:54:e6:b9:a6:5b:
                    f8:65:33:45:3b:52:5e:4f:f4:8b:4d:23:e4:63:d1:
                    87:d1:cd:a5:fa:9a:1c:5d:c5:bd:88:fc:02:c2:cc:
                    3b:a0:9f:04:09:65:eb:8b:96:23:c8:34:5a:a1:3c:
                    48:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:63:D4:16:33:9D:B9:F6:DB:6F:A9:F4:A3:F8:50:A1:F1:17:8F:35
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NmPUFjOdufbbb6n0o_hQofEXjzU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:cf00::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:8a:f5:cc:4f:2b:79:d8:ea:f7:93:50:08:df:25:46:d7:ae:
         56:6a:73:35:ed:a5:c4:97:e9:96:64:89:9c:c3:c8:24:10:22:
         93:40:0f:7a:44:a4:11:c4:fb:05:cd:9e:89:46:a3:3f:2f:43:
         4f:15:e4:6d:53:f9:99:c7:f5:fc:74:50:31:a3:73:ff:62:99:
         e5:e8:e3:5b:95:c5:f8:55:24:e4:7d:54:86:8a:ed:ca:19:45:
         65:50:83:dc:37:5e:fa:e5:b7:64:ad:cc:25:5e:66:d6:15:64:
         72:a4:67:1c:50:86:d3:00:db:d4:76:ff:92:a0:66:18:e4:ba:
         36:6f:cf:47:80:28:0b:a2:4f:e8:4e:c7:67:56:77:d6:8d:5c:
         d5:64:88:15:bb:f5:fd:dc:e1:a5:8b:e2:02:67:4a:54:4f:08:
         d5:b1:1c:cb:b3:e7:8c:63:75:8b:d0:a6:a1:4d:24:c6:c3:55:
         62:ad:be:a0:ca:72:9f:32:68:09:99:f8:32:47:ba:8f:51:16:
         20:9e:fe:38:ad:bb:b2:1c:06:23:09:e4:56:ac:f1:7a:cc:a1:
         38:b2:9f:fe:48:82:31:7c:f9:9e:90:30:d3:99:4e:8c:ea:9d:
         e5:2b:43:68:20:30:a1:a0:3c:2a:50:cf:00:08:45:9a:00:3b:
         6a:d2:58:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org