Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Om3egmf2uxnQD_z2G8FLRyjt3OU.roa
File:                     Om3egmf2uxnQD_z2G8FLRyjt3OU.roa (raw, json)
Hash identifier:          gYDt2bh1NTA4fVm4KGaBldRbdp3W+4JOX6C1vJHp9e4=
Subject key identifier:   3A:6D:DE:82:67:F6:BB:19:D0:0F:FC:F6:1B:C1:4B:47:28:ED:DC:E5
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       58
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Om3egmf2uxnQD_z2G8FLRyjt3OU.roa
Signing time:             Tue 30 May 2023 16:04:23 +0000
ROA not before:           Tue 30 May 2023 16:04:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9100::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=3A6DDE8267F6BB19D00FFCF61BC14B4728EDDCE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:69:c8:de:4f:ac:f0:4a:dc:fb:8b:59:a0:3d:
                    2c:7d:eb:83:30:eb:55:54:c6:fd:e1:2e:d8:ac:5e:
                    f8:84:82:dc:82:22:af:f2:36:21:36:ab:fe:75:58:
                    08:ab:f3:58:8f:b9:0d:b2:b5:45:63:d7:23:56:94:
                    ce:e7:25:c1:6c:f1:be:f0:10:19:5f:28:c3:bc:53:
                    07:3b:c6:4e:0b:46:17:da:a1:ad:fc:92:b7:dd:60:
                    d4:fe:d4:f1:51:eb:2f:85:2b:ed:ca:9c:3f:2b:38:
                    ef:f9:f0:60:f3:14:a6:b4:41:18:a0:fc:a6:7c:1e:
                    82:d1:e2:44:13:d2:cf:f0:f9:ae:fd:0c:6d:cf:86:
                    dc:8a:42:ec:6b:30:39:15:e3:e7:e9:76:3e:48:e8:
                    04:85:9b:ee:0b:0d:d6:19:a9:68:be:03:02:1b:79:
                    98:53:74:54:94:c4:54:d8:aa:7f:5b:a0:83:82:99:
                    62:6a:da:8b:04:ee:25:29:d6:1f:57:7d:fb:c6:6c:
                    17:79:4e:e7:23:19:c6:b5:b8:06:d9:5f:c6:c3:cf:
                    33:6a:09:2c:be:ac:6a:42:62:43:4d:c0:08:3a:28:
                    05:8b:82:c7:ea:aa:e3:3e:54:d4:e3:07:d5:2a:18:
                    21:66:6c:18:35:ca:cc:f2:1d:fd:0c:fc:2d:d4:c7:
                    de:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6D:DE:82:67:F6:BB:19:D0:0F:FC:F6:1B:C1:4B:47:28:ED:DC:E5
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Om3egmf2uxnQD_z2G8FLRyjt3OU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9100::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:e8:ed:9c:a0:ce:79:6d:99:26:ea:cc:f4:bb:e9:a8:9d:27:
         53:92:c7:eb:9e:1e:ef:0c:e7:8d:1f:70:01:d6:e0:e8:76:bc:
         f7:b8:a0:14:91:87:d7:ed:f2:3c:cf:f1:8d:f8:fb:0e:fe:a7:
         82:a1:d9:58:21:be:c9:6a:c1:0c:89:3d:70:e5:b7:9f:9f:02:
         7f:96:05:16:59:36:fd:14:5a:34:f8:3f:eb:d7:ab:54:57:96:
         f8:de:a4:19:fa:fa:e9:08:91:34:81:95:be:e7:31:3d:dc:49:
         99:ff:1b:02:53:66:81:cd:d7:89:1e:6e:83:77:32:5c:ef:c6:
         d0:86:12:6c:b6:f4:57:d3:f5:4e:30:03:98:3a:dd:43:ed:1e:
         49:f0:90:95:c3:65:51:f9:c1:5f:19:a1:29:64:eb:ce:7d:4b:
         f1:ec:1c:1d:9d:5a:22:5a:1a:32:0a:be:e5:24:84:21:c2:94:
         9e:08:89:3c:c1:e0:6c:17:2b:61:a4:2b:03:3e:20:9a:c5:69:
         97:4d:b5:0d:c0:06:fb:cc:44:a7:4f:72:fc:90:44:29:88:32:
         b8:46:cb:93:28:28:a8:4b:df:4e:e5:ed:70:5e:60:f9:68:5e:
         07:50:56:3f:9d:df:e5:f9:85:7a:ad:97:b5:5e:44:85:97:ea:
         27:d0:f4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org