Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OzEhPfsE0LKW5P_njXp-8sH1fLU.roa
File:                     OzEhPfsE0LKW5P_njXp-8sH1fLU.roa (raw, json)
Hash identifier:          PAmYt7o9ZqrkVfzHnGQF1nN1rQsaQxzU/yUgtEYHZj4=
Subject key identifier:   3B:31:21:3D:FB:04:D0:B2:96:E4:FF:E7:8D:7A:7E:F2:C1:F5:7C:B5
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0155
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OzEhPfsE0LKW5P_njXp-8sH1fLU.roa
Signing time:             Tue 30 May 2023 17:32:28 +0000
ROA not before:           Tue 30 May 2023 17:32:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:600::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=3B31213DFB04D0B296E4FFE78D7A7EF2C1F57CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:08:71:3d:57:1e:0f:01:5e:ea:da:38:b2:a1:
                    0c:d9:19:53:60:23:82:14:bc:f6:c8:03:a5:3b:2a:
                    a5:f8:34:99:b5:02:3a:59:18:07:1e:22:df:d8:72:
                    60:06:75:25:87:81:b2:f6:db:75:7d:a7:99:ca:6b:
                    eb:2e:83:69:75:c3:92:1c:2f:de:ca:aa:21:5c:27:
                    b4:5b:b7:a0:48:de:f0:3a:4f:e9:e0:a4:57:1b:3b:
                    b7:fa:65:1c:44:be:72:7b:3a:48:ba:15:3c:99:0b:
                    a7:a9:98:91:56:4a:c3:dd:e9:7f:0b:db:0f:82:5f:
                    9a:5d:9a:c7:bd:20:67:46:74:ad:a4:05:76:07:df:
                    15:94:ce:ea:c8:04:c4:d7:83:bd:39:8e:57:77:31:
                    fc:25:23:76:ea:35:1e:9a:5d:b6:b5:05:7e:fc:b1:
                    a8:23:a7:ed:9b:93:fe:8b:c5:14:18:ff:0f:f7:63:
                    7c:5f:e7:ba:31:df:08:55:25:12:37:1f:58:a6:6f:
                    69:8f:05:a0:89:18:28:0a:d3:9a:f5:60:92:28:6e:
                    7b:a6:c5:b9:ce:6f:5a:35:80:10:fd:75:01:b1:fc:
                    16:0a:15:0c:df:3a:f5:59:c7:80:9e:68:25:45:85:
                    a5:5f:3c:65:8b:0c:46:bc:bb:e1:b2:48:8c:02:d2:
                    44:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:31:21:3D:FB:04:D0:B2:96:E4:FF:E7:8D:7A:7E:F2:C1:F5:7C:B5
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OzEhPfsE0LKW5P_njXp-8sH1fLU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:5b:58:73:06:c8:7d:ca:ce:6f:78:f5:9d:1d:93:2f:4f:a3:
         d2:41:b1:ae:5c:1e:4e:4a:14:0c:73:10:8e:7f:90:de:79:7f:
         1e:4b:e4:48:3e:0e:60:3e:53:7a:5d:04:d8:23:0b:32:49:9b:
         62:ba:5c:c4:b0:3c:de:41:30:71:2f:ab:49:0d:bb:2e:97:98:
         3d:cd:40:b8:ab:14:5f:76:4f:87:e5:1c:45:c3:d5:12:49:0f:
         d5:49:d0:f3:91:e3:f1:70:77:f9:af:cf:91:82:66:2a:9a:35:
         73:6d:f2:f7:fd:25:c0:6c:4d:c6:bf:a9:fb:af:ff:6a:2b:b0:
         01:bd:39:c4:7f:ac:7c:4f:13:d6:4e:c5:c4:99:74:cf:6c:a1:
         b0:47:37:94:20:af:15:45:15:70:9c:c0:3e:cd:60:75:0c:f9:
         6a:f8:47:50:0d:04:9c:cf:db:5d:85:99:4e:b8:87:4f:59:06:
         0a:d0:35:7b:d1:1c:ea:97:8c:05:80:0f:ee:76:95:8c:f6:c7:
         94:85:b8:b8:49:4b:43:30:32:52:19:d8:56:e8:c1:ab:39:3d:
         e4:02:34:dd:f0:5a:2f:fe:50:3c:a9:86:12:d7:46:81:1a:b9:
         3d:b3:2d:28:49:4e:a7:97:d4:fd:de:8d:e3:fe:7f:46:dd:f3:
         96:5f:41:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org