Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Po8YUdxJnO7s3LYKid8gLkAY9lE.roa
File:                     Po8YUdxJnO7s3LYKid8gLkAY9lE.roa (raw, json)
Hash identifier:          DFC0egjnCIOwjzcgayTKDz1x4W4SIUr3O5IMsFnkr+c=
Subject key identifier:   3E:8F:18:51:DC:49:9C:EE:EC:DC:B6:0A:89:DF:20:2E:40:18:F6:51
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01A6
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Po8YUdxJnO7s3LYKid8gLkAY9lE.roa
Signing time:             Tue 30 May 2023 17:36:23 +0000
ROA not before:           Tue 30 May 2023 17:36:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=3E8F1851DC499CEEECDCB60A89DF202E4018F651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:34:a4:aa:c7:c8:07:41:ef:79:94:33:96:19:
                    f0:23:b4:d4:0a:35:fa:3a:0b:3a:9b:87:59:4a:de:
                    d8:4d:28:28:c0:b0:21:fd:c1:3a:25:30:01:f3:96:
                    85:0e:d7:a1:e6:ce:2a:90:3f:c2:92:a4:83:d9:34:
                    39:fd:da:e8:b6:7b:46:74:b8:2f:ff:dd:fc:ed:27:
                    a8:76:cc:fa:30:0b:1a:38:e5:31:fb:dc:15:a5:b4:
                    5d:ca:12:41:6e:93:a7:1e:e0:a0:f8:c4:85:ff:75:
                    78:b1:01:7a:f4:6a:da:91:78:df:7d:7f:bd:43:e2:
                    48:90:81:c2:cd:9d:30:c8:1f:59:90:15:04:b2:33:
                    1c:de:50:2c:ca:e3:1d:6a:d8:ca:0c:fe:c2:b7:11:
                    fb:87:d0:ce:5d:a1:47:44:3b:a0:7a:8e:51:f1:61:
                    60:09:a6:b0:71:50:c1:12:ba:05:49:b8:67:cc:5a:
                    ed:8d:ae:17:5d:47:bd:59:59:6e:18:68:88:9e:50:
                    2e:a8:11:6d:c7:7b:98:b6:ff:5d:49:07:63:c2:88:
                    cf:30:be:bc:e8:7f:f9:ab:28:dc:cc:b3:83:05:5a:
                    e2:e4:0d:a0:6c:8b:89:70:37:c9:e3:b6:9a:61:6f:
                    8e:77:61:45:14:32:3f:9b:c2:c6:b1:a3:f6:18:4d:
                    c7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8F:18:51:DC:49:9C:EE:EC:DC:B6:0A:89:DF:20:2E:40:18:F6:51
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Po8YUdxJnO7s3LYKid8gLkAY9lE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c400::/40

    Signature Algorithm: sha256WithRSAEncryption
         8d:92:3a:26:36:bb:66:66:c1:2a:8b:9f:31:f2:93:c1:f3:16:
         d7:e2:65:79:f1:23:9b:bc:3e:b4:b2:6d:4e:98:aa:f8:7f:6f:
         08:57:52:b9:c8:e8:cf:2f:69:64:aa:11:9d:1d:6e:b5:7d:d3:
         02:44:58:51:5c:5d:e3:62:ea:f3:16:1f:8e:a6:43:a2:b2:57:
         36:c9:eb:15:b3:28:cf:77:96:1b:73:43:dd:0a:b4:1e:e3:93:
         ae:fd:6a:8e:bc:dd:9e:8a:2c:3e:3a:5b:0f:06:f9:4d:24:91:
         90:30:4a:04:6b:3b:ba:7c:7f:d7:23:76:dc:4e:3e:f0:1a:19:
         0d:41:81:75:86:80:54:b8:f3:10:aa:54:64:4d:84:ba:6c:60:
         c0:2e:58:d6:d5:07:40:7f:41:dc:a6:00:70:06:ed:31:21:d5:
         9e:76:9f:23:eb:1a:af:12:85:79:ab:5c:ae:59:bd:f1:cc:0a:
         33:14:c7:60:8d:fa:ec:c7:3e:64:3e:ee:04:b2:f0:f7:44:96:
         62:d8:3f:74:c7:e1:4d:23:58:18:59:6d:3e:e2:b5:eb:a0:a9:
         68:28:ad:15:04:2b:6a:c1:f9:ce:7f:89:a4:4d:9f:f5:bb:9c:
         4d:90:1f:3b:af:34:53:e2:84:16:6d:a9:1a:47:5b:25:fc:07:
         a4:e7:89:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org