Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Q6rmvV_LdYfzqo3x6gZyJdz48Tg.roa
File:                     Q6rmvV_LdYfzqo3x6gZyJdz48Tg.roa (raw, json)
Hash identifier:          kh5zLZXqaI38XmyTsvqUEO+YE1QccZamfqWNXjS2zow=
Subject key identifier:   43:AA:E6:BD:5F:CB:75:87:F3:AA:8D:F1:EA:06:72:25:DC:F8:F1:38
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0150
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Q6rmvV_LdYfzqo3x6gZyJdz48Tg.roa
Signing time:             Tue 30 May 2023 17:32:26 +0000
ROA not before:           Tue 30 May 2023 17:32:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:fe00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=43AAE6BD5FCB7587F3AA8DF1EA067225DCF8F138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:95:0e:78:25:55:c4:e4:d2:59:87:66:1f:d3:
                    b1:78:98:66:2a:d9:8b:8e:a1:98:99:8f:5d:d8:3f:
                    36:1b:12:04:47:a2:c4:ec:da:af:59:7d:5a:42:b3:
                    68:68:6c:d6:66:3e:71:f1:94:d6:78:c9:ed:aa:c8:
                    7f:ca:33:3f:85:c6:04:ae:e6:e9:ad:f4:05:d3:7a:
                    df:82:f5:21:6b:46:0d:ea:8d:9e:21:a9:0f:23:76:
                    3d:ec:a6:2b:c9:98:29:b8:4f:19:8e:71:49:39:53:
                    f3:75:8b:59:8e:72:fd:3f:f2:b4:80:f7:5c:9a:fb:
                    fb:80:46:4d:d2:ce:9a:bf:f7:c2:88:c8:48:f1:39:
                    c8:e2:be:2f:12:5b:a3:64:86:47:89:b8:da:6e:31:
                    c9:8d:47:c4:46:c9:1a:be:b1:e0:f8:93:99:4a:fc:
                    e4:a4:7f:55:52:55:80:20:cf:40:be:76:91:51:5f:
                    7f:36:f1:bc:c4:da:f3:3a:0f:c8:4b:91:67:eb:36:
                    f9:26:a8:55:16:5b:ef:10:60:b2:1a:cb:e2:1d:8f:
                    b7:4e:61:28:10:f2:50:c6:f9:99:52:48:3d:08:ef:
                    82:52:48:4c:56:78:f3:62:49:ba:76:cc:74:1d:1c:
                    6b:a3:86:7f:8d:ae:9b:3a:b2:fa:f0:f7:9a:69:52:
                    21:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AA:E6:BD:5F:CB:75:87:F3:AA:8D:F1:EA:06:72:25:DC:F8:F1:38
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Q6rmvV_LdYfzqo3x6gZyJdz48Tg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         38:4e:72:52:51:ed:aa:a8:8f:45:66:94:f4:60:3c:7c:59:96:
         84:45:be:5f:ca:ba:e2:6d:cc:c6:3b:0b:e6:3d:16:7c:c0:e1:
         2e:60:78:29:81:3e:af:52:44:9f:5b:52:69:44:53:21:33:2d:
         1f:c4:9a:db:a4:b4:25:b8:8e:66:92:94:1f:c8:84:a3:5c:24:
         16:78:5c:a0:f1:94:5f:83:c8:7c:7a:cb:8d:aa:18:a0:f4:56:
         d4:65:2d:fa:35:23:61:1d:d4:14:17:4e:a4:d4:91:a4:5c:6b:
         6b:41:06:cd:1d:d1:86:a6:d3:fa:45:d4:7d:fe:ce:d1:f8:29:
         7d:99:7f:c1:00:b7:19:a4:27:d8:d1:cb:fa:f2:b7:45:fd:5b:
         29:da:aa:88:73:fa:8c:53:c8:f1:38:c6:f0:1b:26:54:46:6f:
         4d:31:3f:55:fb:2a:58:01:bc:2d:c0:d2:1b:87:bd:f5:bc:18:
         e0:10:49:a9:ab:e4:aa:ff:c3:6c:6f:08:d0:d0:15:e8:a6:b5:
         83:50:8b:be:05:90:57:f4:ff:8b:2a:f5:8f:f3:21:ec:a2:33:
         cd:d9:c3:47:c2:89:f6:56:26:46:6e:b0:f3:58:7c:25:10:e5:
         82:dd:d6:77:41:a6:77:4c:d6:78:f8:94:fd:8b:84:bd:dd:ad:
         9e:ea:67:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org