Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RdvnjoQ4dojLlsrMtLapAIhV5ZU.roa
File:                     RdvnjoQ4dojLlsrMtLapAIhV5ZU.roa (raw, json)
Hash identifier:          QG6v8MLIVL7ByWhJtFpmrUXgCSubhnI+6mJ2LogIh8M=
Subject key identifier:   45:DB:E7:8E:84:38:76:88:CB:96:CA:CC:B4:B6:A9:00:88:55:E5:95
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       B3
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RdvnjoQ4dojLlsrMtLapAIhV5ZU.roa
Signing time:             Tue 30 May 2023 16:08:25 +0000
ROA not before:           Tue 30 May 2023 16:08:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3e00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=45DBE78E84387688CB96CACCB4B6A9008855E595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:74:b2:fa:1a:0e:2c:da:b1:10:11:5e:b4:1b:
                    74:41:98:e8:8a:ae:67:99:f2:c8:80:79:0c:a7:61:
                    c5:d0:16:ba:cf:5d:5f:ce:71:39:54:b8:da:29:c0:
                    23:08:1d:91:2b:85:c2:c8:cf:d5:5d:25:26:d6:17:
                    0a:ef:1f:6f:04:ae:69:0f:94:91:ec:7b:a2:0a:d7:
                    e8:e7:5d:cc:7e:94:a4:47:cf:36:20:38:bd:38:8e:
                    ad:87:38:07:fd:f3:cb:2c:2a:23:07:b7:c8:a5:08:
                    a2:69:4d:15:61:7d:96:d8:84:93:38:99:b9:37:b8:
                    3b:10:e1:15:dc:bd:94:1c:2f:d6:f7:d5:d1:2f:af:
                    95:e4:b5:2c:e5:2a:ce:26:5e:1e:04:4f:cb:a8:48:
                    a7:20:e7:73:95:2c:0f:9c:d3:f4:36:31:32:87:ce:
                    eb:7a:06:49:df:eb:df:8d:35:af:9c:06:91:a2:79:
                    fd:f4:3b:1c:5a:f2:e9:f2:1a:e2:b1:2e:1f:7f:c9:
                    04:21:db:9d:ea:56:77:5a:35:fd:c3:b1:6a:6b:d6:
                    ab:7e:5b:5a:d2:4b:55:c7:fa:5a:a1:2f:70:5c:63:
                    94:db:2c:e0:8a:a7:6f:43:c5:60:fe:7a:15:9c:08:
                    17:6a:d7:2f:e0:84:2b:ad:22:e5:06:27:35:34:86:
                    ce:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DB:E7:8E:84:38:76:88:CB:96:CA:CC:B4:B6:A9:00:88:55:E5:95
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RdvnjoQ4dojLlsrMtLapAIhV5ZU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:ef:1e:8c:6f:27:26:0a:31:4e:c4:d5:39:80:62:1d:68:b0:
         ed:20:4c:7c:9f:b7:c2:04:8a:90:a5:f9:23:9e:ed:5c:d7:23:
         4a:a6:77:6d:96:cf:05:c0:ba:21:7f:97:3b:fc:8a:1d:79:90:
         bc:35:9f:a8:ee:f3:d0:21:70:92:bc:8f:3a:e4:64:c0:f2:c1:
         02:6e:f7:25:83:58:06:d4:1d:83:91:7d:70:1e:41:b5:cc:05:
         fc:a9:08:c0:ae:41:15:12:c5:92:fb:99:d5:04:06:f1:f3:21:
         83:69:2e:44:61:b5:df:5c:5e:5b:aa:f7:d5:b6:5f:e0:b0:c9:
         76:24:70:03:46:36:99:02:e6:5d:b3:f9:8d:32:c0:8b:b5:be:
         97:90:80:9c:ac:71:4c:0b:fc:66:fd:61:ee:51:65:28:6a:56:
         94:73:50:8b:48:7c:19:0c:f7:65:0c:be:81:51:dc:7d:5c:a7:
         4d:07:4b:c2:b3:13:90:eb:fd:c6:b7:20:21:18:21:fd:f8:26:
         28:76:07:e1:27:03:db:56:21:7c:d8:15:00:7e:41:af:a1:98:
         c5:8e:fa:be:b0:a4:70:b8:1d:1b:16:43:fb:0f:48:15:3b:63:
         57:90:4b:0c:b2:67:74:e8:75:c0:da:e9:26:df:19:d2:86:7b:
         eb:07:03:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org