Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SHILXeDdHCgNGSFTUf7ygnuxvTU.roa
File:                     SHILXeDdHCgNGSFTUf7ygnuxvTU.roa (raw, json)
Hash identifier:          YtJy3KVR3zlbQSEaHOvjg9wYf1yhQ9EtFAkeJe9B094=
Subject key identifier:   48:72:0B:5D:E0:DD:1C:28:0D:19:21:53:51:FE:F2:82:7B:B1:BD:35
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       CF
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SHILXeDdHCgNGSFTUf7ygnuxvTU.roa
Signing time:             Tue 30 May 2023 16:10:19 +0000
ROA not before:           Tue 30 May 2023 16:10:19 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:3:b90::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:19 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=48720B5DE0DD1C280D19215351FEF2827BB1BD35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b1:04:33:59:4a:80:a1:9c:c0:ab:57:a8:33:
                    15:e2:6a:66:11:dc:86:ff:75:23:d6:6c:31:fe:47:
                    8b:bd:b2:73:78:b5:23:54:9c:72:91:12:ab:0f:ef:
                    94:76:8c:e0:12:26:76:13:e7:19:4b:0f:0f:32:07:
                    81:78:c7:76:ec:e0:b7:df:3f:e9:e3:7d:89:5b:ac:
                    77:03:b0:69:e6:27:85:49:0c:be:36:7a:46:09:d4:
                    e3:c6:a9:d2:0a:56:28:3d:15:64:11:6a:a3:b0:89:
                    91:60:3a:1e:b1:b4:f9:0a:1a:2d:46:bd:ac:e0:b6:
                    48:13:ed:41:27:04:d9:50:95:d4:da:39:2d:1f:4d:
                    ee:3a:df:94:84:74:f6:e2:10:d9:7b:f5:18:35:11:
                    cb:90:6a:cf:ec:c3:76:84:7d:b9:7d:40:07:ec:3e:
                    1e:4c:f4:a9:38:64:2c:2b:27:dc:c7:af:9d:e3:40:
                    11:71:87:da:4a:f7:3d:b8:f6:c1:28:13:fd:4e:6b:
                    42:af:fd:66:c2:11:34:8b:de:35:1f:20:aa:ba:ae:
                    11:7b:dd:7d:6a:88:5e:89:98:e3:df:e0:64:fd:f2:
                    71:5b:69:b8:2e:33:2f:a5:4b:e3:c4:72:69:3c:b8:
                    de:f9:10:1a:e9:58:e1:d3:0e:ac:0a:c0:1e:a7:81:
                    78:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:72:0B:5D:E0:DD:1C:28:0D:19:21:53:51:FE:F2:82:7B:B1:BD:35
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SHILXeDdHCgNGSFTUf7ygnuxvTU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:3:b90::/44

    Signature Algorithm: sha256WithRSAEncryption
         b4:77:71:cf:aa:8f:6a:e7:45:4e:e1:0d:05:ef:8b:f5:51:da:
         e0:d2:55:09:68:4d:83:17:8f:f6:ae:6f:2b:fb:94:62:30:f9:
         67:02:8d:28:ad:b3:46:a7:a4:46:00:0d:1a:a2:31:32:7a:cb:
         33:f3:a0:88:90:27:98:a6:2f:67:b5:e4:a5:b2:79:29:57:ad:
         aa:8a:60:fd:bd:b2:8d:8e:19:19:2b:10:79:31:02:6a:e6:31:
         a8:33:47:e7:13:03:a7:e1:a6:c7:92:03:ab:8a:63:fe:34:0a:
         c2:b1:92:3b:eb:28:56:b5:bc:fb:37:1f:b8:1a:59:52:89:f6:
         67:40:59:98:36:63:5c:8b:7d:5c:5d:f7:9a:6e:95:ec:0c:85:
         4e:62:2e:da:80:17:a6:11:7a:58:fa:ab:e0:c1:7c:70:14:07:
         45:1e:6b:23:d7:ca:31:fc:0c:3d:d0:86:31:03:a4:87:c3:01:
         fb:65:e3:87:ab:f4:be:a7:28:6e:d4:9f:27:1e:59:f6:f4:74:
         37:79:d4:87:f5:53:88:9c:53:7e:65:53:1c:a4:09:89:6f:15:
         15:9a:4e:38:2f:1d:eb:4a:d8:7d:53:f9:6e:7d:24:7c:79:08:
         54:99:04:23:ff:6a:37:45:4f:79:dd:24:6b:41:66:b9:68:45:
         3a:3f:69:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org