Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SfgD32mVL0AmX2QOd7NBErzI9Gs.roa
File:                     SfgD32mVL0AmX2QOd7NBErzI9Gs.roa (raw, json)
Hash identifier:          1dsXwtI2c9JkQUpfNtmIlmAv/aIhfCS2MaW59HHINt4=
Subject key identifier:   49:F8:03:DF:69:95:2F:40:26:5F:64:0E:77:B3:41:12:BC:C8:F4:6B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0176
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SfgD32mVL0AmX2QOd7NBErzI9Gs.roa
Signing time:             Tue 30 May 2023 17:34:20 +0000
ROA not before:           Tue 30 May 2023 17:34:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ba00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=49F803DF69952F40265F640E77B34112BCC8F46B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1f:38:21:2d:7c:3f:2e:34:7f:6c:c3:46:c3:
                    6f:01:a5:27:81:6f:6c:ea:17:2a:fd:6e:1a:c6:41:
                    9d:73:c7:dc:81:a9:e3:05:41:bc:37:24:79:f1:11:
                    45:be:6d:d8:eb:4b:23:b7:7a:78:44:77:ca:df:c0:
                    df:29:59:ce:c8:b1:be:b2:14:c6:82:35:63:b7:51:
                    0a:62:8e:80:49:a9:9f:68:29:a1:d4:01:d3:8a:9c:
                    a2:bd:22:d7:5e:8d:81:d0:ee:92:ee:e4:2f:e7:18:
                    57:f1:48:81:37:02:76:89:70:bb:82:e4:62:c9:f1:
                    94:ec:77:0d:ef:6b:99:12:e0:79:2a:8e:94:56:7c:
                    0d:e3:48:8d:33:d0:d2:ac:89:f8:b6:df:3b:e1:39:
                    39:19:80:97:44:1f:dd:ad:a6:3d:71:b4:d3:1f:6b:
                    c6:c7:b1:63:0a:0b:48:8a:1a:9a:48:20:b4:68:b5:
                    9f:b8:fd:1c:f0:78:ea:23:6e:db:af:9d:8c:91:aa:
                    e2:d3:73:2b:57:b1:f8:03:87:af:36:90:3f:e4:fe:
                    a3:11:55:f1:45:81:f8:a8:98:9b:3c:be:f4:5a:1b:
                    c7:e0:8b:ad:a5:d9:db:72:8b:bf:04:02:25:22:7e:
                    b2:4a:3f:dc:ee:bd:77:32:88:56:61:07:93:0a:eb:
                    a6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F8:03:DF:69:95:2F:40:26:5F:64:0E:77:B3:41:12:BC:C8:F4:6B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SfgD32mVL0AmX2QOd7NBErzI9Gs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ba00::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:49:b6:27:0c:3d:22:9b:4e:00:9d:69:33:b5:53:4b:c0:93:
         28:40:5f:3f:bb:61:7f:59:e5:2a:c7:4d:47:83:7e:93:cf:f5:
         7d:de:4d:b1:0d:a6:da:d9:f7:5e:0a:c4:8b:72:eb:aa:e2:54:
         96:85:de:47:22:22:7f:19:6d:f7:32:65:a1:83:c1:ca:59:a8:
         39:64:b5:94:88:69:bd:97:c9:ad:08:09:f0:0c:f0:f3:d2:f5:
         70:08:9c:78:89:90:8c:c5:f2:52:d5:b4:7a:08:63:ea:3e:76:
         a5:d4:1c:25:e9:57:06:b1:7f:c8:8d:9d:ee:ad:7a:8a:ec:ec:
         3a:ea:98:34:4d:cb:a0:08:7a:06:f8:55:cd:b5:b5:9a:ee:00:
         b8:1a:71:15:12:c9:ca:ba:bd:38:2d:22:85:e5:e9:9e:a3:06:
         2f:fa:9e:88:47:f2:38:6d:3d:41:2c:1a:18:65:84:11:3e:8f:
         1a:d4:4e:1b:bc:19:31:c7:7f:89:15:1d:d0:d6:85:b1:5f:64:
         d4:62:27:5e:c1:61:26:aa:05:c0:47:57:02:2a:e3:0f:e8:f4:
         b7:d4:eb:be:bf:00:97:33:d2:47:d7:ed:0f:45:2b:eb:c1:41:
         15:53:48:f6:e0:99:18:69:24:84:c9:b8:50:e5:3f:65:b0:3d:
         65:06:a7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org