Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ua7drI7GHhTZFeidL5Pu035Vpts.roa
File:                     Ua7drI7GHhTZFeidL5Pu035Vpts.roa (raw, json)
Hash identifier:          Fs4H5/l87PhI0YWknh37spS9iuqhvRG8XQJVJyunP7w=
Subject key identifier:   51:AE:DD:AC:8E:C6:1E:14:D9:15:E8:9D:2F:93:EE:D3:7E:55:A6:DB
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0211
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ua7drI7GHhTZFeidL5Pu035Vpts.roa
Signing time:             Tue 30 May 2023 17:40:27 +0000
ROA not before:           Tue 30 May 2023 17:40:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6e00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=51AEDDAC8EC61E14D915E89D2F93EED37E55A6DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b1:ab:fc:96:e6:12:26:b4:52:3a:c0:11:f5:
                    8b:20:9d:ed:e5:e1:9d:32:0e:d4:89:e2:ac:29:48:
                    75:1b:e3:65:44:4a:90:38:09:e0:c9:70:72:ed:c1:
                    41:ab:26:b3:86:58:d1:b8:86:99:25:f0:4f:c4:2a:
                    70:77:91:85:fb:9a:26:cc:be:29:9f:48:08:92:a3:
                    41:c6:27:21:a5:c0:7a:ad:ca:0d:13:c1:35:03:d3:
                    a7:b8:37:f1:ae:47:b9:fa:0e:02:c3:b9:94:9d:56:
                    8b:62:af:df:13:31:87:c9:4e:64:99:b3:0c:60:1e:
                    4b:e8:ac:d6:e9:da:0f:b6:16:7e:25:7b:ae:e3:96:
                    b2:c3:ef:1d:51:93:76:cc:f8:73:60:28:28:2d:a6:
                    d6:78:b2:99:a8:f1:e2:d8:44:95:6a:dc:e1:70:6d:
                    b7:e0:73:42:30:fe:d5:4f:e2:89:ac:53:72:da:e6:
                    4c:71:05:8c:b1:8e:48:54:b5:ae:d0:09:7f:cf:7e:
                    44:e3:d2:28:7e:19:f9:a8:08:c4:21:6f:8c:64:a2:
                    70:1d:cd:9f:43:ac:f9:83:7b:da:61:11:74:39:13:
                    46:4f:ac:77:89:d1:d5:ae:b9:fa:4b:4c:f4:84:6d:
                    1a:7f:45:d6:eb:d8:23:ad:41:67:68:67:9c:0d:9f:
                    b7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AE:DD:AC:8E:C6:1E:14:D9:15:E8:9D:2F:93:EE:D3:7E:55:A6:DB
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ua7drI7GHhTZFeidL5Pu035Vpts.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:9e:f9:24:19:fe:0f:7d:7e:5e:62:35:e4:e8:d4:b0:86:38:
         ba:88:6c:ea:bb:b5:cc:0b:b0:01:94:89:eb:a3:9a:7b:37:90:
         10:38:27:5d:83:7e:16:c4:b7:79:f1:02:b7:9f:f1:99:da:6a:
         02:a5:3f:18:34:ab:3c:ac:60:cf:50:e1:62:11:d0:6f:d3:12:
         4c:1b:ba:45:c8:fc:d7:c6:4d:aa:8a:b1:f6:0c:94:b5:b9:a8:
         31:ac:c0:0f:4c:ae:d5:b8:64:b4:a1:cb:64:1e:ea:80:78:e5:
         e0:0e:3a:b8:5e:50:93:4e:4f:75:bd:c5:8c:a0:bd:8b:52:ba:
         cf:a3:7e:70:7d:20:5f:fd:69:cb:56:73:01:7a:e6:2e:04:52:
         3d:7d:62:bf:b8:16:1b:e7:9d:4d:c2:a9:b2:35:2a:74:99:8a:
         6a:04:9d:2e:77:0e:da:dc:96:b9:e2:b2:d3:8f:14:cb:97:51:
         fa:56:b9:52:33:a4:e2:33:93:d7:de:35:76:29:b6:d2:cc:93:
         c3:a0:eb:c5:4b:0f:53:0e:2c:7f:37:83:35:8d:08:c2:1d:5d:
         ba:03:c0:89:e6:c7:13:7e:b0:41:bd:7d:eb:eb:3a:c5:69:de:
         7f:9f:11:e9:8c:f5:65:28:1c:03:c8:b3:36:21:9b:50:6d:3a:
         41:d2:eb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org