Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UinX-XXScPc1NSUwc6nVB-iFw2A.roa
File:                     UinX-XXScPc1NSUwc6nVB-iFw2A.roa (raw, json)
Hash identifier:          3/GTBBDcuBKi0a1YiOKVczKkPvDWBNbwGfF0TlRPw+w=
Subject key identifier:   52:29:D7:F9:75:D2:70:F7:35:35:25:30:73:A9:D5:07:E8:85:C3:60
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       BF
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UinX-XXScPc1NSUwc6nVB-iFw2A.roa
Signing time:             Tue 30 May 2023 16:10:13 +0000
ROA not before:           Tue 30 May 2023 16:10:13 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ca00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:13 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5229D7F975D270F73535253073A9D507E885C360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7e:75:4f:d2:b9:c9:18:f6:b2:ca:e7:11:94:
                    bb:85:7d:41:6b:4f:32:c1:66:fc:2b:f7:1b:b0:3c:
                    81:a6:f1:de:ba:9d:49:ca:37:d2:ad:7c:87:b9:3a:
                    06:00:a8:7e:98:ab:51:aa:28:b4:1b:bf:5f:56:8c:
                    c7:44:3b:55:50:b2:94:c1:26:76:56:3d:e2:e2:f8:
                    60:24:1b:97:64:7c:42:aa:dd:b9:29:45:0f:2f:44:
                    f9:e0:7a:0a:9b:75:77:92:d3:e2:e1:18:50:fb:56:
                    62:61:c5:b1:01:1a:28:26:1c:55:54:b7:59:b3:6f:
                    29:9d:27:57:c4:4d:4e:c3:33:7d:07:67:14:e4:2d:
                    ec:a1:9d:39:94:e7:ee:28:9a:db:5f:cc:f6:d0:cf:
                    d6:92:2d:91:1e:57:07:36:59:93:47:c6:79:7e:bf:
                    3f:b1:1f:f6:84:c2:df:20:6b:8f:fc:7e:08:3b:27:
                    4b:07:1a:d0:21:80:ca:f3:0c:32:f7:09:cc:06:52:
                    58:f9:1b:4f:f8:74:1b:97:5a:2f:a8:aa:ad:74:ec:
                    45:0e:d9:51:82:b1:68:80:fb:96:87:7e:a9:f2:25:
                    07:e1:eb:aa:07:7b:69:8b:3a:a3:06:b7:4e:fa:d3:
                    d6:73:13:1e:09:f7:4f:20:78:41:4c:35:dd:84:10:
                    35:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:29:D7:F9:75:D2:70:F7:35:35:25:30:73:A9:D5:07:E8:85:C3:60
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UinX-XXScPc1NSUwc6nVB-iFw2A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ca00::/40

    Signature Algorithm: sha256WithRSAEncryption
         80:ad:7e:6d:87:5c:39:0f:5b:f1:7e:ab:3a:2d:07:13:7f:a2:
         77:72:e4:84:c5:4c:56:30:29:d0:2a:ba:96:63:c0:38:94:a2:
         44:31:70:65:25:95:ed:55:8a:f4:c7:31:eb:78:58:2f:a9:66:
         68:aa:93:2c:b9:5f:d2:96:4d:ba:58:f2:50:4e:d0:8a:3e:48:
         10:2f:a7:4c:97:ab:bf:6d:17:36:52:dd:19:ab:3c:83:9e:80:
         fd:f8:7b:6f:9e:00:0d:3e:9c:f2:24:2b:de:4e:88:0c:cd:af:
         43:7c:a4:40:33:0f:b2:00:50:d9:33:fa:70:b1:c0:eb:77:82:
         2f:cd:f3:d0:f6:22:15:71:89:02:d0:7b:b8:12:19:50:ac:31:
         d3:ce:78:43:04:2e:d9:65:43:4d:bf:3d:22:8f:4e:5c:32:15:
         72:8f:b0:6c:a6:b6:e3:12:e2:2b:a1:75:4c:4f:50:e9:4b:e7:
         98:25:e8:00:8a:20:a4:54:24:9e:b5:77:7f:ac:65:90:87:82:
         8f:c9:1e:19:75:cd:f2:3c:f9:97:6a:94:93:c1:d5:20:d2:df:
         63:d1:dd:14:94:1e:f7:12:06:a6:0a:c1:a1:df:0c:82:ed:02:
         87:d6:28:f8:84:ec:4f:5e:f0:d2:b9:d1:f9:11:97:e2:2c:0e:
         c0:35:50:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org