Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/VMp8B8jGvXe-xGJUhFQFxeGH80k.roa
File:                     VMp8B8jGvXe-xGJUhFQFxeGH80k.roa (raw, json)
Hash identifier:          3HbZc7vrF057CCCKPy7Br1iABwUwALqsTuASFUVEIJc=
Subject key identifier:   54:CA:7C:07:C8:C6:BD:77:BE:C4:62:54:84:54:05:C5:E1:87:F3:49
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0154
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/VMp8B8jGvXe-xGJUhFQFxeGH80k.roa
Signing time:             Tue 30 May 2023 17:32:27 +0000
ROA not before:           Tue 30 May 2023 17:32:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a500::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=54CA7C07C8C6BD77BEC46254845405C5E187F349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:a5:b5:b4:6d:9e:21:fc:a9:2b:bc:eb:58:
                    35:40:0c:6b:37:61:3f:f5:09:bd:84:4a:e4:7a:2d:
                    17:e2:47:68:63:e3:77:9c:b5:cb:b7:45:22:90:cd:
                    7e:48:05:4c:df:5d:fa:9f:fc:b9:04:10:8c:f8:27:
                    e7:95:5b:b4:4b:8e:63:73:1a:27:fd:44:1f:23:0a:
                    c0:10:55:e9:94:3f:b2:e7:ba:17:79:05:ed:0b:80:
                    d8:42:42:49:57:b7:e5:32:6b:a1:b9:c8:61:a7:d5:
                    02:c6:a8:ce:1c:fa:19:c0:26:cb:b5:fc:f7:d1:c4:
                    ab:0a:0c:2a:4d:66:a0:a5:d0:5f:a4:1d:a3:14:49:
                    eb:98:6f:2c:89:ed:90:f5:3e:cd:03:a8:00:e5:49:
                    60:f4:e4:41:db:07:10:8a:a7:87:ed:79:95:e1:01:
                    42:5a:15:23:97:0a:ed:47:e2:fd:5b:93:e1:b5:c2:
                    80:0f:0b:e5:14:60:0a:70:a0:95:07:56:5b:71:55:
                    50:33:56:5c:05:8d:7f:7a:72:b1:d0:4d:89:bf:72:
                    50:69:44:6f:41:87:e6:9a:74:ba:8e:47:2b:68:83:
                    5c:75:31:04:ca:32:f2:e3:75:90:31:55:86:84:5c:
                    41:93:89:dc:e4:e4:a2:40:e9:77:e3:7a:f7:6d:d4:
                    97:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CA:7C:07:C8:C6:BD:77:BE:C4:62:54:84:54:05:C5:E1:87:F3:49
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/VMp8B8jGvXe-xGJUhFQFxeGH80k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a500::/40

    Signature Algorithm: sha256WithRSAEncryption
         5a:94:94:81:77:8c:19:01:ec:20:88:17:32:a3:03:35:64:33:
         ce:11:e1:39:c3:76:07:a9:70:69:65:1b:7f:53:d9:43:cc:c4:
         2e:73:da:b6:5e:95:c9:12:d4:43:5a:c4:f7:cc:1e:9f:f3:69:
         3e:dd:6e:ff:5d:a8:44:39:22:2b:b2:3e:23:ff:00:94:b7:96:
         cd:18:4c:9b:f2:3b:2e:89:65:4f:67:4c:11:65:87:f7:88:da:
         1c:7e:b2:a1:3c:53:a8:e7:ee:c5:49:9c:0d:1b:57:ea:2b:6c:
         4e:3e:0f:3e:c6:fc:8b:ed:53:81:e3:87:8c:a5:5b:d8:d5:78:
         a4:57:39:1b:48:cd:30:b8:f6:fa:2c:74:87:6d:7c:4d:2a:43:
         d9:ee:8c:3b:e0:8b:81:f2:15:85:f7:6b:b2:ce:fb:f1:08:2a:
         a4:66:a8:a9:13:54:64:70:e6:da:6d:a4:7b:ea:dd:0e:83:7a:
         dd:f1:1f:ce:ca:96:03:b2:16:a3:ba:b2:3c:5e:e5:d6:44:b8:
         a2:c7:66:6c:54:6f:f0:19:71:78:6f:0b:38:ad:0c:ef:22:70:
         61:bd:01:5b:64:99:cb:0d:4f:41:64:64:a7:56:67:23:ce:88:
         4d:da:67:dd:59:9f:26:41:a3:13:24:f2:ce:a1:38:b4:95:de:
         3d:27:61:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org