Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/VdfMmuZaX5cGn2l2PR-fz9_6cc0.roa
File:                     VdfMmuZaX5cGn2l2PR-fz9_6cc0.roa (raw, json)
Hash identifier:          ZYWBTXv3LQtoQcOvZTqbbNaufngofX0LMIKzMAa7Erg=
Subject key identifier:   55:D7:CC:9A:E6:5A:5F:97:06:9F:69:76:3D:1F:9F:CF:DF:FA:71:CD
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01B7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/VdfMmuZaX5cGn2l2PR-fz9_6cc0.roa
Signing time:             Tue 30 May 2023 17:36:30 +0000
ROA not before:           Tue 30 May 2023 17:36:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4000::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=55D7CC9AE65A5F97069F69763D1F9FCFDFFA71CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:20:22:2f:2c:10:e6:a2:fb:7f:4b:d8:14:c5:
                    a4:2b:bc:46:47:44:bb:32:14:4a:9b:04:e3:14:13:
                    05:72:29:59:53:2c:8e:17:ec:99:e0:b2:75:71:24:
                    24:fd:62:d3:02:40:ad:47:16:dd:f7:2a:15:2d:e3:
                    1b:ff:b2:32:51:a6:b4:9a:a4:e8:0d:6f:1c:5f:63:
                    29:31:ac:d0:45:f3:94:c6:31:a3:92:63:4d:e8:53:
                    7f:1f:8e:76:3b:5f:01:77:cc:9e:7e:93:7b:ff:26:
                    04:7e:b2:93:fc:1b:3b:d8:53:43:3c:1a:3e:5e:8d:
                    1b:43:c0:6b:c2:c0:fe:4b:7f:ce:c3:39:f3:08:e1:
                    fe:d4:7b:3d:f3:7b:06:d2:47:d7:49:9d:c8:e6:db:
                    4d:52:30:e8:19:9d:af:5d:e3:84:21:f9:02:96:a4:
                    b1:50:cb:4d:5c:ff:95:3f:23:ee:64:3a:27:2e:fc:
                    d8:bb:9f:8b:ba:a6:2e:52:85:a8:67:68:54:4e:b7:
                    18:42:41:9f:97:b3:2a:bd:32:0f:2a:a0:d1:0b:ba:
                    69:d2:7b:ae:8b:b1:d2:c1:0e:ca:eb:7a:8a:10:ac:
                    3f:05:e9:a2:e9:2c:0f:4d:cc:cb:6e:97:33:ee:37:
                    7d:9a:5e:1e:9f:7b:13:ac:d1:1c:ed:1d:a8:ae:fd:
                    d6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D7:CC:9A:E6:5A:5F:97:06:9F:69:76:3D:1F:9F:CF:DF:FA:71:CD
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/VdfMmuZaX5cGn2l2PR-fz9_6cc0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         66:f3:91:84:48:4f:bd:93:ef:b4:63:3f:27:cd:34:15:cc:2c:
         07:4a:e5:9e:73:3b:90:88:78:1e:47:ac:8d:8a:4d:4b:68:32:
         99:76:ca:29:1f:38:a1:fc:06:cc:b0:18:df:31:ef:4d:23:6c:
         8c:c9:89:d0:1e:f0:bb:d4:9c:8a:12:fd:71:d1:d7:fe:e8:37:
         b0:0b:53:84:92:ad:27:cd:3d:8b:37:c5:0b:58:3d:07:2e:e4:
         39:55:23:42:bf:0c:19:b6:95:a1:f7:7c:06:d7:24:89:ba:d4:
         62:74:39:c4:33:01:a0:ce:a9:dc:5b:70:64:f1:b3:43:39:6f:
         87:4c:5f:ee:6f:7a:c1:3a:14:8e:b7:ac:d3:02:43:58:45:4f:
         8c:72:3d:3b:2a:87:b5:9d:fb:60:a2:7f:b2:ca:b4:d8:98:a3:
         32:84:1d:75:66:76:d9:c9:e9:0a:67:26:7d:c0:40:18:11:7e:
         99:1e:98:eb:55:70:f7:f8:49:f2:fc:2e:27:d2:ef:1a:04:fd:
         14:21:c5:47:48:db:ce:15:03:59:78:79:0c:7f:c0:1c:23:79:
         23:3e:31:1f:bb:0b:dd:f3:0b:38:c5:d4:c9:80:2c:61:00:d4:
         bd:03:b7:a9:6d:00:bb:c8:0d:51:65:51:b0:8e:a2:f9:18:d8:
         f7:c4:71:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org