Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Vm2B73xBzvze9kRr-Ff5nvfGmSY.roa
File:                     Vm2B73xBzvze9kRr-Ff5nvfGmSY.roa (raw, json)
Hash identifier:          1OgVAT7vZnXPCx2x6wc924+HIJuCtl1uymhPxRViO1w=
Subject key identifier:   56:6D:81:EF:7C:41:CE:FC:DE:F6:44:6B:F8:57:F9:9E:F7:C6:99:26
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       72
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Vm2B73xBzvze9kRr-Ff5nvfGmSY.roa
Signing time:             Tue 30 May 2023 16:06:20 +0000
ROA not before:           Tue 30 May 2023 16:06:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=566D81EF7C41CEFCDEF6446BF857F99EF7C69926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0e:cf:72:3e:d7:70:a9:b9:71:58:f1:de:a5:
                    e5:cf:8a:a4:fa:0d:6c:76:5d:ef:a5:28:e6:33:9e:
                    ae:4d:29:c2:e9:a4:2f:83:47:6a:f4:91:22:96:97:
                    c9:32:3b:3f:6b:74:e6:63:68:18:8b:c8:25:f5:41:
                    8e:1b:b8:13:0e:1e:8d:36:3f:a4:a0:6f:ad:79:8a:
                    72:3d:37:7e:fe:61:4a:e1:d3:c3:cb:65:dc:90:25:
                    03:ca:fd:23:5a:3c:8f:a0:4c:4a:d9:68:6a:62:60:
                    cd:e0:51:76:d8:01:8f:ad:19:d1:6f:00:31:a4:8f:
                    ff:52:35:12:11:26:65:50:e4:08:68:1f:26:56:81:
                    42:52:08:e9:85:41:5a:4d:7c:95:84:ac:aa:36:e9:
                    c1:35:44:d8:5d:51:e1:b4:c0:2e:14:13:5b:fe:e2:
                    b4:e7:5d:ea:36:71:1b:77:2c:6d:a1:10:98:ec:a3:
                    1c:7c:47:4f:94:02:5a:10:9b:6c:2d:a8:56:88:7b:
                    62:62:1e:22:08:2c:f0:d7:6f:df:e9:c9:db:1a:fa:
                    52:8f:dd:26:47:48:6f:1f:d4:8b:03:08:5c:1e:5b:
                    e4:3d:a2:ca:0a:4c:7e:82:4d:1a:97:df:11:3f:70:
                    80:52:ac:56:a5:88:88:a6:71:a3:9d:75:81:60:2f:
                    13:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6D:81:EF:7C:41:CE:FC:DE:F6:44:6B:F8:57:F9:9E:F7:C6:99:26
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Vm2B73xBzvze9kRr-Ff5nvfGmSY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:86:f0:d1:7a:31:7a:67:c1:82:f1:34:35:d1:02:02:7f:d0:
         5b:6b:04:e1:51:16:3d:52:89:b8:a2:63:a9:43:3e:44:f6:ef:
         0d:70:02:6c:81:26:88:81:e8:2f:83:48:a6:10:fa:dc:72:e9:
         f8:60:3e:54:16:2d:41:9f:c2:5a:c3:60:01:af:08:20:bf:49:
         8d:cc:f9:c3:f1:eb:bd:88:ea:38:49:31:eb:bb:7e:62:64:71:
         11:aa:24:9b:1a:50:2c:16:5e:56:7d:7d:e3:c8:54:1f:8a:d3:
         44:d2:0c:89:ea:4a:07:0f:ea:6b:b7:37:e1:e8:2c:a5:50:3d:
         1b:a4:86:a8:47:2c:21:e1:23:e7:b2:1d:4b:50:8d:b6:c1:92:
         b5:45:e3:a0:92:f6:db:71:84:91:1c:d2:47:f0:72:9c:a9:9a:
         2a:0c:22:bb:da:b3:e7:24:8f:fa:d2:fc:89:cd:7b:ba:12:50:
         f0:26:7d:ec:98:50:2d:c0:c2:da:fe:72:c9:b8:4f:67:47:b3:
         7a:9a:2a:0c:6f:4e:df:04:0e:27:6f:de:ce:81:8c:88:cd:d9:
         20:e9:c5:55:55:9d:4a:5d:05:d7:22:2d:31:91:6c:f8:53:f5:
         21:c6:1f:0a:f5:67:e0:4b:e5:09:d1:99:0f:93:c8:4e:cb:2e:
         c4:0b:5d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org