Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WtLYsh1d5mpdNiltBTMzKwHUB2s.roa
File:                     WtLYsh1d5mpdNiltBTMzKwHUB2s.roa (raw, json)
Hash identifier:          vSFpter7hi6br7C7USBoJhCT/AB8kZCjtIKxdIu1ECw=
Subject key identifier:   5A:D2:D8:B2:1D:5D:E6:6A:5D:36:29:6D:05:33:33:2B:01:D4:07:6B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0168
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WtLYsh1d5mpdNiltBTMzKwHUB2s.roa
Signing time:             Tue 30 May 2023 17:32:35 +0000
ROA not before:           Tue 30 May 2023 17:32:35 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2f00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:35 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5AD2D8B21D5DE66A5D36296D0533332B01D4076B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:c7:45:bf:46:9e:1b:20:b8:fa:f7:f7:2d:
                    0a:77:d6:3d:79:2b:af:bf:58:9f:56:8f:6f:1c:e5:
                    a4:02:d1:f1:c1:60:77:82:e5:12:00:14:a1:5e:f8:
                    2e:8f:b9:d2:fb:36:a5:1b:c0:f5:5e:d9:c8:75:12:
                    44:b6:80:15:e8:83:d0:9e:b9:25:c3:48:bf:c6:be:
                    cc:65:8e:94:26:8a:15:d3:e1:e4:08:8b:fb:c5:71:
                    b0:cb:c8:93:38:d1:c7:fb:67:d1:3e:ed:df:57:61:
                    a8:4b:70:51:9e:46:58:0e:5c:c4:33:08:52:9f:4a:
                    7e:c9:18:7c:6c:c6:dc:1d:ce:11:78:84:ea:2f:67:
                    e6:b5:a5:4f:5f:6b:ce:80:19:4d:09:3d:d3:59:f4:
                    5d:69:44:d9:33:1b:9c:8a:b5:c4:d1:2f:a5:c7:b7:
                    77:78:a9:fb:70:08:3d:0d:54:75:93:66:43:c6:37:
                    06:fe:d5:84:ef:05:16:6d:62:b8:16:21:53:5b:c7:
                    d9:7b:93:56:af:2b:97:16:b6:70:97:79:98:df:19:
                    0d:f0:13:80:50:6c:d9:7b:72:24:8a:3d:6a:50:c5:
                    cd:47:e4:18:ca:08:06:63:3e:33:ab:b4:8c:56:0f:
                    6b:23:e8:5d:37:ff:84:42:ac:d7:97:06:c0:a1:a9:
                    57:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D2:D8:B2:1D:5D:E6:6A:5D:36:29:6D:05:33:33:2B:01:D4:07:6B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WtLYsh1d5mpdNiltBTMzKwHUB2s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6b:4e:d3:e9:79:91:43:96:9f:8b:5f:fb:53:70:b4:63:63:6f:
         f8:23:b6:69:3b:f7:d5:8e:e1:9e:67:d8:fd:ed:aa:ff:8c:5e:
         94:09:cd:db:ec:22:bf:e7:6f:5a:36:f4:d3:cd:76:a6:3d:70:
         02:11:32:d3:20:b4:7b:ca:a7:a0:98:a9:96:0d:87:0f:e1:c9:
         63:22:be:ce:d1:c4:13:8f:d1:d4:16:4b:8a:c5:8c:07:ee:7b:
         66:ea:3e:e1:e9:2e:a4:0b:0e:79:a6:3a:18:56:d5:23:ef:ad:
         95:92:3f:45:bf:6c:fa:70:2f:f2:e5:10:cd:60:0b:35:e0:e6:
         84:a9:d3:3b:a1:22:d3:2e:97:d9:d0:5a:9e:c9:f2:62:57:a5:
         29:46:0f:2d:97:e3:a8:7d:b1:0c:f2:01:cc:ab:fa:5c:bd:09:
         86:5f:c3:74:33:f7:66:2d:a2:d7:f9:7d:90:e7:65:d7:50:f4:
         58:8b:f8:95:c6:7a:a0:a5:63:ac:ec:40:07:7d:09:c6:bb:f4:
         4e:06:74:b0:33:b6:94:50:2c:87:92:92:50:92:2c:3e:a0:45:
         54:0b:96:74:69:d1:42:c5:a5:00:9a:8c:84:a7:9f:7b:73:33:
         91:4c:a7:d5:e8:65:81:62:29:23:52:49:4b:24:ce:c1:12:2e:
         4c:35:0a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org