Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/X0qD5epey1_B8GwI3xKhV7Qfyvg.roa
File:                     X0qD5epey1_B8GwI3xKhV7Qfyvg.roa (raw, json)
Hash identifier:          iABWCPNuNs0FSf7jp/k73PD1V+A9dYR9LH6si7TczUU=
Subject key identifier:   5F:4A:83:E5:EA:5E:CB:5F:C1:F0:6C:08:DF:12:A1:57:B4:1F:CA:F8
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       9A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/X0qD5epey1_B8GwI3xKhV7Qfyvg.roa
Signing time:             Tue 30 May 2023 16:08:17 +0000
ROA not before:           Tue 30 May 2023 16:08:17 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:cd00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:17 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5F4A83E5EA5ECB5FC1F06C08DF12A157B41FCAF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ee:66:3d:45:3c:12:9c:58:ab:b8:86:4d:75:
                    ae:8a:f6:6f:58:3b:ba:ed:41:48:f6:50:bb:4c:7e:
                    ab:de:13:68:da:f4:dc:9f:a0:7d:eb:c4:0a:fc:36:
                    15:81:e5:a3:51:d9:ef:0f:51:ab:b0:7d:4c:1b:7e:
                    d6:d3:8e:ac:da:a3:7c:99:a4:e1:ce:69:44:62:75:
                    46:37:6a:b9:2c:0b:fd:dd:d0:23:b8:9f:2c:a8:d2:
                    70:f4:25:e5:a6:38:01:c5:98:ac:d4:af:ec:40:1f:
                    18:84:64:bf:98:88:66:f6:2e:de:9c:19:a1:80:ab:
                    7f:c9:b7:98:48:24:08:4b:fb:45:41:32:af:d3:a6:
                    97:5d:cc:cb:18:ee:bd:1a:45:fe:09:24:bb:ae:e1:
                    55:8f:dd:80:2b:e4:1a:50:1a:32:bb:d0:d1:81:b5:
                    35:3f:cf:2e:4f:b5:ca:da:ed:e1:ce:a8:3f:8c:68:
                    ab:30:16:37:ba:c1:6a:6d:5b:b3:6e:01:0b:7c:d5:
                    14:ad:ec:3c:67:b3:4e:37:26:b1:75:7d:48:9f:39:
                    0c:21:6d:25:4c:c8:29:42:13:c3:a6:11:94:fc:0c:
                    2e:14:56:c5:8d:b5:82:04:21:36:05:4d:8e:93:af:
                    46:11:a1:52:b7:94:8b:36:75:68:c4:01:17:f0:ec:
                    73:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4A:83:E5:EA:5E:CB:5F:C1:F0:6C:08:DF:12:A1:57:B4:1F:CA:F8
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/X0qD5epey1_B8GwI3xKhV7Qfyvg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:cd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         41:99:95:9a:24:03:6f:8d:88:62:c5:c1:bf:a2:39:cf:f7:12:
         23:26:fc:89:e0:d7:a8:f5:67:f5:9e:c9:f5:6a:01:47:ca:8b:
         aa:d5:90:04:e9:81:ac:15:c8:de:e6:75:68:bc:31:25:0c:06:
         40:c0:88:92:74:e0:2e:3f:19:91:cc:65:20:31:59:33:c6:09:
         34:58:bb:6b:52:2d:07:d1:31:f2:c6:2c:08:8e:53:e4:41:f7:
         4e:ce:4f:72:0a:47:64:35:f7:68:0b:90:d7:79:34:0a:63:81:
         50:de:88:86:c3:89:6a:14:89:47:a4:9f:5e:1d:70:b0:8c:7e:
         da:cc:25:a3:43:57:5f:2e:b4:7f:f3:40:c5:82:e2:dc:97:78:
         ef:19:e0:8c:1f:35:45:5c:d4:5f:3f:73:56:25:81:6b:97:a1:
         7c:f9:68:22:82:87:13:d8:d8:d0:c1:fd:ca:f6:7b:37:08:a8:
         a5:1d:10:5e:26:2e:ec:a1:54:70:11:23:76:77:0d:aa:b0:9c:
         19:75:59:c8:55:5f:fd:fa:b5:85:41:68:ef:bc:e7:e4:f4:cf:
         56:66:9d:f5:c0:23:c4:50:aa:39:bd:8b:ac:50:bf:3d:e0:fb:
         e7:fd:1e:4a:ca:5d:58:60:a1:ff:f4:39:6e:18:37:a5:0a:fe:
         db:a6:b0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org