Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XC_ILYi0NZBuBLG5szjEj3Ml-0M.roa
File:                     XC_ILYi0NZBuBLG5szjEj3Ml-0M.roa (raw, json)
Hash identifier:          Tp16AKvIf5GNuwS0GWE64Z46bt4aocWbxGMhF6TaOfY=
Subject key identifier:   5C:2F:C8:2D:88:B4:35:90:6E:04:B1:B9:B3:38:C4:8F:73:25:FB:43
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01F4
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XC_ILYi0NZBuBLG5szjEj3Ml-0M.roa
Signing time:             Tue 30 May 2023 17:38:35 +0000
ROA not before:           Tue 30 May 2023 17:38:35 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5600::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:35 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5C2FC82D88B435906E04B1B9B338C48F7325FB43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fd:2d:6d:04:a4:43:ef:69:48:7c:03:0f:7e:
                    01:29:0f:93:99:18:a5:44:25:87:cb:7a:e1:31:45:
                    a8:13:94:14:d6:13:23:b2:ba:77:f6:b4:50:91:e2:
                    0c:5a:d5:1c:6d:2d:f6:66:c9:17:34:37:e8:71:a6:
                    e2:c7:35:59:8b:3b:fa:6b:17:35:47:26:f0:51:84:
                    a1:7b:91:b6:f7:95:81:d0:4d:11:a9:50:19:6a:4f:
                    1d:e4:24:66:17:80:0e:b9:b3:f6:73:9a:6f:d3:8c:
                    57:cd:59:1a:09:a8:56:02:1c:b6:f5:d4:b5:ba:31:
                    18:6c:88:7a:6e:41:44:14:8b:25:14:97:17:f7:36:
                    3b:1d:9d:14:ec:73:b1:da:9c:38:40:5d:0d:fc:9d:
                    37:07:93:17:6c:5c:ce:5b:40:55:96:78:e0:b1:ae:
                    91:7a:fe:dc:7b:63:75:6b:17:bd:3b:f2:f5:13:fd:
                    24:1d:8f:22:da:d6:25:87:8e:32:9e:a6:12:89:c7:
                    67:39:0c:d7:32:de:e9:7e:c2:09:a7:d5:10:d2:df:
                    32:1e:d5:51:51:39:03:57:4d:79:5b:98:02:98:a0:
                    bd:e1:47:85:8d:7e:ab:60:1a:0c:52:49:54:82:f6:
                    9b:d3:9b:3a:21:c0:fd:ff:1d:4c:81:2f:c3:ea:19:
                    7d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2F:C8:2D:88:B4:35:90:6E:04:B1:B9:B3:38:C4:8F:73:25:FB:43
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XC_ILYi0NZBuBLG5szjEj3Ml-0M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5600::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:c4:03:bc:87:2d:2a:0e:a1:90:2e:89:6d:80:79:65:c8:9f:
         88:2d:80:d5:85:22:34:b4:d3:01:13:8f:19:8d:84:12:70:0b:
         c1:55:0a:60:39:b2:92:c4:1e:f9:23:93:d5:2b:db:25:27:82:
         25:8c:61:33:b0:17:12:7d:9d:87:8d:a0:aa:dc:4f:46:dc:a9:
         78:c0:f2:69:72:86:c7:d6:33:44:69:07:08:c8:22:18:15:c7:
         a5:b5:84:67:f9:95:0a:42:cd:ff:1a:24:71:e2:02:2a:32:f1:
         36:a8:a7:0f:2a:35:86:f3:69:a1:e6:b3:34:44:82:cc:1f:d8:
         48:46:e0:38:ff:21:8e:31:d6:48:61:b2:d8:33:f9:4d:87:e3:
         81:74:cb:13:cc:ac:5e:6d:87:08:4a:f4:f1:9b:6f:8a:9b:ea:
         f7:6f:da:c5:2e:51:39:11:82:0b:b5:a1:e7:99:f0:91:3c:c4:
         50:1d:3b:f5:07:53:ed:b6:39:aa:57:49:aa:ea:f1:e5:40:f9:
         19:6b:fd:90:a6:7d:6a:51:55:32:cc:cf:52:8c:65:fe:e6:76:
         7e:05:54:38:d6:64:00:09:32:7b:85:b0:6c:ac:f0:4c:f4:c0:
         77:0f:90:16:c8:97:b8:97:dc:02:a4:96:c1:4c:25:15:be:77:
         16:08:58:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org