Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XuGlXPnupw1UG6hDWBEyrx74LuM.roa
File:                     XuGlXPnupw1UG6hDWBEyrx74LuM.roa (raw, json)
Hash identifier:          MN7kpxgvRf0MsV8U1V9nfbrc0QDNOQ8UwgLgBhbm0N8=
Subject key identifier:   5E:E1:A5:5C:F9:EE:A7:0D:54:1B:A8:43:58:11:32:AF:1E:F8:2E:E3
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0170
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XuGlXPnupw1UG6hDWBEyrx74LuM.roa
Signing time:             Tue 30 May 2023 17:32:37 +0000
ROA not before:           Tue 30 May 2023 17:32:37 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8200::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:37 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5EE1A55CF9EEA70D541BA843581132AF1EF82EE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:14:ed:59:b1:2c:cc:77:8d:41:0b:8a:e7:50:
                    e2:f4:fa:32:f7:98:86:a2:a2:66:28:6d:4a:a9:4e:
                    8f:5d:f7:42:0b:aa:9e:65:ff:89:44:d9:0e:f3:db:
                    af:f3:1c:3f:11:36:fb:09:b1:1e:e0:ba:13:76:17:
                    83:95:e9:e8:33:b6:0d:a4:0f:11:55:32:49:ff:3b:
                    78:53:35:19:61:9b:e9:86:d0:48:36:61:51:20:8c:
                    ba:ce:9b:0b:60:40:00:ac:e7:01:e0:77:4b:d8:20:
                    89:9b:c5:56:99:5b:08:22:86:cf:17:83:46:2a:f7:
                    f9:e7:9a:e8:bf:c8:2f:5f:a4:a5:fe:ef:3b:c4:1f:
                    52:af:02:b6:69:3d:fa:9b:ec:10:6e:2d:6a:82:59:
                    aa:e7:7a:43:c3:7f:62:89:bf:ba:31:81:67:ea:40:
                    5e:a8:98:f9:fd:83:75:ff:de:27:54:ac:6f:bd:4a:
                    a4:b7:9e:2b:0a:b5:84:c1:f0:10:9f:d4:2e:87:6e:
                    e3:a7:66:56:b8:6a:61:9a:df:e6:0f:37:3a:91:e1:
                    fc:bd:38:64:b3:c5:c0:b0:bc:a1:93:09:8e:6f:7a:
                    31:58:7c:77:32:71:d3:16:cc:0c:28:fe:77:d5:05:
                    2f:78:fd:87:7a:6b:77:23:4c:02:a1:ac:31:08:ab:
                    f9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E1:A5:5C:F9:EE:A7:0D:54:1B:A8:43:58:11:32:AF:1E:F8:2E:E3
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XuGlXPnupw1UG6hDWBEyrx74LuM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:79:6f:8f:51:7f:54:4d:f1:01:89:96:e5:eb:09:64:3f:37:
         57:41:75:31:e3:64:ed:7a:84:3c:64:88:98:1d:32:4c:df:c5:
         fc:4b:91:0d:20:79:f4:a2:67:38:28:26:be:04:47:89:6a:21:
         f9:71:05:a1:dc:ae:0f:90:b1:ed:87:59:0e:d8:26:e2:1e:63:
         10:d0:04:8d:f5:a7:94:e5:c4:1f:bd:e3:98:75:74:0e:c1:47:
         30:c2:09:64:e8:66:11:4d:7e:4b:f5:60:c8:69:5c:f1:0a:70:
         b9:90:9b:b7:88:b4:56:de:1e:f3:69:3b:b3:e2:b1:29:02:1e:
         57:cc:c5:37:36:07:4e:96:2a:13:1c:ba:73:5f:35:28:7b:1e:
         e5:c4:d1:74:73:34:10:60:d3:85:dc:a9:78:a9:f6:cf:7d:e1:
         e3:cd:d8:af:70:f2:87:2c:fe:d2:39:78:d2:4d:e0:1b:3c:9b:
         5d:65:0b:79:23:d2:e4:e3:39:12:05:46:96:5c:15:3f:f6:42:
         f7:f6:d0:13:8d:45:1f:05:3e:1c:92:62:3d:75:29:22:5e:70:
         9e:24:0f:ee:a8:9c:f5:b6:98:34:83:4a:14:13:73:c0:9a:a8:
         57:4a:c3:17:6a:48:cc:66:1e:86:3c:5e:7a:2d:5d:86:ef:87:
         48:61:e9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org