Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YcSuvWDjbQeAuQFIWV582HjNIQU.roa
File:                     YcSuvWDjbQeAuQFIWV582HjNIQU.roa (raw, json)
Hash identifier:          UGZ9B+4Ec+JpD82jJNBFRK9IAf4c9uTmtRuaLkiZQ2M=
Subject key identifier:   61:C4:AE:BD:60:E3:6D:07:80:B9:01:48:59:5E:7C:D8:78:CD:21:05
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0128
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YcSuvWDjbQeAuQFIWV582HjNIQU.roa
Signing time:             Tue 30 May 2023 17:29:56 +0000
ROA not before:           Tue 30 May 2023 17:29:56 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9e00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:29:56 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=61C4AEBD60E36D0780B90148595E7CD878CD2105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ab:6b:1f:75:03:f9:0a:9a:b7:a7:d6:9f:68:
                    4e:d3:89:56:9a:90:08:a2:d3:ec:81:34:85:46:27:
                    87:dc:1e:5e:f6:99:6b:13:cb:64:83:d0:d4:f7:e3:
                    d2:b9:26:52:e1:aa:4c:1d:a1:80:7d:26:6f:ed:13:
                    21:65:3f:bf:97:27:f9:f3:36:ff:0a:84:79:cc:26:
                    8d:9a:ce:98:0d:d8:d4:51:4a:ab:32:6e:5f:1d:e9:
                    fd:33:9b:6a:16:b6:53:6c:70:e5:d8:70:29:6b:63:
                    9e:60:2b:9e:66:f2:c9:7d:52:5a:3e:49:84:b0:c3:
                    67:c2:0b:ce:7a:2f:c7:12:56:3a:97:44:b3:e2:57:
                    8b:4f:38:02:58:10:88:87:b4:92:6d:a9:aa:dd:72:
                    e6:34:5a:c2:df:0c:57:e5:14:33:a5:81:23:45:da:
                    ca:43:22:46:ea:49:17:eb:97:aa:59:9a:56:49:50:
                    3c:39:8d:0d:37:e0:aa:1b:45:1d:1f:74:68:cb:72:
                    58:c8:93:82:92:b7:8e:d2:ab:ab:b9:fe:10:41:95:
                    0b:d3:76:fd:63:da:a9:7e:ee:85:06:36:6e:11:fa:
                    17:1c:79:0e:ad:1f:a8:58:f3:0c:61:ee:31:09:00:
                    06:fb:01:4b:f7:2c:8d:2d:b1:ba:a8:2f:8d:63:4e:
                    34:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C4:AE:BD:60:E3:6D:07:80:B9:01:48:59:5E:7C:D8:78:CD:21:05
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YcSuvWDjbQeAuQFIWV582HjNIQU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:33:80:72:63:a1:3e:00:75:cd:fa:79:90:5c:2d:63:b8:51:
         50:5f:1e:ea:38:36:a2:69:92:40:fd:ba:d0:5a:b5:42:5d:66:
         ba:0b:db:21:0a:89:47:51:ca:06:45:57:f2:2f:8b:3a:c4:23:
         fa:41:9a:b4:fc:25:47:4f:a7:b7:f7:8c:78:ce:18:fe:62:b5:
         7b:dc:12:65:00:87:27:a5:1c:fa:ac:cf:fe:e3:d8:b8:8c:e5:
         dd:62:00:8d:26:88:19:fe:e9:c4:70:3f:2a:5e:63:6b:1d:4c:
         df:fa:4a:25:6a:95:09:cb:3b:25:7a:45:3c:1c:41:03:ab:0c:
         90:7d:c6:44:05:e7:31:6a:0c:aa:b9:e2:ed:2c:61:19:6e:5f:
         5c:56:4c:27:fb:7e:51:3c:fe:aa:34:7e:c2:c8:d8:85:fe:b4:
         bd:16:12:95:4c:7c:b0:9f:17:29:6a:ca:35:94:23:0d:8f:a6:
         3b:55:1c:65:ca:5a:b2:b2:fa:c4:02:09:34:e9:f9:84:cf:49:
         4a:f7:4d:a8:51:eb:e5:7b:21:ee:69:da:04:dc:ce:55:99:79:
         17:08:3e:0f:f7:54:85:cd:c6:55:ae:fc:33:64:5b:52:76:8d:
         7f:32:02:c6:27:0d:9a:5f:fc:3f:98:11:42:89:11:8f:ea:7c:
         a5:7c:cb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org