Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YoB148skPpBWB6eUbE9ba87Xey0.roa
File:                     YoB148skPpBWB6eUbE9ba87Xey0.roa (raw, json)
Hash identifier:          3FNGEE/TsbwVpYIxvxnM7Zp0MTI+0luwWIlwtfuADlQ=
Subject key identifier:   62:80:75:E3:CB:24:3E:90:56:07:A7:94:6C:4F:5B:6B:CE:D7:7B:2D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0143
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YoB148skPpBWB6eUbE9ba87Xey0.roa
Signing time:             Tue 30 May 2023 17:30:09 +0000
ROA not before:           Tue 30 May 2023 17:30:09 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:30:09 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=628075E3CB243E905607A7946C4F5B6BCED77B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:23:58:f5:71:3a:64:36:71:a7:a7:38:89:33:
                    93:84:5c:a2:35:cb:b6:c8:83:24:94:29:91:b8:7b:
                    7d:39:8e:5f:d4:3d:27:7d:27:42:f9:a7:12:60:c4:
                    1e:43:95:2d:b1:57:f4:61:67:63:66:a7:b6:7b:d3:
                    27:ae:51:ef:0e:71:98:0a:bd:7f:15:bf:5f:7c:92:
                    81:bc:dc:96:db:4e:9a:b8:94:69:44:19:b7:5f:87:
                    b5:8b:23:b3:2f:fe:9c:91:98:58:36:9f:81:16:63:
                    94:9d:a1:5f:1c:d2:48:dc:d0:f3:10:eb:64:df:59:
                    b7:69:ae:fc:be:15:76:f0:3d:51:39:5a:7a:df:6e:
                    cb:b4:03:b2:3f:c9:d6:49:7c:b7:e9:32:9e:7d:2d:
                    98:fe:97:c0:0c:df:24:36:4e:e7:0a:c0:6a:c1:c9:
                    cf:05:3c:0f:9b:be:8a:14:bb:4f:2d:40:07:7e:00:
                    18:1c:69:98:b4:79:c3:a2:15:c2:74:27:4f:0b:89:
                    72:f2:23:9d:6d:c9:58:aa:ba:68:b9:ad:71:e6:58:
                    6a:ee:b9:5a:fb:a4:0e:82:ac:4a:ae:6a:69:37:eb:
                    81:74:e1:86:71:e1:cc:8f:c2:bc:77:6e:7d:62:06:
                    f8:9b:32:25:22:53:7e:f0:9f:61:e1:33:b7:5a:ae:
                    68:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:80:75:E3:CB:24:3E:90:56:07:A7:94:6C:4F:5B:6B:CE:D7:7B:2D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YoB148skPpBWB6eUbE9ba87Xey0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e400::/40

    Signature Algorithm: sha256WithRSAEncryption
         94:fc:b8:f6:22:1d:67:17:47:23:46:de:79:ca:86:da:5f:44:
         95:48:9a:00:b1:52:a7:4a:2f:4a:45:b4:81:ee:df:fd:13:65:
         61:57:8b:cd:90:4f:b7:b5:84:78:0a:9b:4c:14:c8:64:b4:be:
         36:38:a1:3e:3b:6e:57:19:43:c8:0a:b8:03:f7:a8:48:db:58:
         a1:58:4e:35:5b:e7:8b:a3:9f:1d:40:db:3a:7f:6f:2d:d4:91:
         3e:8d:43:8e:b7:38:dd:f0:e0:d5:54:f6:9c:83:f2:cb:4d:4b:
         a7:2b:de:d6:da:e8:a7:a7:1d:4d:be:0f:93:54:b6:91:e2:c2:
         f1:de:2c:85:ae:03:85:69:a7:c9:3f:3d:83:f2:dc:d4:65:01:
         e2:0b:7c:73:70:12:bb:d4:5e:c5:a5:ab:6b:da:a1:7e:c6:1b:
         6a:a1:c2:44:c5:8f:94:69:4b:a3:15:60:c6:e2:52:ef:5a:6c:
         a0:e1:3f:44:14:26:f9:cc:d6:a5:70:1b:3c:a3:c3:81:55:ce:
         83:b1:8f:a5:ee:39:a2:8b:59:82:55:99:c6:ad:a2:37:c2:6c:
         21:fb:0d:f6:2a:b0:43:e5:01:a8:4d:43:73:b1:1b:3d:f9:96:
         63:52:2e:02:fd:f6:eb:8f:30:7c:2f:bb:ba:e2:21:b1:11:4e:
         98:d4:56:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org