Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YokwJ_w5viiTiE4YI1M5Z8zjuZU.roa
File:                     YokwJ_w5viiTiE4YI1M5Z8zjuZU.roa (raw, json)
Hash identifier:          Tc/hOam87V87Gs4tFiVT7gZtgePV5QMBZtSfYbpF+HA=
Subject key identifier:   62:89:30:27:FC:39:BE:28:93:88:4E:18:23:53:39:67:CC:E3:B9:95
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       79
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YokwJ_w5viiTiE4YI1M5Z8zjuZU.roa
Signing time:             Tue 30 May 2023 16:06:23 +0000
ROA not before:           Tue 30 May 2023 16:06:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=62893027FC39BE2893884E1823533967CCE3B995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e1:08:92:b6:24:dc:e2:dd:f5:34:6d:46:d1:
                    8e:2d:73:28:a2:57:98:d9:df:3f:a6:0e:24:7a:63:
                    95:d9:e9:f1:d8:b4:29:e7:a9:18:10:39:65:15:bc:
                    62:7f:25:36:5a:b8:2a:fb:b1:54:91:93:a5:67:1a:
                    18:ae:ec:36:d3:b3:ff:7a:bd:b2:b1:87:e7:c7:73:
                    c3:df:b4:93:e6:17:85:f9:4c:e5:be:fc:b0:ef:dd:
                    1a:95:79:6c:78:d1:40:26:e4:9f:89:62:05:e6:08:
                    e8:bc:33:95:b5:d7:3e:d2:2e:fd:ca:f2:5f:a3:0a:
                    19:e3:dc:37:fe:1d:2e:3b:33:99:b5:2a:eb:fb:47:
                    86:3b:5a:e5:f0:73:18:64:36:26:f4:2b:a9:16:3b:
                    9d:7e:76:71:e5:c7:2b:fb:17:14:9d:14:e1:94:98:
                    00:87:41:56:5e:13:f9:0f:2a:17:c0:bf:d1:7a:14:
                    17:a0:bd:9a:f2:bd:4e:6f:57:42:a1:0a:7a:31:e2:
                    02:26:d4:e7:bb:67:89:ec:75:75:2f:c9:39:da:ed:
                    f6:44:c1:08:e4:e9:5a:76:c9:a6:89:b5:d0:0e:fa:
                    1c:4d:d3:14:9f:1e:6e:76:ab:db:37:58:8e:dd:3f:
                    4c:87:d2:2d:e2:d2:2c:39:98:1d:c0:d8:b9:d0:3a:
                    ad:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:89:30:27:FC:39:BE:28:93:88:4E:18:23:53:39:67:CC:E3:B9:95
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YokwJ_w5viiTiE4YI1M5Z8zjuZU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f400::/40

    Signature Algorithm: sha256WithRSAEncryption
         bc:64:2f:09:fe:4c:7e:d3:f5:05:88:16:5b:9c:7e:f4:55:92:
         92:35:9d:cd:fe:d7:30:fa:b3:3b:66:d4:95:81:4a:2c:5f:1c:
         ea:9a:29:0f:b3:47:a7:3e:09:89:d0:f6:19:d7:8a:1f:13:64:
         11:10:16:af:80:a4:76:5f:bf:8a:88:9c:e4:84:b1:9c:f4:57:
         cb:e8:e5:a1:87:dc:8f:09:d0:7c:66:d9:8f:ba:07:ae:f5:de:
         fa:bc:94:36:23:ac:fd:a3:e2:89:ae:cf:51:48:10:51:f4:e3:
         53:6f:d5:6d:0b:17:47:f2:ac:c8:1d:57:6b:47:c2:4e:38:8c:
         92:31:67:31:af:24:31:fd:66:4e:91:b4:c0:9b:a5:2f:23:df:
         ba:32:1b:79:c7:0e:11:60:a0:52:58:e7:ed:03:87:36:d2:20:
         85:0e:de:ba:b2:1a:e7:10:94:fc:79:eb:ec:39:35:aa:89:01:
         b5:ea:40:9c:b1:9f:b9:9f:42:be:eb:cb:a4:19:90:4e:29:a7:
         8a:ba:a6:78:1e:66:7b:90:ed:e0:2c:12:97:15:39:d8:10:10:
         9d:1b:2b:18:04:f2:8f:84:02:13:21:e8:20:bf:01:e3:44:4b:
         52:6d:04:8d:09:6d:ac:ee:ec:a1:e3:ea:7a:5f:c1:ec:54:30:
         8e:1b:17:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org