Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Z23qSygNXc1BxS5sxD5akkmjn9w.roa
File:                     Z23qSygNXc1BxS5sxD5akkmjn9w.roa (raw, json)
Hash identifier:          RPCvXgzUDnfPMeOHDdAjgLWH1jOgj+fdyStEDlSIeiw=
Subject key identifier:   67:6D:EA:4B:28:0D:5D:CD:41:C5:2E:6C:C4:3E:5A:92:49:A3:9F:DC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0182
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Z23qSygNXc1BxS5sxD5akkmjn9w.roa
Signing time:             Tue 30 May 2023 17:34:24 +0000
ROA not before:           Tue 30 May 2023 17:34:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6b00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=676DEA4B280D5DCD41C52E6CC43E5A9249A39FDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:07:65:6c:28:6d:bc:06:2c:5f:c6:58:18:37:
                    71:76:d9:a4:d1:05:3c:46:53:9f:12:04:87:b1:95:
                    d4:49:80:a7:44:cc:ca:3f:b5:ae:21:9d:ee:08:36:
                    f8:6e:07:e6:5e:3c:30:8b:76:00:18:b0:42:f8:94:
                    1f:b1:31:44:2a:cb:66:37:7c:00:13:a4:40:26:53:
                    4e:28:4f:69:d2:64:44:f7:0e:9b:f9:51:98:39:e8:
                    fd:29:c9:72:b0:bd:15:bc:40:a0:e3:32:ea:20:17:
                    a6:bf:5e:fb:8f:0f:4f:07:a8:8e:82:8c:5f:4f:d9:
                    75:b1:1c:70:f1:c8:7b:60:1f:21:f8:81:62:dc:73:
                    89:0a:1c:1e:4b:0c:f5:78:c8:ee:8f:7f:c9:39:2d:
                    33:b0:25:55:5f:a9:33:18:99:8f:57:f2:17:45:3f:
                    a6:a3:27:b5:1f:53:c1:b3:26:ba:57:50:8a:f4:02:
                    61:6c:1f:c6:a5:72:18:7d:a2:cf:24:5d:2c:93:9f:
                    f2:c6:e2:8c:26:9a:a4:fe:2f:4f:e8:02:18:9b:19:
                    f7:b3:e6:06:68:da:16:e9:b5:b1:23:dd:42:02:a1:
                    84:ab:d8:be:87:7f:b7:75:d1:66:b7:a3:34:bf:c6:
                    06:c9:4f:3b:1c:27:16:db:7b:aa:06:8f:0e:2b:17:
                    96:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6D:EA:4B:28:0D:5D:CD:41:C5:2E:6C:C4:3E:5A:92:49:A3:9F:DC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Z23qSygNXc1BxS5sxD5akkmjn9w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:4e:89:ea:72:b6:34:85:62:64:17:88:aa:b5:f0:01:26:23:
         15:0b:ef:b6:90:89:41:63:b4:b7:ca:a9:e3:33:3a:02:dc:7c:
         2a:f4:61:ca:04:53:b1:31:d8:3e:49:95:f9:3b:04:4c:95:6b:
         7a:fc:c3:ff:f4:1d:be:e8:18:2e:b0:9b:86:d8:e7:9d:e4:a6:
         11:d1:44:1a:48:ce:77:50:15:ef:bd:b4:b8:7e:62:97:12:67:
         21:8f:ee:c9:a0:b1:e0:99:09:6f:5f:4f:1a:12:61:65:02:d2:
         2d:e7:20:14:3f:75:dd:ac:ff:ba:3e:cb:8f:b2:ec:37:84:ff:
         af:d4:6d:5f:f4:86:6a:8e:3b:a9:09:e0:f4:0c:60:4f:e0:f1:
         6d:43:7d:3e:87:02:87:d7:9e:74:36:41:c8:f4:e2:93:de:bd:
         c3:6f:a1:27:d8:e0:47:56:95:ba:b8:9b:25:05:fd:99:3b:3f:
         87:95:4b:da:a7:88:ca:f8:67:b8:7d:6e:04:93:d8:51:8f:8f:
         5e:66:f4:29:8a:3f:c3:c0:6c:08:2b:82:8d:29:3d:a8:c8:a1:
         0b:40:2c:4b:bd:81:e4:74:d7:5a:8f:e1:84:d8:76:b4:a2:0d:
         93:51:83:c1:6b:9c:78:6e:54:20:3f:07:f4:04:7d:b4:cf:36:
         d8:88:05:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org