Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZAT8J9SbZjl9vOd8c1G-khDFtUQ.roa
File:                     ZAT8J9SbZjl9vOd8c1G-khDFtUQ.roa (raw, json)
Hash identifier:          vM5aOaOVUpxhWdv9TlT1wElTh8KQ3bMubgBwEh94T0k=
Subject key identifier:   64:04:FC:27:D4:9B:66:39:7D:BC:E7:7C:73:51:BE:92:10:C5:B5:44
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       021B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZAT8J9SbZjl9vOd8c1G-khDFtUQ.roa
Signing time:             Tue 30 May 2023 17:40:31 +0000
ROA not before:           Tue 30 May 2023 17:40:31 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f018::/46 maxlen: 46

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539 (0x21b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:31 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=6404FC27D49B66397DBCE77C7351BE9210C5B544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:40:3f:fa:6d:4f:d5:cd:76:7d:29:66:ff:
                    25:f4:07:c9:ca:79:1c:30:82:78:d8:80:be:4f:76:
                    09:12:51:c1:b8:19:b9:2b:63:45:10:26:d1:10:cb:
                    27:ec:9c:75:06:d6:8e:d7:b7:f7:e4:74:e6:34:24:
                    35:31:b7:a0:7f:6c:86:95:d9:d8:7b:a9:dc:4e:42:
                    10:21:63:d7:30:04:7a:5a:e7:0b:bd:80:9e:3b:b3:
                    a7:bc:b9:bb:3e:8e:f3:b5:bf:00:fd:90:73:e4:b2:
                    59:0c:e2:e8:79:fd:89:88:79:d5:22:be:37:14:5a:
                    64:63:99:13:aa:6f:c1:08:86:ae:d6:81:97:12:b4:
                    f8:f9:e4:59:15:84:7e:93:20:f6:d0:3f:b5:7a:ea:
                    d8:30:81:65:8f:62:b1:8e:72:55:08:cd:3a:5e:97:
                    dc:d8:5e:fe:2a:50:a8:0e:f0:e2:45:ff:d9:66:04:
                    e9:0d:0b:8b:72:75:4a:f2:c7:0d:3c:27:c4:95:65:
                    cd:af:15:ab:79:d9:84:af:4b:98:13:a5:ff:d9:1a:
                    19:f8:0c:82:00:ae:bc:b2:78:11:7b:95:cf:8e:95:
                    f4:ad:d5:2a:f2:9f:d7:3b:ae:1e:fb:b2:e5:6c:0d:
                    a0:f7:b4:9c:d0:32:2c:ca:6c:7f:41:62:fc:91:dd:
                    13:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:04:FC:27:D4:9B:66:39:7D:BC:E7:7C:73:51:BE:92:10:C5:B5:44
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZAT8J9SbZjl9vOd8c1G-khDFtUQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f018::/46

    Signature Algorithm: sha256WithRSAEncryption
         0f:aa:a2:58:1d:fb:c7:0e:5e:4a:51:37:38:2f:ad:e7:69:c2:
         20:0c:54:29:76:e7:82:5a:4b:f0:04:35:71:1b:42:41:b9:aa:
         f6:92:9a:39:b8:ee:5b:be:13:d9:b0:91:38:35:99:b9:8d:1c:
         a2:62:85:24:f0:88:88:ce:9f:9a:aa:df:94:29:81:18:09:bf:
         11:38:7e:b3:21:0a:b9:1c:37:e7:9e:50:fe:46:04:10:14:12:
         49:7a:18:56:aa:b9:34:1b:e6:22:d6:53:ea:5d:e1:66:1f:08:
         71:e3:2c:39:25:2d:79:3f:3a:fa:35:3b:a9:85:9a:a9:c1:c8:
         30:9e:b1:60:0a:61:98:5c:53:ee:8a:a5:1b:da:9e:94:66:af:
         84:c4:97:28:0f:b8:37:37:9c:18:99:ec:b6:65:4d:56:e7:b4:
         3d:60:c4:b3:c9:85:22:95:3e:00:6f:a8:ae:6c:ca:4e:82:53:
         0b:ad:ab:07:8a:b1:37:0f:66:84:c2:c6:dc:2b:cf:86:55:fa:
         19:0d:15:71:05:a1:a0:fb:65:cd:76:1c:cb:fc:72:af:00:53:
         5a:41:86:0c:2c:8b:a3:c1:29:fa:05:47:ed:1d:bd:3a:29:23:
         98:2c:ef:12:fa:42:75:f4:a9:77:d4:e5:e1:d1:a5:90:b0:48:
         8f:17:63:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org