Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZB0nYDXC5r3bqkITkXabsSuu9SU.roa
File:                     ZB0nYDXC5r3bqkITkXabsSuu9SU.roa (raw, json)
Hash identifier:          Kjyiw6jOXPJqGwVrnzOih9cgVnhAvmcBzc6M9yIFxN4=
Subject key identifier:   64:1D:27:60:35:C2:E6:BD:DB:AA:42:13:91:76:9B:B1:2B:AE:F5:25
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01EA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZB0nYDXC5r3bqkITkXabsSuu9SU.roa
Signing time:             Tue 30 May 2023 17:38:31 +0000
ROA not before:           Tue 30 May 2023 17:38:31 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2000::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:31 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=641D276035C2E6BDDBAA421391769BB12BAEF525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2c:0e:2d:1a:fa:1d:41:9a:25:b5:e5:ae:f8:
                    c2:6a:72:ae:ac:2f:2b:f6:31:1f:b5:56:39:15:31:
                    d6:07:ec:84:b7:d3:af:1d:86:25:8c:71:13:c8:49:
                    25:d0:a3:0f:f6:5c:f2:06:2a:83:a3:92:06:6f:7e:
                    dd:8b:32:02:60:7a:51:0f:b2:eb:ff:68:51:6e:74:
                    ae:3e:5e:d2:16:29:cc:9d:f3:99:e8:76:dd:c9:34:
                    37:70:f4:1a:3f:6d:0b:73:51:d0:75:31:c8:a5:fb:
                    c2:1c:31:dd:a6:62:40:e4:2f:a6:50:a6:cb:22:02:
                    c5:69:2a:e5:14:3f:e4:ed:6c:93:fa:03:7f:f1:cf:
                    fb:2c:1f:c1:bc:74:8b:7a:0c:1f:83:e7:99:27:7f:
                    b1:62:8b:61:2d:1f:62:96:bc:7b:b3:cd:69:c3:b7:
                    73:24:a5:68:64:11:0e:f9:c6:b4:c5:a7:38:3b:8e:
                    d6:50:17:1d:3e:05:ba:11:5c:f4:57:8a:d4:7b:ec:
                    9b:93:2a:a7:db:f7:0d:2e:1b:b7:25:1e:1a:6f:6c:
                    7e:f9:e2:0a:b4:c0:d0:ef:2e:9f:e4:77:92:0c:3e:
                    5d:8a:74:8d:59:ce:b2:db:d9:3d:1a:3b:a6:0b:48:
                    95:25:54:e2:ce:f1:fb:e9:fa:20:27:51:cc:87:05:
                    c2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1D:27:60:35:C2:E6:BD:DB:AA:42:13:91:76:9B:B1:2B:AE:F5:25
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZB0nYDXC5r3bqkITkXabsSuu9SU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:9e:ba:f1:33:b4:90:2b:84:3b:67:f6:97:04:7b:f2:bb:66:
         87:a2:12:be:88:ed:5c:0a:60:6c:dc:10:32:c3:e8:69:d9:09:
         65:c9:59:b7:20:46:34:c8:21:6a:b0:43:64:ec:92:f4:c7:89:
         21:57:78:9a:86:da:48:4d:05:6f:b6:9d:42:15:1d:5c:a4:3a:
         69:05:24:b0:56:57:b8:73:ee:de:2c:d2:9d:29:f6:1f:83:71:
         79:d9:99:f2:e3:e4:a6:53:b9:60:b8:7d:18:ca:33:e7:49:ff:
         e2:98:a0:88:39:c2:17:03:b5:cb:31:9f:0b:cb:34:c1:8e:cb:
         86:50:e5:4e:2e:cb:00:41:65:6a:24:f7:7a:ea:10:95:10:de:
         98:df:ef:29:5c:9f:49:97:fd:78:75:f1:3f:02:8c:99:73:52:
         e1:43:c9:c1:91:a5:ca:60:d9:5e:7f:eb:a0:fb:47:fe:20:05:
         ef:20:11:6c:bf:8b:b9:e6:4a:d3:34:aa:97:08:aa:12:36:ff:
         1b:a0:73:07:80:6b:25:50:51:16:5b:24:df:cd:c0:9f:3e:6a:
         e1:63:73:cb:bb:e5:9a:a7:cb:0d:d3:3c:6a:43:3f:a2:4b:5a:
         a2:c4:0e:9f:99:04:84:5e:c2:d4:08:75:d8:23:da:37:33:7c:
         13:84:fd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org