Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Zv_GvAN8f_GvRHDLjyb3utSIbno.roa
File:                     Zv_GvAN8f_GvRHDLjyb3utSIbno.roa (raw, json)
Hash identifier:          x1yP0290ERAbI7krtHrPtbc0Up+IYbgWYKIuIqZPstk=
Subject key identifier:   66:FF:C6:BC:03:7C:7F:F1:AF:44:70:CB:8F:26:F7:BA:D4:88:6E:7A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0118
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Zv_GvAN8f_GvRHDLjyb3utSIbno.roa
Signing time:             Tue 30 May 2023 16:14:19 +0000
ROA not before:           Tue 30 May 2023 16:14:19 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8b00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:14:19 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=66FFC6BC037C7FF1AF4470CB8F26F7BAD4886E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a4:3e:d3:aa:47:66:dd:a7:d8:5b:2f:ae:dc:
                    2e:b9:a9:34:d0:8c:94:61:19:89:9b:d4:84:9f:b4:
                    74:e3:ba:c8:a8:95:7b:f1:fc:fa:8b:e4:75:d5:70:
                    f5:96:78:8c:a9:aa:c3:a5:f9:00:1d:af:e8:a3:d5:
                    cc:2a:6b:37:bf:6c:1f:5b:f7:a6:7b:8c:57:2d:72:
                    90:2b:8d:87:fb:4d:e0:bc:22:ff:46:b6:3e:48:27:
                    de:a3:d4:47:47:4c:d5:04:2f:76:cd:ca:cd:d9:48:
                    76:37:85:4a:5e:d9:6b:62:fd:30:e8:b4:08:1b:7d:
                    41:89:45:e3:5e:8f:9b:52:e5:94:b4:4a:ea:39:e3:
                    57:fe:c7:51:fa:da:9d:36:2d:e6:5a:9b:88:46:9e:
                    3a:6e:2e:c8:30:da:fd:9b:3e:30:83:2d:0b:a0:2e:
                    0f:4f:0d:5c:0c:6d:21:98:7d:71:fb:fd:38:66:fc:
                    fe:52:4d:bb:df:d1:7e:2d:d4:38:e4:90:52:0d:7b:
                    88:e9:67:47:ce:19:9b:35:dc:c9:cc:47:ec:a2:72:
                    7b:6d:54:5a:d4:85:f0:4c:ed:ca:3a:84:99:5a:f9:
                    54:4e:e6:43:7d:90:92:63:10:40:5a:79:04:bb:d5:
                    41:20:c6:00:32:18:dd:b3:ce:eb:46:dc:94:1d:4f:
                    92:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FF:C6:BC:03:7C:7F:F1:AF:44:70:CB:8F:26:F7:BA:D4:88:6E:7A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Zv_GvAN8f_GvRHDLjyb3utSIbno.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:7b:ba:a8:69:cc:c5:78:26:e8:bc:df:2d:fc:d3:69:f3:99:
         d6:64:b9:46:15:8a:ca:71:fb:b6:26:f4:97:58:c8:77:c2:84:
         de:46:60:5a:d3:0c:6d:de:d0:53:97:0b:2d:98:1b:5b:e0:33:
         3c:5e:9f:80:14:44:66:6f:04:0f:a4:c4:f7:b1:a8:57:f8:52:
         4c:cc:7d:c2:dd:10:ab:2f:6f:25:43:1c:64:ec:44:43:fb:d6:
         4f:50:38:82:95:c5:6c:7a:70:0d:49:09:9b:cf:55:3a:1b:e1:
         07:89:21:d1:34:37:85:99:2a:58:29:aa:a9:9a:9b:79:2d:ad:
         15:69:e2:6f:5e:61:79:cf:b3:3c:1c:d7:2d:79:8b:50:37:f7:
         fc:7e:6c:6e:43:33:63:b0:a0:1d:3e:2a:0b:bf:62:d9:39:84:
         0b:07:b0:33:f0:17:95:ad:f4:2f:3a:38:96:63:c9:d7:8a:86:
         f7:33:9e:11:54:2e:0a:62:a9:81:c6:bb:5c:31:52:e4:95:0d:
         25:b0:17:65:42:34:fe:d5:33:85:e9:63:50:ec:88:54:5c:95:
         0b:31:c6:cb:c7:5f:97:03:74:f6:c0:2f:06:6e:65:80:bd:b9:
         f3:16:01:31:6c:33:2d:b6:e0:84:ef:2d:c9:cf:a5:06:dd:64:
         e1:e9:f8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org