Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_5uZ-ZQ2ZNkz8W2AvRWOaAZm2XA.roa
File:                     _5uZ-ZQ2ZNkz8W2AvRWOaAZm2XA.roa (raw, json)
Hash identifier:          HppfTncqnuaJjKCduG6covGEYlolSttArHkKLlrUUeg=
Subject key identifier:   FF:9B:99:F9:94:36:64:D9:33:F1:6D:80:BD:15:8E:68:06:66:D9:70
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       09
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_5uZ-ZQ2ZNkz8W2AvRWOaAZm2XA.roa
Signing time:             Wed 15 Mar 2023 03:20:19 +0000
ROA not before:           Wed 15 Mar 2023 03:20:19 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:70:2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 15 03:20:19 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=FF9B99F9943664D933F16D80BD158E680666D970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ae:37:04:43:1a:67:6a:91:98:7f:b6:50:65:
                    5d:d7:ac:c5:6c:31:b2:9c:dc:bc:f5:bb:0c:1a:73:
                    54:b0:05:22:6c:06:2b:2e:fd:3b:08:40:16:33:08:
                    73:48:18:9c:a7:4f:48:90:22:b2:ed:7e:a9:1a:8e:
                    a7:e4:79:27:21:94:67:05:1e:eb:84:4d:3d:8c:de:
                    aa:3c:3c:82:38:cb:95:6b:02:d8:e1:c0:b7:e4:8d:
                    3c:07:7a:92:9a:3b:70:e0:ad:50:fd:fa:9e:3b:d1:
                    68:8f:f8:8b:1e:46:6e:bc:bd:c7:6d:7b:02:8e:3c:
                    3d:43:73:29:6e:32:06:21:57:45:60:2b:04:fd:cd:
                    93:28:b6:44:b1:2a:fa:e5:8e:62:a8:ce:bb:3d:34:
                    ac:56:61:eb:26:7c:e3:81:06:50:bf:2b:c8:d4:24:
                    99:c0:59:4c:51:e8:df:23:08:73:7a:9b:a0:e8:f3:
                    75:44:da:b5:71:bd:66:b3:98:be:3e:bc:ee:e1:ed:
                    50:a0:03:f2:ea:1c:10:c5:ef:bb:0a:be:8a:c2:9f:
                    8c:f3:c0:4c:8f:fe:7d:a0:c5:28:69:77:4d:c0:de:
                    66:24:c8:c0:7a:7c:97:53:c2:42:ac:a2:ac:11:d2:
                    8b:33:e7:17:c1:32:5b:28:88:84:b8:ca:af:2d:3b:
                    25:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9B:99:F9:94:36:64:D9:33:F1:6D:80:BD:15:8E:68:06:66:D9:70
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_5uZ-ZQ2ZNkz8W2AvRWOaAZm2XA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:70:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:63:4e:5f:20:80:9d:55:e9:51:64:56:2c:84:ec:95:88:40:
         7d:68:8d:6a:99:7c:37:9e:b0:52:9c:8c:25:d2:cb:df:1c:3f:
         ce:df:94:96:36:cd:bb:ed:ab:b4:f6:85:0b:54:47:24:fb:86:
         f8:55:a5:70:39:43:0c:c9:0f:b5:0e:da:f4:08:bb:46:22:16:
         2f:d6:16:7b:1c:3a:3c:40:87:8a:bf:66:5d:72:28:aa:c7:5c:
         6d:16:0a:27:dc:f8:32:88:ae:93:ef:a4:d5:f1:0c:3f:46:31:
         79:0f:73:d3:0a:f4:b3:cc:08:7a:2e:3e:09:1c:62:de:47:bb:
         3a:f6:ff:57:69:6a:45:c5:88:42:82:cd:60:81:f8:47:8c:d4:
         fd:af:61:df:c7:eb:e2:83:bf:d9:d6:a1:d3:a4:ce:64:4f:09:
         41:94:46:ae:9c:78:dc:b1:e6:ee:93:70:12:3a:6b:0d:aa:fa:
         89:ce:f2:54:73:84:02:91:12:51:c5:d0:c5:13:5e:a6:de:c6:
         d9:b7:48:01:fa:31:5d:e1:a0:65:66:55:29:dc:f9:d1:86:dd:
         ca:f0:bb:a7:b6:21:f9:0a:2c:39:d2:a7:ad:4f:3a:a0:62:75:
         5a:20:95:e1:c6:8b:24:f9:59:f6:5e:06:54:b1:ba:0a:50:a0:
         fd:c1:e1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org