Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_6rFj0aXbRLfMNxvK3Tv0cNEmn8.roa
File:                     _6rFj0aXbRLfMNxvK3Tv0cNEmn8.roa (raw, json)
Hash identifier:          k5TZV6r6CZ7sCLrbFdrgSDiLBqmhgD85zMMyuwMJDAo=
Subject key identifier:   FF:AA:C5:8F:46:97:6D:12:DF:30:DC:6F:2B:74:EF:D1:C3:44:9A:7F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       018C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_6rFj0aXbRLfMNxvK3Tv0cNEmn8.roa
Signing time:             Tue 30 May 2023 17:34:28 +0000
ROA not before:           Tue 30 May 2023 17:34:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b500::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=FFAAC58F46976D12DF30DC6F2B74EFD1C3449A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3b:c8:4e:52:19:41:a7:81:9c:c7:01:29:c8:
                    62:f4:5c:0f:2a:75:25:b8:2a:0e:40:9c:a5:a4:d2:
                    75:d0:6e:ca:bc:ee:62:1a:f5:a8:9f:4c:e3:17:4f:
                    37:e5:38:cd:80:8d:58:23:fa:a2:33:ca:e9:54:89:
                    b4:b9:83:0b:1d:1c:fc:9e:16:09:f5:72:44:b1:07:
                    f4:65:72:72:53:fc:e0:73:21:0d:ca:31:4c:6c:13:
                    7d:43:b5:07:9b:32:3b:0f:2f:bb:ad:20:cf:c2:f1:
                    cd:9e:55:4c:66:d1:74:54:23:f1:93:97:e6:ad:07:
                    ce:45:0e:39:13:04:07:f2:0d:01:1b:51:5d:80:58:
                    b3:1c:3f:e7:f2:1d:9b:8b:b7:05:f8:a8:b5:99:a1:
                    b1:0b:89:08:3b:0e:ed:87:3b:01:0b:5a:ed:70:4a:
                    c3:f2:83:ca:3d:e7:68:ec:01:78:39:de:18:d1:43:
                    9c:45:ab:1c:bb:43:7c:b7:3d:08:51:46:ed:04:a3:
                    db:41:f1:bf:18:cd:18:0b:f1:a7:3f:b2:dd:4a:84:
                    e3:3f:a8:e2:f7:e4:3e:01:86:c0:62:0f:f4:d5:40:
                    32:91:20:27:b6:f0:9a:4c:8c:77:15:e2:ca:f4:b1:
                    e2:5d:8c:7c:d5:56:7e:f7:25:63:10:31:61:c5:9d:
                    e0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AA:C5:8F:46:97:6D:12:DF:30:DC:6F:2B:74:EF:D1:C3:44:9A:7F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_6rFj0aXbRLfMNxvK3Tv0cNEmn8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b500::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:ff:bf:9c:bf:6c:95:94:8d:ae:da:03:df:ae:3d:f9:64:7a:
         c3:91:7e:8d:01:2f:2d:b0:89:96:78:21:79:13:a3:6a:14:e9:
         b0:af:69:80:b5:56:15:d0:c1:01:a5:ad:42:f9:df:ca:b0:56:
         ac:53:4a:d2:77:ad:b1:7c:ed:2f:a8:9b:d8:63:98:61:9a:ea:
         1f:66:31:24:8f:61:38:52:ed:0a:f8:48:50:3b:30:f8:c2:2c:
         e1:ab:2c:84:f6:d3:1a:26:5e:c1:b9:93:db:8f:4e:44:57:9b:
         55:48:a1:7a:69:b4:85:64:96:f4:ad:e4:83:24:34:d8:1e:5d:
         62:80:6c:16:95:8c:62:02:b2:23:51:a8:62:a8:48:20:41:01:
         c7:07:a1:1d:6a:87:ed:80:b8:ab:13:c5:f8:68:a5:69:2c:92:
         a1:fc:03:73:02:93:10:6b:c7:ab:84:14:60:27:f8:b6:85:d4:
         1b:f6:ef:2c:8a:48:3b:ce:3c:d4:9e:02:af:af:a8:b0:8a:c4:
         9e:ca:60:93:41:55:55:2b:88:e4:00:32:d1:7c:d4:2b:14:49:
         6d:19:4b:fc:3d:a1:ef:3e:8c:fc:ac:f3:04:f4:64:7b:e5:27:
         b5:90:53:65:d7:39:b4:09:a7:4c:b1:46:0a:8c:24:fa:a7:b3:
         1f:e3:ae:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org