Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/a2xGxCRNpqfUNzvO2d5DWA2WCY8.roa
File:                     a2xGxCRNpqfUNzvO2d5DWA2WCY8.roa (raw, json)
Hash identifier:          cuGlCWzJeRCLrhp9Xh3H4PvLUTYZlogP2wMtf95/96M=
Subject key identifier:   6B:6C:46:C4:24:4D:A6:A7:D4:37:3B:CE:D9:DE:43:58:0D:96:09:8F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       021D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/a2xGxCRNpqfUNzvO2d5DWA2WCY8.roa
Signing time:             Tue 30 May 2023 17:40:31 +0000
ROA not before:           Tue 30 May 2023 17:40:31 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:31 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=6B6C46C4244DA6A7D4373BCED9DE43580D96098F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:11:6c:6b:c5:d8:8d:ec:96:c3:ad:bf:62:72:
                    e7:25:87:9c:1f:7a:1a:2e:22:d5:2e:e1:74:08:3e:
                    7d:0c:40:fe:12:61:73:61:72:29:10:43:35:e6:9a:
                    75:4b:30:7e:fc:b7:fe:e2:03:c1:23:82:29:4c:ae:
                    4d:7a:b8:7e:01:00:b9:ab:9d:d3:de:8d:24:11:c1:
                    dc:c2:ab:f4:06:5f:a3:1e:75:e9:82:ef:91:f8:cf:
                    48:d3:0d:3c:35:80:f6:01:3d:43:3d:76:3b:b3:da:
                    7a:ea:e1:e2:00:7f:f0:1f:e3:98:6c:cc:c9:52:38:
                    d2:c9:1f:d4:2e:9c:08:4e:11:b5:dd:71:9a:bb:0d:
                    1b:55:d0:36:e8:f3:11:6c:05:06:71:84:c1:9e:e5:
                    9d:b8:56:0e:c3:8f:b6:1d:04:2e:b2:9c:60:2f:42:
                    fe:3d:2b:90:93:07:6f:95:00:1a:1f:fc:27:6d:4c:
                    5c:fa:8b:fd:e0:16:98:c1:34:c1:89:79:71:f4:c7:
                    0e:19:e1:eb:3d:da:74:bb:1f:c5:ca:cd:eb:56:87:
                    3c:51:3b:4f:43:84:3f:9d:15:82:e0:66:ba:ea:57:
                    27:70:a2:84:f8:72:bf:f5:1e:a3:58:6e:07:31:47:
                    3f:7b:dd:e8:5f:9c:eb:14:f6:42:e4:27:93:fd:5c:
                    1d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6C:46:C4:24:4D:A6:A7:D4:37:3B:CE:D9:DE:43:58:0D:96:09:8F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/a2xGxCRNpqfUNzvO2d5DWA2WCY8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6800::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:be:2f:25:19:f1:de:48:9b:a0:4d:ab:ad:c6:20:81:09:e7:
         b9:1e:52:56:43:fd:cf:80:52:43:8d:cc:95:ff:ac:6a:b2:57:
         8a:c1:98:86:ec:f3:38:2b:21:25:47:b6:3d:90:46:9c:e7:7a:
         de:20:e6:b2:1e:af:ff:6f:f0:2c:99:71:6c:31:b4:c3:8e:ca:
         6f:6f:c2:6d:5a:c8:7b:84:b3:b5:de:1b:da:96:7c:f8:4d:42:
         11:81:4d:b7:74:55:66:e5:a5:f9:db:0b:14:37:3b:61:e7:27:
         5b:4a:c1:12:21:9f:c1:22:12:33:21:45:a5:9b:b3:39:3d:78:
         88:64:58:db:02:8e:b3:25:ec:6e:73:c0:35:f0:fe:ed:27:a8:
         8e:e8:89:75:c2:19:53:74:5b:76:73:8d:43:0d:88:4f:a7:ea:
         6b:d1:c0:46:1b:89:9a:ee:56:8c:30:5c:3e:11:83:3a:ad:9a:
         40:94:51:e2:d7:d9:7a:53:86:dd:b3:84:a3:72:f2:c2:22:6c:
         aa:d6:51:76:fa:be:83:03:4a:09:ef:f8:c4:f6:fb:04:12:13:
         db:e4:83:93:c9:04:7d:ec:ac:ed:1f:1e:3a:1f:74:c9:ec:72:
         93:d4:b7:e4:4b:68:7f:ae:b0:e6:8e:3e:d1:78:2d:0a:82:fe:
         98:26:fa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org