Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aErMixGi-OFKuW-mHxqkeWXY8QM.roa
File:                     aErMixGi-OFKuW-mHxqkeWXY8QM.roa (raw, json)
Hash identifier:          qUsQUmaircq9E06MOJwcQ+c1ceWvEgOUA+gAPAmfb5U=
Subject key identifier:   68:4A:CC:8B:11:A2:F8:E1:4A:B9:6F:A6:1F:1A:A4:79:65:D8:F1:03
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       B1
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aErMixGi-OFKuW-mHxqkeWXY8QM.roa
Signing time:             Tue 30 May 2023 16:08:24 +0000
ROA not before:           Tue 30 May 2023 16:08:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8100::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=684ACC8B11A2F8E14AB96FA61F1AA47965D8F103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e0:a2:44:2d:8d:06:1e:93:16:7d:59:53:56:
                    c8:10:aa:de:d4:e3:93:b6:4e:cc:a3:8b:cf:9e:d3:
                    46:c6:58:b4:47:98:1b:03:6d:8c:7a:75:21:79:88:
                    07:ee:8a:db:18:7f:47:b7:9c:7d:c3:e5:95:c2:e8:
                    27:f4:e7:15:4f:57:0c:d9:0f:0d:16:88:ce:c3:11:
                    1c:ed:fb:bd:eb:d8:55:32:66:2d:08:7c:ef:92:a6:
                    1f:ed:8c:b0:1a:00:c3:00:a4:62:6b:e8:52:ef:de:
                    ef:44:67:35:97:1a:9d:f0:00:d1:79:a9:9b:37:b4:
                    55:b6:75:81:75:99:f2:5a:a7:38:9d:ea:03:37:23:
                    05:19:1e:bd:3c:bb:83:b7:a4:e9:f4:24:27:f9:cf:
                    fb:81:24:eb:97:73:6e:a0:55:d7:77:2b:73:d4:cf:
                    a3:d9:72:d0:77:81:20:10:e2:91:44:3a:b9:42:23:
                    e9:63:a9:ba:c7:ed:14:10:38:14:fc:07:66:cf:8a:
                    45:32:d8:9c:16:14:7d:54:c8:5a:65:68:e2:8a:f9:
                    64:69:8f:98:34:62:62:02:c6:6a:ec:6e:0e:72:62:
                    fa:ee:ad:5f:f2:cb:1b:ec:fe:49:48:fa:49:09:6f:
                    d4:50:52:82:c2:3e:d0:fd:97:28:98:31:77:3e:af:
                    1f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4A:CC:8B:11:A2:F8:E1:4A:B9:6F:A6:1F:1A:A4:79:65:D8:F1:03
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aErMixGi-OFKuW-mHxqkeWXY8QM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:fa:47:93:9b:d6:50:8d:97:e8:3d:bd:fc:73:90:73:55:b4:
         ed:80:b2:1f:41:6a:3f:6c:79:d5:5b:92:2a:3d:a7:73:03:f8:
         56:c2:c5:f1:0d:fe:35:6a:87:62:ef:5d:d3:30:7a:fa:23:f6:
         0f:3e:ee:be:f2:7f:8c:ee:1a:66:07:8a:0e:55:7a:4b:ee:18:
         e5:fc:4e:6d:f0:24:0a:82:b3:1a:72:3d:cb:db:0d:de:dc:b9:
         15:85:d0:3c:77:5e:44:0a:67:48:58:3a:2a:31:c3:3e:97:90:
         d2:7c:14:1d:54:2c:ab:2d:49:68:94:d8:d1:b9:8b:48:6a:ab:
         49:54:fc:ad:6a:09:2b:81:05:55:62:7b:41:04:35:29:08:0f:
         a8:23:d1:73:02:69:89:8c:31:21:b2:ae:df:63:0a:1d:a5:1d:
         f8:27:32:c8:25:df:b0:de:25:de:8c:3a:e0:e1:5a:c1:68:86:
         0b:30:da:2f:cd:f2:8b:0a:57:97:33:be:4a:28:3e:82:01:59:
         42:18:11:bb:bd:8a:56:a7:21:47:4c:05:98:43:1b:30:72:07:
         bd:ed:4b:68:35:9b:d6:0e:d3:2c:24:10:8e:8a:8b:78:f8:35:
         df:04:22:f0:2d:7a:c5:08:30:cc:62:1c:3e:04:a4:49:31:c6:
         27:33:9f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org