Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bs0zcQJNniIAA28Y2WtbkVIkXps.roa
File:                     bs0zcQJNniIAA28Y2WtbkVIkXps.roa (raw, json)
Hash identifier:          vpzsV7OSTWzFIZyyUnNphb6d5JHDZWQ3TIv+qcz0ziw=
Subject key identifier:   6E:CD:33:71:02:4D:9E:22:00:03:6F:18:D9:6B:5B:91:52:24:5E:9B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       013F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bs0zcQJNniIAA28Y2WtbkVIkXps.roa
Signing time:             Tue 30 May 2023 17:30:06 +0000
ROA not before:           Tue 30 May 2023 17:30:06 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ec00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:30:06 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=6ECD3371024D9E2200036F18D96B5B9152245E9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fd:89:23:dd:8a:b9:e4:50:dd:4c:97:4f:79:
                    31:55:dc:55:ee:53:e3:f9:f6:cc:ee:ef:88:c8:96:
                    56:e3:61:9c:bd:c0:4d:67:aa:99:4a:0f:90:cc:d1:
                    13:e2:b1:6a:5a:e5:66:f1:15:35:ff:28:22:79:8b:
                    42:5a:d1:3e:a5:b5:31:67:4c:53:0b:25:54:cc:73:
                    95:d0:a4:40:04:71:20:3d:d0:75:c9:67:9e:15:e6:
                    ba:6c:61:bf:48:33:86:28:bc:62:cf:de:0e:60:24:
                    65:f1:4d:d3:1c:6f:f3:e3:1d:d7:c6:07:cc:39:c6:
                    20:30:2d:ae:0b:95:23:b2:9d:56:f9:fc:0e:8f:44:
                    88:6e:2d:a4:3d:31:01:1f:e9:1d:a9:49:82:16:46:
                    f9:1a:0b:eb:83:c3:46:77:e0:b7:51:52:6f:a2:09:
                    4f:08:3c:63:eb:67:4d:2b:33:81:dd:94:5d:4d:5d:
                    24:5b:84:e7:ea:57:12:ef:d2:89:4d:5d:77:23:1c:
                    5c:c8:11:64:79:c6:24:6a:19:dc:8c:82:f0:09:03:
                    d6:65:0b:4d:93:c3:b4:7b:14:06:47:48:82:95:fd:
                    1c:6c:a6:24:fd:f8:47:9a:f3:d9:5a:36:d7:0a:c2:
                    da:3b:f7:ed:98:c8:b1:ca:f7:73:41:82:32:b3:8c:
                    a2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CD:33:71:02:4D:9E:22:00:03:6F:18:D9:6B:5B:91:52:24:5E:9B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bs0zcQJNniIAA28Y2WtbkVIkXps.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ec00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a5:62:c6:85:20:a5:d1:3f:8c:7f:47:48:6c:f8:a4:69:8d:26:
         cc:c6:5d:36:13:f6:e0:98:e4:cb:24:e5:13:1a:8b:af:cb:71:
         7f:61:10:20:e5:27:6e:19:5f:1e:93:42:b3:b7:c6:1e:09:de:
         1e:58:ed:f6:7e:76:02:d9:48:db:f6:ae:fc:57:bb:71:30:3b:
         a5:4a:49:a4:4c:2f:3a:2d:4d:ad:bb:83:8f:5c:69:91:c1:d6:
         f9:97:8a:12:fd:09:95:e6:e9:91:8c:ce:4c:42:4b:0d:9a:c6:
         f6:36:1d:e1:68:b0:05:22:43:db:ef:9a:d5:d6:82:70:5f:ff:
         6e:c8:cb:8d:ef:02:04:bf:c3:aa:66:96:1a:fe:64:c6:a6:48:
         2c:ea:c7:c8:05:6c:25:3b:3c:94:a3:2f:90:67:c8:64:ed:9f:
         1a:35:5a:14:5e:b0:db:6f:4b:f0:30:70:99:9b:fc:d8:07:7f:
         da:1b:5d:fa:8f:f4:ee:36:b5:1d:96:66:75:77:d0:28:ad:2f:
         c5:10:4c:bd:55:ce:30:cf:eb:a3:af:cc:5e:ab:f2:88:a4:48:
         e3:e8:13:1a:8a:1b:7f:4c:1e:39:0d:d2:29:f7:9d:91:1f:ba:
         c1:92:af:b1:4c:70:20:c2:2c:ac:67:5b:4a:0b:51:70:98:ec:
         a3:f4:64:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org