Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/c8VCbLf5cQ_08nrSHqbYkXS_Uc0.roa
File:                     c8VCbLf5cQ_08nrSHqbYkXS_Uc0.roa (raw, json)
Hash identifier:          T8xP2Z9XPBrG9zZDImj6wRcTARWR5bOmx521voFqUWE=
Subject key identifier:   73:C5:42:6C:B7:F9:71:0F:F4:F2:7A:D2:1E:A6:D8:91:74:BF:51:CD
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       E9
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/c8VCbLf5cQ_08nrSHqbYkXS_Uc0.roa
Signing time:             Tue 30 May 2023 16:12:23 +0000
ROA not before:           Tue 30 May 2023 16:12:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ce00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=73C5426CB7F9710FF4F27AD21EA6D89174BF51CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0f:51:19:4b:55:40:4b:28:88:3f:05:cc:79:
                    40:1c:e8:6b:c7:ed:93:a1:0e:2c:b3:5f:c7:f1:f3:
                    b1:65:bb:d6:05:75:37:3a:16:95:86:4a:03:52:93:
                    01:11:85:c5:39:ed:bc:1b:48:6a:bf:46:ee:b1:e1:
                    e1:da:2f:6f:7d:cf:0c:16:f9:42:9d:f8:53:1b:8f:
                    59:05:bd:21:15:c9:ab:0d:9f:2a:f1:d1:eb:6b:ab:
                    eb:6e:88:44:ab:79:9f:a5:81:88:e5:d0:fd:4c:6d:
                    46:0d:47:06:1c:96:50:64:ee:79:3f:9e:e2:79:75:
                    6a:5e:12:76:50:8b:ff:e6:e1:df:e4:17:db:87:4e:
                    0e:b2:0f:a6:1a:2e:dc:96:f9:7d:78:32:5f:56:a1:
                    25:f5:cc:84:39:fe:4a:79:36:59:7e:15:54:d7:04:
                    e4:dd:56:53:4b:82:68:4b:be:7a:16:16:2b:f8:b8:
                    17:92:39:e7:32:be:ac:1d:7e:44:88:4a:9d:16:a4:
                    1d:32:04:af:a9:48:b7:f6:b3:e6:30:5f:39:b1:18:
                    85:b7:78:2e:b2:2f:2f:59:55:b5:05:a9:20:fe:bc:
                    d2:c4:59:d1:1b:47:d6:8d:07:42:2b:36:47:d9:13:
                    b0:06:f2:e9:80:51:1a:29:05:f7:a8:02:cf:42:df:
                    78:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C5:42:6C:B7:F9:71:0F:F4:F2:7A:D2:1E:A6:D8:91:74:BF:51:CD
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/c8VCbLf5cQ_08nrSHqbYkXS_Uc0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ce00::/40

    Signature Algorithm: sha256WithRSAEncryption
         92:44:f6:c6:19:f0:8c:94:3c:85:a3:23:b0:04:5d:e6:f9:93:
         af:3d:58:54:41:a7:6a:d7:8c:b3:77:21:ae:a7:47:1b:cc:59:
         84:99:e3:c1:bf:25:ea:ea:28:14:d7:16:44:b8:70:ff:67:1d:
         f0:f3:2f:44:47:be:d5:2d:5a:de:bf:4e:1b:26:bf:7a:f0:24:
         a5:5b:35:ec:95:97:ea:47:5d:bb:19:c3:be:08:5e:ee:80:a2:
         07:b9:c9:8d:54:43:86:5d:f3:7b:1c:55:aa:94:81:80:48:48:
         3f:fc:c5:9a:0b:14:6b:24:cf:77:9f:b9:74:2e:2a:f6:1c:d4:
         d0:81:a9:80:16:bb:74:0f:27:02:47:fc:75:b4:33:46:b0:94:
         3f:d3:ec:41:47:bc:a3:b9:33:89:f1:17:21:e5:30:4b:7c:c2:
         e8:94:03:5f:30:20:1d:2a:03:52:84:92:e0:ad:8e:8c:63:42:
         6b:d8:1b:05:92:52:d8:92:56:1b:a3:71:d6:cc:23:fc:d8:94:
         c1:88:89:70:92:4a:2b:66:08:47:aa:7c:f9:94:5b:4a:c7:cb:
         11:59:5d:9d:9d:d7:ff:c4:ff:4e:90:8c:ec:67:b6:7d:73:b6:
         2e:af:06:4c:29:1e:29:9c:35:48:5c:26:c0:62:58:42:80:40:
         c8:34:78:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org