Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cACBJ7SWRRmPAedSPoMoQ38eTSk.roa
File:                     cACBJ7SWRRmPAedSPoMoQ38eTSk.roa (raw, json)
Hash identifier:          92VWhRlHnn1F7E5eECv+5fedax2/DTx32LBVYetREfA=
Subject key identifier:   70:00:81:27:B4:96:45:19:8F:01:E7:52:3E:83:28:43:7F:1E:4D:29
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       012B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cACBJ7SWRRmPAedSPoMoQ38eTSk.roa
Signing time:             Tue 30 May 2023 17:29:56 +0000
ROA not before:           Tue 30 May 2023 17:29:56 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:df00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:29:56 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=70008127B49645198F01E7523E8328437F1E4D29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a1:16:96:21:f5:3b:eb:b7:08:d8:b5:4f:02:
                    3a:62:0c:b2:72:d1:62:57:6e:40:ba:51:c3:2d:11:
                    26:f8:04:7b:49:47:e3:28:61:1a:00:b4:17:f2:12:
                    10:73:08:c6:f8:73:d9:d9:f0:18:e3:5c:3a:f3:39:
                    d4:83:68:fe:17:6c:1a:eb:46:70:a9:a0:9c:37:5a:
                    41:e8:be:48:aa:61:f4:d7:23:09:46:ef:74:2e:44:
                    4e:61:df:77:a6:9b:76:0a:c6:9f:5a:ce:e8:6f:50:
                    a6:c9:77:e5:2e:08:89:09:00:78:18:ac:53:7c:15:
                    21:ed:20:14:d8:5a:8b:d8:6a:39:4c:39:bb:72:bc:
                    38:85:73:a2:6e:07:d1:2c:18:21:05:9a:b7:54:55:
                    a2:09:6f:e0:4e:f0:df:e0:23:33:15:dc:e0:3b:95:
                    67:27:a0:cb:74:1e:d4:31:01:1e:89:bc:4f:20:13:
                    8e:93:64:a1:0f:99:3b:a8:6f:38:2e:25:69:1c:dc:
                    de:c6:31:27:5c:c8:dd:c0:b2:e9:af:a7:4d:18:b6:
                    aa:24:41:af:c7:3d:2e:9c:25:52:2d:03:3a:37:ce:
                    0c:52:40:50:e4:bf:5d:ab:7e:af:05:59:b2:e4:a2:
                    a0:9f:27:78:50:09:8e:84:66:9a:be:c4:c4:26:1b:
                    cb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:00:81:27:B4:96:45:19:8F:01:E7:52:3E:83:28:43:7F:1E:4D:29
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cACBJ7SWRRmPAedSPoMoQ38eTSk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:df00::/40

    Signature Algorithm: sha256WithRSAEncryption
         27:ee:01:6d:08:cb:7e:0d:19:f0:b7:c0:b7:e4:79:9c:c6:a6:
         25:5f:69:51:9e:08:9e:83:cd:e8:3c:12:45:5b:9a:19:5a:4d:
         5b:14:79:ab:82:34:69:16:75:d3:87:4e:ad:5f:b2:b3:1d:41:
         d0:83:d9:14:b7:01:70:4f:72:54:bf:b8:af:92:57:1a:87:5c:
         b1:32:df:09:ee:e5:91:02:4f:2b:df:4d:ee:a1:a7:cb:c0:95:
         b3:aa:02:5f:b6:81:81:97:67:fd:78:06:ff:f8:70:43:ca:f3:
         5f:95:c4:55:47:85:9d:98:6e:0d:fc:14:d6:cf:82:5c:b5:55:
         c4:70:73:ec:e7:80:be:4c:26:73:80:70:fa:02:b7:2c:53:ab:
         9d:8f:7a:d9:57:c5:f7:ff:f6:cb:cf:ac:2d:a7:f8:e6:7e:95:
         fb:18:b2:bc:4e:e6:ab:dc:85:03:51:ba:57:12:aa:ae:45:86:
         99:9d:0d:55:4a:52:f6:b9:80:0a:14:3f:70:42:f5:5d:60:92:
         d2:6d:a8:b6:bc:07:24:97:98:0e:89:f9:63:32:74:d7:ef:23:
         19:3e:ea:0b:fa:1a:bf:4f:1e:3f:03:db:10:52:81:6a:d6:ee:
         90:fa:38:b7:02:fe:3a:40:b4:32:86:9a:af:19:5c:27:84:f6:
         27:10:c5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org