Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cdMwcaasLVBWeb_9cqcmRTB3QLU.roa
File:                     cdMwcaasLVBWeb_9cqcmRTB3QLU.roa (raw, json)
Hash identifier:          GyXcnTNwnzopjh7L69HVUbO6C66ezkk7+8RwRPETAfE=
Subject key identifier:   71:D3:30:71:A6:AC:2D:50:56:79:BF:FD:72:A7:26:45:30:77:40:B5
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       26
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cdMwcaasLVBWeb_9cqcmRTB3QLU.roa
Signing time:             Tue 30 May 2023 16:02:07 +0000
ROA not before:           Tue 30 May 2023 16:02:07 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:02:07 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=71D33071A6AC2D505679BFFD72A72645307740B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:e9:d4:35:d6:3b:e9:70:6f:01:58:b9:b3:
                    73:b4:28:49:ae:6e:f5:c9:4f:44:c5:17:ad:8a:14:
                    d8:18:45:4c:2b:f6:17:ed:f9:a0:c9:1e:86:a7:07:
                    75:76:5f:aa:27:7f:5d:16:12:79:34:66:d6:e7:82:
                    40:46:f6:95:1b:86:de:5f:19:56:3a:fa:95:f6:ec:
                    8c:50:1b:9f:bd:48:d4:2e:22:4c:2c:85:8e:ea:5c:
                    03:94:8b:f7:4b:7d:ba:cb:8f:7d:65:fc:be:8d:e9:
                    97:d3:c2:85:65:d9:48:51:24:da:46:30:1d:a2:21:
                    97:c1:6e:eb:da:b2:32:89:5c:9f:b2:8d:ca:c2:e9:
                    57:0b:28:94:6c:3e:44:95:97:92:97:b0:ac:51:80:
                    c0:e3:07:e8:c6:82:00:24:a0:42:ff:dd:f8:fe:e4:
                    55:7b:22:05:9c:b5:e1:a1:4f:65:24:5d:59:9f:3d:
                    c9:8a:2b:6b:15:ba:90:ad:08:72:0a:94:c0:9e:16:
                    ba:01:02:85:8b:8d:8d:6f:82:2a:32:d8:39:cc:07:
                    de:72:35:64:74:ef:9a:64:11:76:b5:97:02:63:9d:
                    cf:ba:6b:e2:d4:20:40:32:33:16:bd:69:10:02:e3:
                    84:8e:ad:c2:03:00:16:e4:ca:7c:81:da:f0:0f:e9:
                    ef:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D3:30:71:A6:AC:2D:50:56:79:BF:FD:72:A7:26:45:30:77:40:B5
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cdMwcaasLVBWeb_9cqcmRTB3QLU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5400::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:a4:36:4f:0c:80:b3:be:7d:ea:19:4c:12:e3:91:97:c7:85:
         97:77:e1:a2:0b:47:fa:99:bb:2a:60:ca:73:ac:16:c4:f7:d3:
         a3:25:8f:84:3a:ab:99:3e:01:84:05:77:52:96:e7:97:67:ec:
         5b:b1:55:e1:dd:b0:51:6c:a5:05:f1:1f:15:6e:02:83:26:90:
         c0:d1:66:99:37:00:11:46:37:e5:09:00:98:10:6e:f7:86:5c:
         2c:56:80:51:e0:40:4d:8e:be:fd:c0:63:2b:b0:29:de:7e:03:
         af:0b:68:72:2a:92:85:32:6e:a4:e8:c4:44:ad:9f:1f:e1:c8:
         da:06:b6:04:29:93:16:76:f5:9b:f4:33:d9:0b:7d:3b:01:ca:
         ca:a6:f7:f3:f7:31:8d:3b:4e:19:8a:d8:9b:2a:7f:7a:e4:30:
         be:5b:dd:52:eb:e4:c4:ea:4a:eb:75:80:9f:aa:df:b6:18:91:
         6a:b3:21:3d:8b:dc:a7:48:06:87:c9:b9:ec:65:fd:ed:48:50:
         36:12:99:98:99:4d:da:3d:19:76:2e:2d:6e:73:50:65:32:87:
         e1:af:bb:4c:88:98:75:ef:1d:f1:b0:ec:4a:94:22:c1:c9:17:
         3b:35:7f:4e:91:30:f8:51:54:71:27:a9:ef:5e:d6:fd:44:27:
         a6:b1:fe:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org