Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ceF6bWsAYex1e_3rqXUCkVLiLmE.roa
File:                     ceF6bWsAYex1e_3rqXUCkVLiLmE.roa (raw, json)
Hash identifier:          nynS2Lf9toON0Z3EjxwW82oD8ur9+tjn0USLqFLx6VQ=
Subject key identifier:   71:E1:7A:6D:6B:00:61:EC:75:7B:FD:EB:A9:75:02:91:52:E2:2E:61
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       023F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ceF6bWsAYex1e_3rqXUCkVLiLmE.roa
Signing time:             Tue 30 May 2023 17:42:31 +0000
ROA not before:           Tue 30 May 2023 17:42:31 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 575 (0x23f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:31 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=71E17A6D6B0061EC757BFDEBA975029152E22E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5c:a9:3a:22:c5:86:18:5d:77:76:e0:50:0d:
                    a5:fe:fc:f0:f7:3d:69:9b:84:08:d1:48:3a:e8:ac:
                    53:72:15:9d:99:f1:b8:71:72:31:8f:40:2d:12:af:
                    3c:74:4a:3f:f1:dd:67:e6:8a:8f:97:b7:a4:0d:06:
                    46:cc:1d:94:93:cd:5b:69:f5:b3:7f:14:94:90:46:
                    a6:d9:22:8c:6a:ec:8b:9c:05:68:2d:10:7d:a9:7e:
                    24:5c:e2:7b:f2:57:53:33:3c:dc:c4:d6:9a:fd:0c:
                    c2:30:1f:e7:1f:f2:1f:42:32:94:94:ea:d0:3e:7d:
                    75:de:8f:cd:f5:cd:76:8f:97:3a:2e:a0:f7:77:5a:
                    25:7f:5e:e4:ce:cd:a0:eb:aa:3b:33:e0:b7:e0:98:
                    02:4c:ce:5d:04:aa:58:ce:1e:30:6d:17:c4:61:23:
                    90:38:96:43:a3:99:78:42:e4:a4:ca:71:1d:72:8a:
                    0a:ed:53:f9:5e:3a:3d:59:2a:fa:3f:6c:b7:3d:e1:
                    79:f1:45:67:a8:28:73:b7:55:1a:6a:9e:28:b6:6d:
                    df:b6:39:1d:09:26:d7:d0:cc:48:a9:74:cf:ce:e0:
                    b6:79:7f:df:f5:b4:66:d4:cf:e2:92:a1:c5:1d:02:
                    64:40:07:11:f5:96:08:65:ce:a3:f0:e5:ab:f3:48:
                    a7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E1:7A:6D:6B:00:61:EC:75:7B:FD:EB:A9:75:02:91:52:E2:2E:61
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ceF6bWsAYex1e_3rqXUCkVLiLmE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6400::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:88:ed:e7:13:f5:a8:9c:7e:19:8f:27:4f:73:6c:9e:cf:f6:
         b8:c4:7e:d5:17:c3:fe:97:a7:13:15:b8:a0:2a:52:64:73:8b:
         60:10:22:fc:73:18:73:e3:6c:c1:86:cf:7d:e4:14:ba:7d:dd:
         f1:58:e2:9c:c3:7b:3b:e7:be:85:4d:e1:d9:ed:fa:bc:da:90:
         ac:aa:b1:5e:fc:36:6e:ba:8a:47:ea:04:09:d2:aa:32:6b:6b:
         9a:c2:83:67:93:b6:cc:4e:69:2e:ae:a7:da:35:30:8f:29:4e:
         0f:ad:19:8c:52:d3:97:89:aa:ec:10:21:94:93:aa:f8:f7:b1:
         81:2d:6a:32:bb:fe:8f:1a:0c:2b:88:9d:b0:61:72:16:6f:3b:
         a0:9c:d0:dc:e9:b0:b9:db:a2:fb:d6:02:32:db:c7:4f:8e:95:
         74:c6:aa:15:09:dc:f5:40:b7:e1:98:a0:38:d6:26:55:96:76:
         9b:d6:4d:2c:18:5a:b4:30:24:67:4b:3a:b7:e6:78:28:07:88:
         9e:f4:87:07:66:db:19:a1:4d:c0:a2:23:56:51:5f:3f:81:01:
         12:c4:cc:2a:27:3a:25:0b:f6:9d:7c:2a:22:80:54:5e:e3:0f:
         40:f3:17:21:05:d8:cd:10:c3:a3:72:17:f7:a7:bf:3b:e5:a9:
         04:ae:d8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org