Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/dY4UjS99rFZ4IjIbslE-OFnjTSQ.roa
File:                     dY4UjS99rFZ4IjIbslE-OFnjTSQ.roa (raw, json)
Hash identifier:          bCHmkbXY6x9zvQXGEYAx8rqY5JcL4i0IFTU9yj54vtA=
Subject key identifier:   75:8E:14:8D:2F:7D:AC:56:78:22:32:1B:B2:51:3E:38:59:E3:4D:24
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       AD
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/dY4UjS99rFZ4IjIbslE-OFnjTSQ.roa
Signing time:             Tue 30 May 2023 16:08:23 +0000
ROA not before:           Tue 30 May 2023 16:08:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a300::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=758E148D2F7DAC567822321BB2513E3859E34D24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:3d:9a:fc:35:e4:97:a9:b1:5d:d8:e1:24:
                    f1:0f:e3:4d:65:05:d3:ee:dd:5a:c7:77:66:b3:78:
                    b5:f5:29:b2:e6:34:20:49:56:f9:16:45:48:3b:50:
                    ad:88:9e:df:c8:31:8b:e8:36:e6:0a:8c:7a:5c:23:
                    e9:21:63:b1:74:d8:86:71:81:51:d8:7a:90:1a:87:
                    f8:f0:54:e8:f7:27:50:a5:2b:de:e2:ef:82:c7:6b:
                    1c:61:de:af:91:61:43:f9:0f:03:d5:7c:96:4e:50:
                    e5:d0:00:16:b3:62:c9:96:e7:a7:70:c7:85:02:63:
                    f4:d8:8b:8e:0d:b1:d4:e3:51:82:f8:dd:ac:34:0e:
                    6a:77:3f:f0:6c:3e:9e:a1:32:7f:72:9a:ff:75:e1:
                    8e:6f:54:0f:aa:4d:e8:9f:bd:1f:2c:df:15:dd:3e:
                    26:8d:2b:e3:e0:ff:8a:af:01:6a:db:ad:2c:d2:7f:
                    23:44:e4:6f:93:a8:2e:b8:93:ec:a5:3f:2d:3e:97:
                    4d:62:6b:35:6a:f5:6c:cc:41:f5:48:8a:e4:53:e1:
                    a8:c9:ae:64:f3:a1:29:37:f5:52:64:e4:0b:8a:da:
                    59:8a:30:15:60:cc:9c:28:a4:d7:40:4e:df:a9:dd:
                    e6:aa:ad:04:2b:e6:dc:62:6c:11:33:01:43:82:33:
                    fd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8E:14:8D:2F:7D:AC:56:78:22:32:1B:B2:51:3E:38:59:E3:4D:24
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/dY4UjS99rFZ4IjIbslE-OFnjTSQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a300::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:59:62:4c:60:24:5a:a8:d1:fd:87:36:08:07:48:59:41:e5:
         3c:3f:4e:25:fe:49:16:16:63:8d:28:2f:54:19:46:c8:c4:e1:
         6f:5b:3f:a8:7a:00:67:06:0f:f2:71:7d:d4:08:12:8b:04:7a:
         a2:76:f0:b5:db:80:ac:20:ee:25:48:ed:09:23:13:11:f0:c4:
         87:fb:8c:83:ee:db:23:b8:a9:b9:59:80:00:f8:fd:c3:0b:fb:
         eb:b5:1b:69:55:53:ee:78:6f:48:af:30:c2:ed:90:bc:70:81:
         24:72:1a:b5:e5:67:00:f0:e9:2c:5b:fb:9b:c0:f8:86:9e:76:
         99:71:10:a0:d2:f8:9d:24:93:2e:43:cd:96:b1:7a:4f:e7:44:
         8d:09:6a:5e:1e:3a:3a:02:70:3b:13:3a:6c:78:8a:29:a7:4e:
         c9:df:ee:81:55:5c:c9:3a:65:03:0b:19:10:ee:81:1b:b6:ae:
         41:13:ec:eb:48:0c:37:c1:26:82:e4:3f:a6:67:fd:0b:db:46:
         28:ae:82:fe:36:ec:5d:a2:b5:68:e1:a1:a6:e1:24:9c:8f:84:
         06:a7:be:46:17:67:ca:50:b6:69:2b:ef:cd:59:a5:ba:46:6c:
         81:6a:04:28:8f:26:a1:7d:bc:34:bc:81:cb:ba:9d:2e:6e:5b:
         c6:01:ca:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org