Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/e8QqqFm_I1TCmfrlGlp15sF1D78.roa
File:                     e8QqqFm_I1TCmfrlGlp15sF1D78.roa (raw, json)
Hash identifier:          aNMeAKV+YR/NH/SNdmcqzZdcPi8YX2YYpWLrq8j542k=
Subject key identifier:   7B:C4:2A:A8:59:BF:23:54:C2:99:FA:E5:1A:5A:75:E6:C1:75:0F:BF
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       9C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/e8QqqFm_I1TCmfrlGlp15sF1D78.roa
Signing time:             Tue 30 May 2023 16:08:17 +0000
ROA not before:           Tue 30 May 2023 16:08:17 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:500::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:17 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=7BC42AA859BF2354C299FAE51A5A75E6C1750FBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b1:b6:d1:da:06:b6:2d:10:9f:ca:c9:db:1d:
                    08:d2:bf:c9:00:21:88:a9:78:38:4f:13:51:3a:1d:
                    e8:35:b7:1b:a1:47:6f:03:ce:19:ac:d9:3c:56:e3:
                    4b:b4:bf:28:90:82:0c:c8:88:7d:02:ae:08:86:d8:
                    fd:d7:ad:f4:d5:ad:19:e3:7a:76:29:cd:33:17:f4:
                    28:b6:81:1a:aa:97:50:ef:ef:14:8f:6e:c1:68:00:
                    7a:5b:24:ab:c7:82:d6:6a:62:86:61:54:03:51:92:
                    75:8f:86:bb:15:7b:3a:1e:37:28:2e:07:65:82:2e:
                    2a:26:1e:52:54:85:d8:1c:b1:45:39:dd:89:3f:b3:
                    57:59:c0:81:f3:d9:89:b8:ac:95:68:a3:8a:21:4d:
                    ed:2f:4c:e1:09:75:e6:c6:12:bc:d9:51:e7:b4:59:
                    c2:7e:b6:56:96:3e:e1:d3:d4:9c:c6:e8:a2:e9:7d:
                    81:38:8d:98:b0:8c:73:fb:bc:56:cb:3c:12:df:90:
                    2c:5f:83:57:0a:ff:c4:f4:21:b8:a9:b3:68:23:80:
                    2b:93:e6:31:af:90:a8:2c:f1:c2:f8:5b:85:52:5b:
                    0a:8d:55:28:51:b7:6f:6b:88:f4:93:dc:c0:84:f9:
                    4d:dc:2d:50:13:be:ca:4c:91:b3:f5:e0:bc:ef:ce:
                    ce:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C4:2A:A8:59:BF:23:54:C2:99:FA:E5:1A:5A:75:E6:C1:75:0F:BF
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/e8QqqFm_I1TCmfrlGlp15sF1D78.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:fc:38:11:0c:03:41:28:c9:83:25:09:f6:5c:a4:d9:4e:ba:
         80:4d:67:a9:49:40:69:2e:b2:c4:b2:af:6e:72:a5:e5:59:95:
         cc:ad:eb:74:9f:f5:e5:a8:80:95:af:00:fb:f7:b9:b7:65:b2:
         b5:fc:aa:f4:a6:6a:58:5e:0d:0f:e5:67:46:fe:c8:01:58:3d:
         27:12:41:c6:6a:aa:2a:27:40:78:1d:d3:2d:1a:a3:44:82:79:
         92:56:f2:5c:1c:57:9d:21:9b:0b:87:71:f4:51:c5:e8:e4:e3:
         f6:82:4d:f0:bc:8c:3c:ec:ff:6a:20:74:52:b9:90:12:9c:b9:
         9f:46:c4:16:0b:db:8d:26:10:5d:9c:a1:ea:46:da:1d:c8:1a:
         42:b1:90:e5:3b:a2:2d:ea:c8:d9:46:f2:c9:fb:a9:dd:67:61:
         6b:da:a9:c9:93:e1:c1:a8:01:a2:25:96:7b:4f:48:fc:b7:43:
         ba:51:f5:b5:a6:8b:01:d9:c1:29:91:b3:74:46:77:fc:05:5a:
         80:c1:e5:00:7d:82:13:f5:f6:7a:68:ce:a7:02:9d:7a:3c:d2:
         a9:4c:19:79:11:3a:41:8f:15:41:f4:8e:e8:b5:f7:b9:c5:9b:
         b0:f8:8f:68:23:1b:1f:19:d2:b6:e6:32:db:dd:ca:dc:ee:7c:
         5c:a8:fe:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org