Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/eI9DRFKgGAmXVIbYt5Ewr-FiOfc.roa
File:                     eI9DRFKgGAmXVIbYt5Ewr-FiOfc.roa (raw, json)
Hash identifier:          dktJ15bMlurO878b32QyGXYPD44zVZWrlkzobC58geI=
Subject key identifier:   78:8F:43:44:52:A0:18:09:97:54:86:D8:B7:91:30:AF:E1:62:39:F7
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       60
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/eI9DRFKgGAmXVIbYt5Ewr-FiOfc.roa
Signing time:             Tue 30 May 2023 16:04:26 +0000
ROA not before:           Tue 30 May 2023 16:04:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1000::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=788F434452A01809975486D8B79130AFE16239F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b2:d8:b9:1e:48:6f:e2:5e:53:00:50:3f:50:
                    e6:85:56:2f:09:f4:b2:31:71:1e:e8:02:59:ea:bc:
                    a0:93:8d:4f:07:fb:2d:6f:25:26:77:e8:40:44:65:
                    9f:4f:94:6f:1a:04:07:35:aa:81:fb:a9:f1:7a:8e:
                    a9:20:ae:ca:8a:a3:4d:d2:d2:e3:b1:6b:11:da:c1:
                    2d:de:19:22:86:8d:32:4f:56:ff:aa:e4:7c:18:36:
                    16:82:05:c5:6c:3d:c4:b5:40:09:26:bc:8b:47:05:
                    24:f1:10:20:27:79:a9:7a:d2:1f:bd:b3:1c:55:0c:
                    4f:3e:8c:bc:30:50:c3:23:15:ed:94:5f:e9:46:42:
                    65:54:92:d9:8b:e1:d7:25:17:00:35:41:ad:46:f3:
                    d4:2c:2b:fc:8a:93:b4:8b:83:4b:44:cc:47:7f:fd:
                    0f:b9:a8:88:24:0d:1d:68:72:73:ae:13:8b:74:d9:
                    40:6b:d0:94:34:d8:95:51:28:e5:d6:d9:07:2c:90:
                    d8:61:a5:92:14:4c:c2:6c:e6:18:b8:39:a0:1a:6e:
                    56:f8:6e:57:a2:e8:cc:47:1b:2c:d5:24:d6:73:3e:
                    d1:82:3b:cd:9f:28:c3:ff:47:c6:f8:7e:85:0a:9d:
                    61:96:45:d1:df:d5:ea:26:7f:ca:92:af:bf:9c:1f:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8F:43:44:52:A0:18:09:97:54:86:D8:B7:91:30:AF:E1:62:39:F7
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/eI9DRFKgGAmXVIbYt5Ewr-FiOfc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a7:5f:63:26:3a:3b:ab:19:e2:b8:ef:5f:2b:b8:51:59:49:54:
         22:3a:b8:12:2b:b1:c6:bc:e5:64:56:f9:ec:ad:eb:00:36:5c:
         dc:82:31:85:e9:0d:a7:2f:6f:5f:9d:12:78:fc:eb:bc:85:4f:
         cb:00:aa:25:f7:ae:21:e0:be:3a:fd:4e:3d:f7:ce:01:64:45:
         d7:8a:83:8d:3a:fd:3a:7c:ad:83:3f:93:8a:7b:53:9d:29:ff:
         1e:87:52:e0:3b:f7:ab:d1:10:05:ac:e7:43:45:91:89:ad:23:
         e6:4d:40:e7:42:64:e0:d2:9a:b1:b4:e4:e2:87:02:81:20:44:
         46:bb:62:8e:ee:4c:ee:ab:3c:67:5b:f1:2f:f3:ee:a1:0e:bc:
         d9:0a:32:6b:f7:c0:16:a4:1a:b6:1a:f6:b9:08:4a:71:03:1f:
         00:cd:b6:51:bd:ee:aa:94:ab:2a:9e:2a:d1:80:a9:0a:5f:5b:
         b6:9e:4e:ab:92:50:bb:60:75:de:69:a3:df:a0:d8:bd:e8:b7:
         b6:36:04:22:ff:d4:5e:00:97:70:51:51:6e:d1:e2:f1:f9:a9:
         14:04:2d:29:ba:49:fc:1e:19:c8:f9:9b:a6:a1:5e:7f:13:d0:
         03:fe:42:e0:eb:42:85:ec:4a:c3:bc:ef:72:82:f4:75:d5:26:
         e7:15:2e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org