Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fJT7ffwfLKwxG1Q_hPDQVae2Dn8.roa
File:                     fJT7ffwfLKwxG1Q_hPDQVae2Dn8.roa (raw, json)
Hash identifier:          tVWFbZTpTiFWUGwfm/etN0aRJA9OOYRbfHL0TiWuw6Y=
Subject key identifier:   7C:94:FB:7D:FC:1F:2C:AC:31:1B:54:3F:84:F0:D0:55:A7:B6:0E:7F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01A4
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fJT7ffwfLKwxG1Q_hPDQVae2Dn8.roa
Signing time:             Tue 30 May 2023 17:36:22 +0000
ROA not before:           Tue 30 May 2023 17:36:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6200::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=7C94FB7DFC1F2CAC311B543F84F0D055A7B60E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:f4:dd:39:c4:b7:17:74:5d:cd:3e:eb:74:
                    4e:13:a7:97:17:92:e7:4a:26:b7:59:6c:35:77:b4:
                    22:1e:de:84:5e:3e:2c:f2:cf:13:c5:1d:b5:f4:94:
                    88:6e:11:2d:38:20:2e:96:79:26:94:48:f9:89:6a:
                    80:d5:c5:44:4e:f6:61:ec:df:fa:84:73:4b:5e:3f:
                    a8:2b:2f:84:83:61:c6:85:b3:04:c3:b9:ba:ad:bc:
                    a9:84:9b:e0:6a:8c:80:90:08:dd:04:b7:2f:33:9c:
                    24:6a:4d:12:d2:98:fa:4b:f4:4f:fe:b2:c5:c9:a9:
                    f1:d1:9b:72:66:ab:75:f5:41:50:e7:5c:e2:57:b0:
                    97:13:a7:50:9e:72:ef:f7:b1:3b:5c:fe:2c:aa:58:
                    d5:e5:c9:3b:62:61:c9:d5:86:2a:65:86:b9:0e:d5:
                    6f:32:78:0e:63:30:8f:17:b4:d8:41:00:11:08:ed:
                    15:95:49:57:68:aa:f2:7e:ed:f6:99:b8:0b:d3:53:
                    40:6d:82:d5:ed:01:9d:08:ef:d8:7a:37:ab:e4:ac:
                    c4:b8:fc:b4:20:80:08:71:ca:1d:71:97:af:e2:ee:
                    74:22:03:19:b7:94:be:56:44:ca:c5:4b:3d:64:ba:
                    ed:9a:75:42:b9:2c:a5:a7:46:f6:84:ef:55:fc:f5:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:94:FB:7D:FC:1F:2C:AC:31:1B:54:3F:84:F0:D0:55:A7:B6:0E:7F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fJT7ffwfLKwxG1Q_hPDQVae2Dn8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6200::/40

    Signature Algorithm: sha256WithRSAEncryption
         0f:13:f3:8b:a5:bd:b0:96:51:10:69:df:06:ff:9d:b9:bc:ea:
         2b:b0:70:6d:5f:53:15:da:b3:dd:a8:3f:93:76:1a:c8:14:6d:
         e3:f0:6d:f1:b8:43:b7:05:85:0b:0b:12:4c:80:7d:1d:27:85:
         19:a4:97:4a:84:2e:a4:a7:5e:77:47:9d:ee:37:3a:5c:a5:92:
         b3:c6:46:8b:65:7c:bc:d9:38:a5:04:e3:72:b9:48:24:98:06:
         43:d7:40:ed:92:5d:4e:4e:81:3a:64:5b:12:f4:64:77:2c:fb:
         e8:4a:0e:1a:4c:ef:7d:7a:80:b8:bc:1b:67:69:05:50:92:e7:
         22:1a:86:17:6a:a7:ba:5c:90:ac:30:ea:ad:02:16:fa:34:03:
         64:92:bd:3c:31:14:e4:b5:2e:4a:e8:cb:5b:aa:18:39:7c:a6:
         30:8e:14:98:b4:09:9c:af:c4:18:e1:88:21:42:60:c0:53:36:
         04:a1:d6:bf:78:a9:af:dd:2f:82:24:26:3e:7e:3d:f7:21:39:
         f6:ea:77:09:11:13:60:43:48:e5:6d:f1:36:70:43:ff:c0:19:
         c6:65:e8:b1:6d:fa:69:6a:c1:a1:61:89:3c:47:e0:3c:d3:c7:
         8f:71:43:6b:f8:e0:b2:6b:8e:f4:57:09:4b:67:9a:f5:14:64:
         b5:cf:e1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org