Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fYJXPxlkSB-rDMswNyrgVAREQPc.roa
File:                     fYJXPxlkSB-rDMswNyrgVAREQPc.roa (raw, json)
Hash identifier:          4xgEnZ4kB1dItf3yUPIuI7ESqLbolQcwiCk3H+Sg6+E=
Subject key identifier:   7D:82:57:3F:19:64:48:1F:AB:0C:CB:30:37:2A:E0:54:04:44:40:F7
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       25
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fYJXPxlkSB-rDMswNyrgVAREQPc.roa
Signing time:             Tue 30 May 2023 16:02:06 +0000
ROA not before:           Tue 30 May 2023 16:02:06 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:df00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:02:06 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=7D82573F1964481FAB0CCB30372AE054044440F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d8:d3:69:b5:c4:39:c6:d3:7c:0a:2e:af:68:
                    dc:66:73:50:28:21:6c:00:0c:26:66:1d:5e:a6:7d:
                    fb:5a:ab:e1:a2:90:63:4b:aa:14:ec:49:89:29:b3:
                    e2:7d:fa:98:ff:b2:b7:75:6f:81:b2:f2:09:df:ab:
                    8f:46:9c:99:38:5c:40:2b:59:6a:03:8f:79:33:9c:
                    f4:dc:9a:b4:ea:3b:4d:d1:cb:38:d1:b1:59:b4:42:
                    92:03:a5:27:5c:1f:c9:fd:e0:53:b4:b9:28:37:29:
                    89:10:7a:87:b0:f2:54:be:e7:cf:c3:ef:32:2f:5e:
                    60:39:c0:1c:c4:fa:85:b4:e2:30:fc:58:1e:47:e2:
                    ae:87:49:ca:1f:ec:a2:4a:14:f5:6f:da:ca:99:13:
                    be:95:5c:5f:1b:5d:e5:e0:ee:05:c1:71:c2:4b:3e:
                    3b:17:64:f6:26:50:13:71:c3:d0:c0:62:3a:cd:75:
                    74:ff:8d:96:a9:de:67:6a:39:62:2a:19:52:66:80:
                    7a:d2:d0:1b:52:e1:d8:57:10:9c:d7:cb:0e:8c:cc:
                    c8:31:4d:29:72:8d:11:0e:fa:86:00:49:6f:4e:bd:
                    6c:40:22:e0:0a:ca:a2:b3:64:10:69:3b:89:ff:70:
                    2a:5a:68:af:d9:35:dd:43:76:b3:ce:73:f0:e5:37:
                    ba:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:82:57:3F:19:64:48:1F:AB:0C:CB:30:37:2A:E0:54:04:44:40:F7
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fYJXPxlkSB-rDMswNyrgVAREQPc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:df00::/40

    Signature Algorithm: sha256WithRSAEncryption
         aa:9f:28:83:20:de:6d:9c:07:da:bf:3a:53:5e:44:bb:a1:55:
         cd:b3:51:27:3d:5c:6f:24:f7:83:a0:d5:45:11:76:69:79:aa:
         1a:84:34:a9:53:f1:30:17:f6:9e:3c:c9:12:b6:cf:4d:89:ce:
         3e:4b:28:53:06:26:dc:fc:d5:63:c4:aa:0b:a8:fa:4e:77:12:
         d2:16:4b:af:3c:62:17:eb:ee:92:73:5e:13:2f:fb:bd:06:1b:
         66:99:ce:14:39:7b:e8:a0:30:87:3f:90:06:c5:41:e5:a2:6c:
         9f:49:7b:04:6e:9e:5c:40:71:9b:cf:7f:a0:26:89:be:68:4f:
         8f:de:bc:c0:1d:b0:b9:51:1f:21:d4:82:33:fd:8d:71:af:58:
         be:37:88:de:09:b6:0a:68:7e:80:78:00:3f:79:c3:e4:a8:59:
         4f:e8:1b:dc:4e:d4:e9:2b:25:ba:b3:88:2b:a8:bd:82:63:2b:
         06:a8:27:e3:13:ab:33:75:50:73:b2:ed:83:42:0c:24:59:cd:
         e0:b1:aa:13:a2:bd:6b:55:80:ac:83:e7:d8:f0:82:5a:d9:d6:
         6a:e0:e9:c6:55:79:b8:be:b7:76:85:f2:3c:a6:d2:4e:55:ea:
         2d:24:6c:8e:5e:2b:ee:1f:2b:fc:73:96:a3:7a:c1:0b:bc:ea:
         8e:22:8f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org