Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/g-li-kymMPAn01i_WqNWOCzXp9E.roa
File:                     g-li-kymMPAn01i_WqNWOCzXp9E.roa (raw, json)
Hash identifier:          3IL0FuPNpZnH/++THS5pN6bYo4yXh52DU7cF1R8HgAs=
Subject key identifier:   83:E9:62:FA:4C:A6:30:F0:27:D3:58:BF:5A:A3:56:38:2C:D7:A7:D1
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0121
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/g-li-kymMPAn01i_WqNWOCzXp9E.roa
Signing time:             Tue 30 May 2023 16:14:22 +0000
ROA not before:           Tue 30 May 2023 16:14:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1500::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:14:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=83E962FA4CA630F027D358BF5AA356382CD7A7D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:dd:fd:6b:fa:83:b2:af:9c:44:31:2f:f5:
                    d8:d3:b1:69:0e:25:f9:0d:d6:bf:c8:f2:6c:2a:6c:
                    6f:72:0b:e1:67:50:a2:2b:15:36:7e:fa:e3:d6:27:
                    55:d8:c6:89:1b:62:88:7b:3d:fe:bd:7e:3b:39:66:
                    8d:ef:f3:d4:2f:a8:57:da:8d:18:9c:30:38:59:00:
                    53:c6:c8:03:77:82:08:86:c3:d9:3f:f1:5c:7c:06:
                    70:3a:4a:4e:94:8d:a1:f0:48:9d:cc:52:85:65:b3:
                    84:c1:b5:9c:12:69:a9:fb:e6:d2:9a:cb:5d:1a:98:
                    fe:5b:33:41:95:ac:3b:1d:5d:f0:4f:46:b5:37:94:
                    63:2d:f1:87:57:2d:20:7a:0a:dc:01:aa:a5:fe:d7:
                    1d:99:a5:b6:a8:1b:75:ac:81:de:fd:8f:5e:d3:9d:
                    d6:2d:24:57:9c:ae:12:e7:59:1c:7e:3c:c7:c1:9b:
                    9b:f6:82:7f:bc:7a:b3:2f:7d:19:1b:17:39:bc:8e:
                    6b:a9:c0:e8:cb:01:1e:15:3f:12:f4:cf:d3:0d:f3:
                    08:d9:94:e4:52:02:35:39:d4:ae:4d:55:9a:be:6a:
                    f7:30:d7:af:fa:7c:70:d1:65:46:1e:b1:e3:61:22:
                    e8:55:34:bf:42:1a:d1:4d:d4:86:ad:16:07:1c:3b:
                    e1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E9:62:FA:4C:A6:30:F0:27:D3:58:BF:5A:A3:56:38:2C:D7:A7:D1
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/g-li-kymMPAn01i_WqNWOCzXp9E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1500::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:d5:3c:fa:56:69:33:0e:e6:de:a7:67:4d:d0:a0:b1:b0:61:
         08:a0:d6:34:f2:75:6c:a8:4a:70:c6:97:9a:22:9b:9f:46:ef:
         b9:2e:72:27:89:8b:9b:f6:2f:54:8f:65:12:31:e4:a4:1f:30:
         f1:fc:e3:19:b5:46:a6:46:39:34:6d:75:61:f2:1e:4b:7f:41:
         17:4e:8c:f4:8a:e7:6d:f5:f0:45:af:e3:85:43:64:98:a8:c4:
         aa:10:a6:d3:38:48:72:0f:12:97:aa:3b:cd:78:ee:a4:29:a2:
         ce:5a:79:94:41:f9:ab:1c:5e:6b:d5:68:b6:45:74:20:84:25:
         ac:72:bb:1e:f1:ea:48:cb:21:35:0f:99:ac:94:15:d7:21:9b:
         79:8d:80:de:23:4c:b2:e1:7c:13:45:92:47:c3:98:97:80:ed:
         94:88:2e:94:a9:93:e8:68:2a:bc:4e:29:97:69:f2:2b:b0:12:
         27:39:b8:4d:6f:f4:0c:e4:d7:b8:36:9e:b1:e7:22:a3:a7:e5:
         ce:06:10:73:f6:45:ce:de:71:5b:ae:62:9e:16:4a:7a:7b:cf:
         6b:26:98:5c:c1:17:fa:d8:3e:5a:31:0d:b0:d4:81:b6:75:00:
         41:4d:63:22:b4:55:dd:3a:31:96:f9:bb:73:9c:bc:6b:d5:39:
         6e:58:88:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org