Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/g0Mr7aYSoCVXUqLijcHgbxvbq-o.roa
File:                     g0Mr7aYSoCVXUqLijcHgbxvbq-o.roa (raw, json)
Hash identifier:          +UlFObPyGFwAQBB01ZkXOWOxSsxOaBv9/KMOe0+NSNg=
Subject key identifier:   83:43:2B:ED:A6:12:A0:25:57:52:A2:E2:8D:C1:E0:6F:1B:DB:AB:EA
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       47
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/g0Mr7aYSoCVXUqLijcHgbxvbq-o.roa
Signing time:             Tue 30 May 2023 16:04:18 +0000
ROA not before:           Tue 30 May 2023 16:04:18 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:fe00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:18 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=83432BEDA612A0255752A2E28DC1E06F1BDBABEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1d:8e:db:b2:5e:c8:30:1c:64:c4:c1:44:61:
                    38:a5:85:4b:34:ee:4b:02:54:73:1a:ce:76:e8:58:
                    e8:50:95:32:dd:bd:cb:00:31:53:55:4f:c0:99:20:
                    1f:f1:cb:11:0f:e7:a3:1b:e8:36:e4:67:99:67:74:
                    51:9c:3d:0d:14:f0:6e:c9:ec:85:3f:35:3b:74:ae:
                    05:3d:88:7c:af:f9:15:99:1c:aa:03:08:bf:46:f6:
                    46:58:44:d4:04:3b:e2:bb:29:01:fb:ac:ee:8d:09:
                    a6:ce:a7:6e:a6:7e:61:d6:f0:b0:36:a9:72:42:a0:
                    71:44:ba:93:8f:fc:d0:9d:93:7f:4f:10:7d:29:b2:
                    d2:b4:25:1b:51:b0:09:34:14:c2:cc:2b:9c:4f:92:
                    78:4d:86:ae:10:20:ed:ab:56:c5:2d:10:0b:65:b5:
                    cf:7c:99:2b:e1:e1:db:ce:ae:c2:70:1e:62:f2:f6:
                    85:28:35:8a:10:16:f5:fd:ca:64:c8:fb:b5:d9:0d:
                    6a:b4:a0:b5:18:ff:ca:8e:d5:9d:40:b8:b6:e1:fa:
                    06:dc:22:eb:08:60:af:b3:15:64:1c:55:11:9f:d6:
                    1f:69:9d:9e:91:66:f5:00:86:ad:a7:a0:f3:6a:40:
                    4f:96:e4:d0:6e:9f:98:ff:f6:8f:1e:ab:c3:96:6c:
                    b4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:43:2B:ED:A6:12:A0:25:57:52:A2:E2:8D:C1:E0:6F:1B:DB:AB:EA
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/g0Mr7aYSoCVXUqLijcHgbxvbq-o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b1:14:c2:ee:c9:45:dc:48:c4:e4:8e:06:4d:1b:69:db:c1:74:
         92:c2:e0:34:50:a1:55:f8:0a:6a:2c:cf:e9:e0:fe:e7:df:28:
         b5:68:0b:eb:fe:f3:55:e8:76:7b:5a:49:85:6d:05:b7:5a:c3:
         72:9d:18:59:e2:c2:44:ad:08:8e:78:b0:78:7f:49:91:8e:4c:
         2c:24:56:15:ba:33:b7:69:05:32:fd:b8:29:f0:76:f4:74:b2:
         47:9c:20:ec:ba:8d:e7:ed:a4:cd:07:92:92:14:4e:21:e7:6c:
         24:b6:24:78:a1:48:d7:e3:ea:34:1b:19:70:e1:a5:61:ac:d6:
         de:01:99:e7:11:ee:da:af:14:86:a7:a2:d7:e1:4d:de:36:8a:
         5f:c4:28:bc:b2:a7:ec:e4:d8:6e:02:4c:e0:ab:6f:5c:0f:5e:
         8d:25:25:f3:4e:96:36:76:b9:39:a4:6f:b5:59:6e:d6:66:f6:
         b9:7c:4d:f1:c3:c6:f3:56:5f:56:61:50:87:a0:8c:7b:9d:26:
         0f:bb:09:2c:52:68:d7:21:23:11:0b:c0:82:8a:8d:1b:55:63:
         74:62:3c:13:5e:5e:c9:4b:5d:64:63:86:fb:54:9b:e8:c2:d7:
         24:74:50:d4:7c:62:8a:dc:23:75:8b:7e:03:72:9e:d8:93:6d:
         a9:53:5b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org