Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ga5kUomwAi2fRx1dXZ65Nte7jgk.roa
File:                     ga5kUomwAi2fRx1dXZ65Nte7jgk.roa (raw, json)
Hash identifier:          tTXfefCvCD2CQ2eIU2vLOMtZcBReeXF1DJ/mXxk/TO4=
Subject key identifier:   81:AE:64:52:89:B0:02:2D:9F:47:1D:5D:5D:9E:B9:36:D7:BB:8E:09
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0103
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ga5kUomwAi2fRx1dXZ65Nte7jgk.roa
Signing time:             Tue 30 May 2023 16:12:32 +0000
ROA not before:           Tue 30 May 2023 16:12:32 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7c00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:32 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=81AE645289B0022D9F471D5D5D9EB936D7BB8E09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:51:07:b9:cb:d3:5e:c7:f4:af:41:4d:c2:2b:
                    91:87:c4:c8:2a:a6:6d:a1:c3:f2:5f:dd:0e:4d:b0:
                    b8:6c:e6:5f:ed:5a:75:75:7d:05:d6:2b:ab:07:69:
                    ec:00:1f:b7:03:31:0f:4b:b4:85:19:b1:55:4b:47:
                    00:f7:aa:b7:6b:59:b0:0b:f0:b1:0a:00:c0:ad:b3:
                    06:c3:69:cf:86:81:a9:83:35:37:89:fa:1f:67:2f:
                    a4:c5:c9:8e:25:c2:79:a8:1c:c1:f4:6d:f4:f1:c9:
                    5b:1d:89:b3:3a:0c:5c:20:9e:c0:d8:a2:83:8c:3d:
                    49:ee:a8:1f:78:fa:11:3d:d5:23:cc:f8:2d:ed:8c:
                    97:3d:4f:2f:39:35:6f:03:35:f2:50:d6:9d:cc:cc:
                    c7:99:1d:2f:76:b2:d0:fa:a9:de:f1:76:b4:8e:a4:
                    51:9d:fb:11:40:75:33:21:e6:c1:dc:c8:14:ec:1b:
                    d8:7a:fa:89:ed:ea:05:04:a5:37:27:99:3f:f9:79:
                    43:c7:bd:29:31:b3:88:05:f9:36:6c:9c:d3:59:d0:
                    96:84:a1:03:51:4a:46:c9:da:f1:dd:5e:b8:53:3e:
                    da:5a:be:5f:f8:bb:10:d9:4e:0d:63:b8:02:b9:e3:
                    48:47:cd:a0:b5:cb:08:0b:91:8a:87:ea:1a:83:37:
                    56:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AE:64:52:89:B0:02:2D:9F:47:1D:5D:5D:9E:B9:36:D7:BB:8E:09
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ga5kUomwAi2fRx1dXZ65Nte7jgk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:b3:b4:4a:2b:7d:86:fa:49:65:49:88:3b:4e:e4:8d:77:fb:
         a7:f1:8e:46:45:d7:d3:38:2c:b4:a1:a9:60:24:ba:c0:35:ab:
         bc:07:66:f0:80:03:70:f2:e4:81:65:64:e3:72:aa:bc:3c:52:
         f9:7a:c4:17:ae:0a:41:8d:2c:8a:71:46:1e:93:7d:23:c2:b2:
         72:c8:e7:7e:53:a2:c6:5c:a2:0a:cc:09:50:3b:ff:04:eb:a9:
         bf:52:f3:13:8e:70:5f:71:bb:40:fd:a8:6e:31:80:21:e9:83:
         43:6e:38:9a:96:8a:28:4f:38:f1:49:de:80:0e:4c:be:53:f5:
         c0:87:cb:21:a5:e4:5c:49:b1:a4:0c:84:91:31:5d:85:19:00:
         8e:df:e9:98:1b:df:97:a1:fa:d1:2d:bd:91:d0:c4:3a:6c:bc:
         09:89:86:c5:7e:e0:30:51:a1:ad:ce:56:0b:19:5a:11:04:2e:
         2f:e7:18:23:40:36:ab:c8:76:87:4d:4e:4a:a7:b1:f9:1b:c3:
         c6:18:4a:8b:98:c5:c8:c1:f1:31:a8:78:da:95:05:07:02:25:
         44:89:df:dd:58:04:db:53:8f:c5:3a:3e:e2:3c:25:55:36:6e:
         83:6e:61:f9:70:5a:5e:ef:b4:09:e7:b6:2f:a7:bb:fe:c0:2d:
         2e:d8:83:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org