Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hCiEnwnTThG2pPfovsVwoFsT9ts.roa
File:                     hCiEnwnTThG2pPfovsVwoFsT9ts.roa (raw, json)
Hash identifier:          8cfPbQeXx/lQqGYjsYcr+mBNrC9qV4T1XVh9miChZEU=
Subject key identifier:   84:28:84:9F:09:D3:4E:11:B6:A4:F7:E8:BE:C5:70:A0:5B:13:F6:DB
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       D7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hCiEnwnTThG2pPfovsVwoFsT9ts.roa
Signing time:             Tue 30 May 2023 16:10:22 +0000
ROA not before:           Tue 30 May 2023 16:10:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6700::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8428849F09D34E11B6A4F7E8BEC570A05B13F6DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:a9:4c:dc:e3:f0:fe:9c:52:ed:fc:f0:6b:
                    d4:ce:14:ad:7f:e9:ca:29:ca:e9:35:20:7e:37:70:
                    26:40:9e:f7:2f:54:5b:3b:fd:40:6a:30:c4:60:82:
                    33:32:b6:cd:c6:87:8d:ae:ac:24:d1:d5:10:58:59:
                    43:65:91:58:72:49:4a:23:5f:25:bf:68:d7:da:6e:
                    1a:ff:3d:46:4a:30:ad:b6:d3:e3:83:79:ea:cf:a6:
                    55:22:09:f1:5f:50:3a:5e:45:46:47:31:a8:77:29:
                    43:3b:59:cb:ef:8c:b2:ba:a8:53:00:52:3c:5a:74:
                    d8:42:4c:0b:09:09:6e:4a:44:27:4e:c6:60:0c:05:
                    1b:b6:39:ab:aa:02:68:ce:64:9c:58:3c:7f:fe:f5:
                    b4:8b:94:1e:ed:21:e0:65:6c:42:65:b4:c9:17:63:
                    66:a1:55:2a:cf:f5:bd:38:b8:56:6f:bf:36:5a:33:
                    37:a8:91:e5:19:49:4f:4e:e9:50:a0:cf:c5:8a:b0:
                    95:c7:3d:f5:50:5f:22:db:d1:43:e7:aa:3d:2c:57:
                    ca:78:8d:bb:9c:71:72:44:dd:cf:99:e8:1b:03:0b:
                    94:72:5f:ef:ec:7e:c8:be:09:58:6d:11:24:29:4e:
                    3c:8e:8b:13:fb:00:0e:16:fa:a0:66:1a:99:ee:c5:
                    db:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:28:84:9F:09:D3:4E:11:B6:A4:F7:E8:BE:C5:70:A0:5B:13:F6:DB
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hCiEnwnTThG2pPfovsVwoFsT9ts.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6700::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:b8:b9:0a:d6:d9:91:02:d7:f0:2a:ba:69:67:00:00:67:b3:
         e0:b9:8b:d2:8b:52:a6:d3:de:f0:02:51:6e:72:22:c1:89:5f:
         47:78:95:d3:48:88:0a:0e:eb:48:76:d8:ba:e0:b9:29:e5:80:
         fc:0a:cd:da:81:af:9e:aa:52:a2:2b:d3:0c:5f:7b:d6:2a:62:
         75:94:78:a3:da:0a:9e:d0:a8:a3:75:f0:3d:16:b6:3c:89:14:
         76:67:b9:07:62:96:9f:8f:ed:23:22:21:1f:f5:5b:37:92:e0:
         73:30:7f:6f:24:94:66:4d:b9:5f:4f:c0:6a:5c:e8:73:09:58:
         6b:47:60:50:7b:98:d1:2d:27:83:2e:9a:9e:55:b8:2e:18:c7:
         bb:3a:02:c2:ab:b1:ad:25:06:1c:64:60:2b:de:45:bc:9b:02:
         4d:dc:73:90:6c:81:9e:78:f6:a8:be:1d:34:c6:7e:79:5e:a8:
         91:36:44:2d:42:fb:2c:65:3b:36:b0:51:63:f4:54:4e:b0:6a:
         5b:9b:8a:ff:f3:72:4f:a1:35:b3:08:37:ab:8a:69:4a:4e:c9:
         04:73:2f:c0:0f:f9:c3:c9:47:5c:89:9c:7f:45:32:6e:1b:f8:
         32:ec:64:35:2d:ea:2a:68:fd:c5:88:54:bd:f8:53:d4:69:12:
         bd:8f:83:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org