Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hTtX_atwwhVEvGjlcT5TnEsHI1Y.roa
File:                     hTtX_atwwhVEvGjlcT5TnEsHI1Y.roa (raw, json)
Hash identifier:          490MBnnl4POJTKUjpQX7aKDAGKuPtXRvAQQwGLX6Ag8=
Subject key identifier:   85:3B:57:FD:AB:70:C2:15:44:BC:68:E5:71:3E:53:9C:4B:07:23:56
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       B9
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hTtX_atwwhVEvGjlcT5TnEsHI1Y.roa
Signing time:             Tue 30 May 2023 16:08:28 +0000
ROA not before:           Tue 30 May 2023 16:08:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=853B57FDAB70C21544BC68E5713E539C4B072356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ed:3c:9b:b6:73:9a:43:90:b6:4f:7e:76:52:
                    b2:d0:6b:a1:70:a4:d3:d4:79:8d:7f:6e:08:a0:06:
                    d6:b5:14:a8:49:42:f6:72:04:04:e8:49:8e:37:ee:
                    49:ef:a3:59:c0:e3:c0:6d:6b:08:e1:6e:7c:d0:78:
                    dc:b8:2a:8e:3e:81:f8:c2:be:46:f6:d4:fc:33:94:
                    8f:6e:06:a8:28:11:5e:27:0e:ca:ff:5b:c4:a3:29:
                    bd:10:3a:ee:76:fc:1a:69:fa:50:14:fa:ad:7c:53:
                    a3:35:97:9e:4c:2f:93:dc:51:de:66:04:64:cd:4f:
                    8c:cf:89:be:10:ee:53:03:34:6f:72:58:26:ea:3b:
                    d8:a9:ac:57:a4:a2:39:20:91:c4:36:c8:79:51:35:
                    03:d1:eb:cc:a6:59:e9:4a:1a:de:b5:79:4f:88:41:
                    2b:2e:f9:a5:73:8e:14:5e:a0:bf:82:c9:d3:ec:59:
                    4b:a9:22:6f:19:90:83:fc:d2:a4:a3:9f:6c:fb:91:
                    16:13:f9:ea:ed:ad:2f:b0:c5:eb:5c:28:ef:b0:6c:
                    1c:a4:99:ac:09:26:09:ac:7c:5d:e1:cd:9a:bb:69:
                    cb:df:57:76:25:ed:ae:f0:16:c2:44:6b:3c:93:52:
                    3d:b3:1b:30:0f:f8:23:36:15:32:3f:f7:51:61:d1:
                    57:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3B:57:FD:AB:70:C2:15:44:BC:68:E5:71:3E:53:9C:4B:07:23:56
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hTtX_atwwhVEvGjlcT5TnEsHI1Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         c7:3e:2b:dc:73:f3:de:34:ba:49:b7:08:00:8b:f9:35:dc:47:
         90:5d:54:2f:95:67:ce:0a:91:67:11:7f:46:6d:d3:59:a7:cb:
         cc:df:0c:c6:c9:20:06:d1:27:2a:67:40:b9:f5:c8:5d:81:81:
         b5:18:c1:ab:35:41:4d:66:ab:88:57:1e:a4:86:3a:c6:62:1b:
         00:3a:a8:e8:9d:27:06:c1:c9:47:fc:1a:74:1f:69:6f:74:db:
         af:43:77:8e:86:43:13:eb:e5:ce:02:ec:b7:6d:6d:00:85:50:
         b7:0a:b2:8f:8d:f5:30:e5:a2:93:1b:6d:db:0e:98:f3:a3:19:
         4e:2a:1f:b6:d7:ed:c4:69:59:42:1c:2e:ab:40:94:ef:a6:5e:
         9b:1e:af:40:74:79:0d:71:19:0c:49:58:c9:40:a3:5f:e1:f5:
         37:c1:37:80:e1:1c:60:e9:de:c1:51:2d:3b:f3:ac:9d:d7:5d:
         ec:2c:8e:e8:57:f8:c8:0c:40:2a:00:61:9c:f6:04:81:fe:f3:
         f4:b4:0b:cb:af:1a:0f:10:61:90:c5:6c:69:da:a7:7d:b6:1e:
         f1:77:94:cc:43:9d:63:3a:f4:d1:c1:a0:33:36:ac:77:00:55:
         01:0f:a3:21:b8:f3:5b:4c:ce:18:f1:22:ac:82:f6:e1:8a:2a:
         8c:f0:3b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org