Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/i-EnMYvIXfR8diyWfmrBNDgYV7A.roa
File:                     i-EnMYvIXfR8diyWfmrBNDgYV7A.roa (raw, json)
Hash identifier:          7bDDS696rB3680CDOVJPr+swRw9x7/YgPxCDubIVzjI=
Subject key identifier:   8B:E1:27:31:8B:C8:5D:F4:7C:76:2C:96:7E:6A:C1:34:38:18:57:B0
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0193
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/i-EnMYvIXfR8diyWfmrBNDgYV7A.roa
Signing time:             Tue 30 May 2023 17:34:30 +0000
ROA not before:           Tue 30 May 2023 17:34:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:200::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8BE127318BC85DF47C762C967E6AC134381857B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:25:5f:99:63:d5:a0:d8:34:55:f8:b4:a8:12:
                    d5:05:c1:5c:86:17:ed:67:c1:bb:ec:b4:45:c1:c1:
                    66:88:02:9f:09:62:e6:ca:77:17:1c:9c:d6:f6:fb:
                    c8:e9:c5:2f:f0:00:3e:0d:f3:6b:fc:4a:64:44:87:
                    05:69:a9:34:19:a5:13:35:3c:a8:20:2b:3f:2f:c5:
                    bd:f0:0a:2e:b5:72:0d:73:d6:5b:23:fe:22:f5:54:
                    b4:de:fc:26:2b:4a:23:3b:77:dc:b7:c6:fa:a7:1d:
                    85:6d:37:65:74:60:87:e2:2d:a0:c6:2b:eb:32:27:
                    4e:50:81:13:08:72:ea:45:64:67:0b:b4:b5:4f:31:
                    bb:06:6a:2f:e9:a4:4f:18:c0:b6:9e:e2:c1:02:dd:
                    4e:a5:17:52:5a:79:0b:c4:80:53:f1:28:aa:b3:ea:
                    fd:29:2c:c1:db:88:51:dc:d7:1e:9b:2f:f3:50:ae:
                    29:78:bc:ca:71:a3:ea:62:85:9d:b1:a6:61:d3:ed:
                    70:65:24:53:96:fa:f8:6e:1d:63:90:ad:61:37:b4:
                    ea:26:d2:af:84:83:d3:cd:2a:10:6a:ff:cd:5b:99:
                    0e:84:29:ab:f6:53:8a:b8:ac:f9:fc:48:b0:4d:80:
                    36:f8:98:d1:86:27:58:03:8f:be:86:87:d1:84:7d:
                    62:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E1:27:31:8B:C8:5D:F4:7C:76:2C:96:7E:6A:C1:34:38:18:57:B0
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/i-EnMYvIXfR8diyWfmrBNDgYV7A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         5d:9e:40:37:22:60:7c:a1:0b:25:55:4d:84:e4:67:3b:76:20:
         38:7d:8b:e0:87:7e:46:c0:e5:0d:e6:ea:d5:1d:dd:18:54:2f:
         6d:42:d2:78:aa:bc:15:34:c9:31:3f:6c:e0:f6:79:a3:dc:3f:
         ae:3b:36:f0:d0:f2:3f:0f:51:20:72:c1:65:be:a9:09:27:15:
         5c:21:a7:69:ae:ec:41:4e:df:78:eb:0a:85:49:ae:3c:a2:66:
         f8:f4:0e:36:77:8a:82:d6:a3:b6:ee:93:01:c3:7b:88:c5:58:
         17:6d:3b:e1:ab:ad:e2:0d:f3:6f:80:9a:c1:09:b3:3c:14:74:
         6e:30:cd:e3:b6:bb:80:f9:24:b8:13:04:0a:f4:7c:fb:8f:c6:
         04:69:6a:df:11:ae:02:fa:38:71:44:4c:cf:e2:f4:a4:b5:82:
         2f:a4:95:6c:4c:7d:23:e0:52:c5:b1:ee:05:a3:5d:22:84:80:
         de:8b:35:af:9d:f4:18:b0:79:a4:28:c1:60:56:39:db:b1:fd:
         b8:28:94:f5:16:6e:8a:26:97:d5:e5:11:46:0d:56:db:01:62:
         97:63:48:f0:f2:d0:eb:b6:5e:7c:5f:bd:b7:f5:c9:7d:41:72:
         37:12:d5:98:10:b3:d4:b3:e5:ec:81:77:1c:9b:fa:b6:00:8b:
         c1:8d:66:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org