Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iThpuxjmJmYBc-OqK6M-ylMEnWg.roa
File:                     iThpuxjmJmYBc-OqK6M-ylMEnWg.roa (raw, json)
Hash identifier:          hvEI6HRqy77M0PBHiAaMKT/PUM551/ONB1WQp2xvIw0=
Subject key identifier:   89:38:69:BB:18:E6:26:66:01:73:E3:AA:2B:A3:3E:CA:53:04:9D:68
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0181
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iThpuxjmJmYBc-OqK6M-ylMEnWg.roa
Signing time:             Tue 30 May 2023 17:34:24 +0000
ROA not before:           Tue 30 May 2023 17:34:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=893869BB18E626660173E3AA2BA33ECA53049D68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b6:72:9f:45:1f:42:8e:63:ce:81:03:22:c2:
                    91:7a:90:65:16:a6:cf:ea:14:1e:0e:1c:15:19:a1:
                    8f:4e:59:88:16:f5:1f:a3:f8:58:cd:c3:52:53:6b:
                    2f:da:9f:8e:1e:21:d7:57:ec:11:f7:5c:9f:e1:2a:
                    fb:4e:c8:7d:86:61:6d:7c:32:dc:0b:a9:37:3e:f9:
                    0f:c8:43:d2:53:8c:b2:04:cc:df:35:1a:e8:57:d4:
                    89:fa:40:45:26:0c:49:05:dc:56:3e:06:27:26:be:
                    44:74:1b:44:b5:18:b4:1d:83:23:08:75:23:47:c1:
                    46:98:9c:4a:ce:6d:e5:d8:8a:8b:a9:d0:6c:62:d3:
                    7c:de:89:8a:b8:fe:07:a9:de:28:57:05:3d:29:fd:
                    e7:84:c3:da:f9:85:af:fb:0b:2f:3b:98:8d:df:59:
                    32:70:a2:8f:94:6f:f1:46:e0:0e:71:da:7c:25:71:
                    7f:c2:3e:5b:10:b7:4a:a7:fc:55:65:82:7c:46:9f:
                    d9:07:3e:c4:f6:9e:0d:ae:8d:48:e7:ca:db:d3:fa:
                    8c:e6:03:24:d7:e3:e9:d2:34:58:41:2a:ec:0a:1d:
                    d8:ad:cd:5f:55:54:5c:bc:26:79:63:70:07:ba:84:
                    2f:d5:65:c1:5c:05:2b:8b:ba:65:cd:05:02:cb:60:
                    e2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:38:69:BB:18:E6:26:66:01:73:E3:AA:2B:A3:3E:CA:53:04:9D:68
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iThpuxjmJmYBc-OqK6M-ylMEnWg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8400::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:2c:a5:e5:3c:d4:91:36:b8:95:eb:b4:cd:89:77:60:02:c8:
         15:d4:00:ea:bb:06:16:19:ba:91:53:4a:ef:65:e5:07:99:e5:
         54:09:6f:05:73:f4:4d:fb:53:a0:3c:2d:59:38:32:2f:59:2e:
         3d:37:bd:04:28:d1:d5:56:27:8f:a5:9e:0b:06:6a:d1:18:c1:
         e2:3e:d0:7c:b0:c6:44:f3:5f:19:33:83:45:b8:87:3b:27:31:
         be:60:dc:04:89:61:87:e5:d4:8b:98:80:7d:6f:f9:ad:a2:75:
         a4:f9:f1:ae:e8:3c:12:b2:a3:61:14:f4:30:fd:b5:bf:51:91:
         fa:e0:09:48:53:cd:60:af:69:63:52:ee:d9:fd:a4:88:2d:57:
         4f:29:8d:29:90:86:90:bc:21:d5:2f:3f:37:40:7e:49:19:6b:
         61:b8:a8:ba:97:a4:ac:d4:36:4a:4e:56:57:05:d6:74:47:9d:
         c1:12:6f:ff:47:d3:92:58:3c:0a:a4:29:5a:43:46:08:6e:14:
         a7:86:06:c9:40:38:f9:dc:2a:18:11:62:63:b7:17:0b:6b:a8:
         05:86:83:7c:74:50:64:3c:6c:57:8a:83:94:4d:89:7c:d6:50:
         cc:e2:f2:e3:c5:36:28:7d:6a:30:1a:d5:e2:fe:9b:df:5a:7b:
         29:ed:08:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org