Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/j5psZSqFZst-TSQgbKjdM5TSMpE.roa
File:                     j5psZSqFZst-TSQgbKjdM5TSMpE.roa (raw, json)
Hash identifier:          H71YC7aBvx+Sr614XHzNrVJ4/5QocGXfVojq4+9+cn4=
Subject key identifier:   8F:9A:6C:65:2A:85:66:CB:7E:4D:24:20:6C:A8:DD:33:94:D2:32:91
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0220
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/j5psZSqFZst-TSQgbKjdM5TSMpE.roa
Signing time:             Tue 30 May 2023 17:42:19 +0000
ROA not before:           Tue 30 May 2023 17:42:19 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7c00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:19 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8F9A6C652A8566CB7E4D24206CA8DD3394D23291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:84:75:08:8b:55:f8:df:10:84:ab:6c:ec:d0:
                    d4:a6:31:ad:4b:3b:6e:9b:5e:36:82:b7:80:f8:7c:
                    2d:0d:4e:9e:5a:52:48:28:62:0e:bd:8f:a9:8c:b0:
                    c0:15:6a:bf:e6:f5:9a:07:43:dc:03:ba:3a:04:16:
                    0f:cf:c5:d1:32:a8:30:bb:44:62:78:27:df:93:b9:
                    c3:ab:8f:34:d2:e7:26:46:98:07:5d:c2:b6:51:af:
                    c6:cc:0f:4f:d5:df:11:07:a0:7f:39:8f:1b:44:26:
                    46:8f:f4:09:9f:d2:1c:1a:ca:d0:40:c5:db:30:08:
                    4b:33:51:30:0f:c9:66:3e:3c:1a:fc:d6:a9:17:15:
                    a9:fd:6e:69:ba:f6:b1:55:d4:d7:f5:ce:ca:c1:8c:
                    66:66:98:b3:2d:7a:9b:15:89:90:a1:3e:2d:e0:a0:
                    0e:c4:05:81:6f:e1:a0:07:ac:16:18:fb:a7:ba:b1:
                    01:3e:cc:ee:64:35:c1:be:e7:c7:1a:fd:2a:ef:e0:
                    85:f4:5d:07:bc:60:24:31:42:3a:03:21:56:54:4a:
                    0a:8b:1f:10:00:24:7e:a6:2f:bc:04:0b:43:13:65:
                    e8:61:0c:7f:29:22:19:ea:a8:b4:d0:3d:a5:eb:33:
                    00:71:13:9e:df:27:15:96:2c:8a:27:c5:45:ce:d4:
                    b7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9A:6C:65:2A:85:66:CB:7E:4D:24:20:6C:A8:DD:33:94:D2:32:91
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/j5psZSqFZst-TSQgbKjdM5TSMpE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         43:aa:9e:13:c4:62:e4:bd:0a:20:76:37:bd:36:c3:26:05:cc:
         01:18:21:26:e8:12:bd:7b:d4:16:f0:75:42:04:4e:a9:83:f4:
         55:d9:4e:4d:e3:83:a0:14:17:eb:43:fc:1b:16:f0:31:13:42:
         8c:e5:5b:71:2f:72:fe:93:08:ce:32:34:7a:bc:87:7c:5c:0c:
         e6:57:50:9a:ff:a6:70:f0:21:cb:c4:70:50:95:8a:f8:9e:9b:
         f6:2b:7a:67:7f:5d:f3:57:3d:61:6b:92:b7:19:c5:55:bd:cb:
         6a:43:88:51:13:9b:03:76:26:3f:a2:fd:db:7d:e6:3c:4c:8c:
         0b:32:4a:96:02:68:22:ca:e1:c5:da:74:78:14:d4:b7:a0:2a:
         8c:48:1e:44:d3:63:f4:41:a7:51:5b:93:d8:80:ee:17:04:35:
         0a:91:a8:22:59:56:ff:ce:bd:07:7a:7e:fc:a8:67:cb:3a:94:
         35:d2:f1:5b:1a:d1:18:a9:c9:26:48:d0:d0:aa:45:8c:9a:a3:
         4a:a9:d9:cb:30:71:3c:6e:b3:61:94:ba:32:67:66:56:6f:b5:
         f3:23:69:06:e7:e3:2d:f9:ca:7d:67:9e:6c:0f:b5:d9:a6:f9:
         76:c5:01:e0:21:a2:55:da:9b:c8:44:01:57:58:be:7c:6b:e4:
         c5:a0:cb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org