Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/j9n6dXcjrhHNyWv31a446ahVl2c.roa
File:                     j9n6dXcjrhHNyWv31a446ahVl2c.roa (raw, json)
Hash identifier:          D1ZrCqI1Hj6/oQao3bXbhfc0qtw5txFtg2e0zCusISc=
Subject key identifier:   8F:D9:FA:75:77:23:AE:11:CD:C9:6B:F7:D5:AE:38:E9:A8:55:97:67
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0213
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/j9n6dXcjrhHNyWv31a446ahVl2c.roa
Signing time:             Tue 30 May 2023 17:40:28 +0000
ROA not before:           Tue 30 May 2023 17:40:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:d500::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8FD9FA757723AE11CDC96BF7D5AE38E9A8559767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f4:c2:bb:2b:a1:1c:de:f2:73:82:74:e0:2e:
                    c4:ee:99:c2:67:e1:fb:16:a4:85:c5:1e:c4:6c:99:
                    ff:e0:2f:5d:38:70:8e:e1:79:f2:b4:41:04:92:84:
                    5c:c9:e2:79:61:10:e4:1e:36:b8:df:b2:e6:8c:49:
                    6c:a4:b9:16:0e:47:bd:6b:45:b9:c6:c7:c5:77:dc:
                    12:66:b8:48:34:fd:9a:34:51:49:d1:2e:14:25:d8:
                    8c:bb:5b:87:19:be:74:c3:ee:a1:fa:1e:69:35:d3:
                    ab:a5:f4:ad:db:44:99:19:dd:78:b8:44:c3:e6:18:
                    39:de:68:db:b6:7d:fe:fe:3c:b1:e3:ea:33:37:90:
                    0b:91:d0:ce:2c:65:73:b9:a2:ba:4e:21:1e:81:82:
                    9f:ba:f3:29:8a:3a:e9:79:c5:c9:84:f4:0e:8e:46:
                    50:81:d8:e1:1a:9b:a6:aa:cb:85:4e:d8:c9:64:32:
                    d4:69:b9:6b:7b:e4:5e:94:c0:67:00:3f:44:96:73:
                    9b:5f:cc:b6:e1:c2:9f:4e:1b:fe:4b:41:92:7d:07:
                    d1:4c:1f:ca:31:73:7f:8c:49:14:8e:55:74:69:e1:
                    a0:1e:ea:39:a3:d6:8e:de:65:a1:9b:06:50:9d:37:
                    b8:87:a8:51:24:da:cc:6d:2e:17:73:29:e6:8c:73:
                    d9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D9:FA:75:77:23:AE:11:CD:C9:6B:F7:D5:AE:38:E9:A8:55:97:67
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/j9n6dXcjrhHNyWv31a446ahVl2c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d500::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:fd:72:2a:e4:89:72:bd:f9:45:5f:27:80:44:07:81:69:3e:
         ad:8c:00:05:19:a9:bf:94:e6:a4:8c:87:7b:68:93:4e:7f:69:
         c6:b0:21:5e:b7:66:a1:af:bb:0f:e4:27:e5:fa:fb:24:76:fc:
         e0:d3:b0:c7:9e:bf:d1:90:cb:5d:83:03:ba:5c:c3:51:5f:07:
         63:fa:55:f4:d7:7c:99:22:d6:a6:05:02:20:0c:56:c0:7a:ed:
         49:fe:90:4b:3d:c1:49:a1:f2:61:4d:92:fa:2b:92:83:35:ca:
         c1:2c:4c:5e:e9:15:54:ef:c1:b0:c6:12:c5:8a:1f:4d:e6:5a:
         78:26:6a:08:a3:e3:39:98:99:37:0e:c7:27:6e:5e:2f:0c:ca:
         8b:eb:9c:a9:98:da:9a:34:79:c6:eb:f1:ac:8e:62:71:e2:25:
         08:4f:0b:03:bb:b9:c0:be:26:f5:3a:b5:70:d0:26:93:02:9a:
         4e:67:c4:29:52:b0:6f:2f:c3:1c:19:d2:b2:4d:94:18:08:a0:
         ab:21:1c:c2:fa:4d:d4:1d:0e:b3:17:42:26:68:ce:6f:02:57:
         d9:10:5c:83:1d:cc:37:b4:10:70:f1:05:f9:d2:ad:30:a8:42:
         a4:7b:54:b2:c3:98:b8:6e:c1:03:e7:71:ab:0a:10:1f:77:e3:
         af:fb:43:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org