Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jCLMfuYm7PdrxhG8qpz5_2v6VNo.roa
File:                     jCLMfuYm7PdrxhG8qpz5_2v6VNo.roa (raw, json)
Hash identifier:          Yas7OZWx0ml2OTuEgIAMTWbYGZ6+gSdAtBs73tO7y2o=
Subject key identifier:   8C:22:CC:7E:E6:26:EC:F7:6B:C6:11:BC:AA:9C:F9:FF:6B:FA:54:DA
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01F2
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jCLMfuYm7PdrxhG8qpz5_2v6VNo.roa
Signing time:             Tue 30 May 2023 17:38:34 +0000
ROA not before:           Tue 30 May 2023 17:38:34 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9d00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:34 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8C22CC7EE626ECF76BC611BCAA9CF9FF6BFA54DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f6:d1:6a:21:a7:94:72:cd:53:19:59:bf:11:
                    84:66:99:c6:5a:40:db:ae:e0:80:43:e8:6e:8b:b8:
                    fd:d1:a8:a8:86:66:d6:70:55:87:cd:24:81:83:0f:
                    06:9b:70:5f:88:86:b9:af:18:ea:18:c2:5b:b1:5c:
                    d1:20:4f:be:10:b7:a6:09:ab:29:c8:ae:50:77:6e:
                    27:91:69:cf:24:16:05:d4:69:aa:47:e0:4f:48:6c:
                    92:a2:87:38:fa:40:e9:d4:d1:50:0c:32:5b:48:a7:
                    df:e7:de:47:81:b7:6a:9d:4d:f3:f0:22:41:74:f0:
                    89:83:a1:82:6b:8f:cd:83:59:2f:05:97:7b:5e:3a:
                    12:f7:ee:83:e8:09:52:c6:84:6a:cb:10:e0:89:06:
                    7d:b9:a8:7b:22:4b:9e:6a:90:8b:31:ce:c0:a0:9f:
                    0e:f9:4c:15:9d:2f:4d:bd:a3:59:ca:79:db:c6:f3:
                    1c:c2:45:cc:b9:42:55:d1:67:1f:f0:7e:aa:c9:15:
                    e3:25:45:c4:2d:ce:d0:3d:34:13:dd:ea:62:e2:60:
                    e8:d8:40:d6:54:df:ee:f5:42:a6:11:a1:11:24:49:
                    f1:cd:37:11:38:4f:38:43:bd:78:f9:b2:cd:2a:70:
                    26:f6:af:ad:7b:46:d2:a7:8a:cd:e5:af:c1:05:28:
                    c4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:22:CC:7E:E6:26:EC:F7:6B:C6:11:BC:AA:9C:F9:FF:6B:FA:54:DA
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jCLMfuYm7PdrxhG8qpz5_2v6VNo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b0:de:d3:82:99:d6:1a:97:f1:d5:85:9a:bd:7c:4d:f2:dc:bc:
         45:2f:9b:16:76:d7:ac:08:bd:d5:ad:bf:ee:1f:b5:f0:43:6f:
         0b:b8:9e:0d:cc:7e:2e:26:18:d0:66:18:c0:50:f5:a1:61:a6:
         06:be:40:c0:2c:ce:49:e6:ef:ac:f6:72:1b:bd:64:28:d1:e5:
         6e:5d:af:da:2b:dd:c1:bf:ed:09:a0:e2:6d:5f:19:fc:a6:29:
         41:e2:d1:a7:ac:5d:1c:f7:13:16:7d:38:c6:f2:34:af:8a:ac:
         6b:a6:cc:fa:ae:da:1a:cd:64:18:8e:0f:0d:fc:4f:ea:49:be:
         8e:9f:72:05:c0:44:da:f6:2c:0a:f6:6e:b2:a4:6a:b5:e0:66:
         9b:29:e7:07:32:25:b1:48:91:81:5e:f9:01:fe:71:7c:e8:da:
         44:75:5b:7f:66:76:a1:e1:86:a4:06:10:90:b0:45:ac:e3:95:
         75:ca:72:ed:2f:d5:aa:43:ff:dd:74:39:41:99:3a:42:ac:18:
         d1:16:ff:0f:5c:2c:87:cd:bf:24:7c:52:dd:52:71:a7:a7:ac:
         84:bd:de:8f:97:fd:10:d6:1b:c7:ac:b6:ef:1e:ac:b5:61:e5:
         8f:31:a4:5f:91:0f:b5:f2:d4:4d:fb:04:2c:48:64:49:dd:76:
         64:a0:6c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org