Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jxOXJ0pjDRm5IRQrSphyAKgc-c4.roa
File:                     jxOXJ0pjDRm5IRQrSphyAKgc-c4.roa (raw, json)
Hash identifier:          y7F5SyFvrDhpViiNqEjTTERI0FnUJOeforttBMgsoUM=
Subject key identifier:   8F:13:97:27:4A:63:0D:19:B9:21:14:2B:4A:98:72:00:A8:1C:F9:CE
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       8A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jxOXJ0pjDRm5IRQrSphyAKgc-c4.roa
Signing time:             Tue 30 May 2023 16:06:28 +0000
ROA not before:           Tue 30 May 2023 16:06:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6f00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8F1397274A630D19B921142B4A987200A81CF9CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:c0:b8:d5:0d:b1:bc:34:0d:67:4d:49:2f:
                    9e:bb:82:db:b2:05:f3:40:18:4b:ea:5a:be:be:ee:
                    42:65:fa:3b:70:ce:34:eb:64:e3:8c:f4:86:6d:45:
                    0a:86:69:4a:86:18:e4:e1:ca:b3:ac:a9:e6:d0:bd:
                    00:7b:c4:57:1e:7d:ac:5d:06:3f:e6:50:3e:cf:6e:
                    ec:6d:07:01:44:e7:9e:25:81:8e:90:4a:7c:06:07:
                    8c:b2:6a:7c:61:ab:e5:da:c5:c3:4a:c1:5a:45:1a:
                    c9:2d:6e:38:6b:22:e0:de:67:63:e6:a7:e1:70:5d:
                    7a:f9:54:aa:bd:0c:e2:89:55:20:85:43:fa:fe:aa:
                    a0:05:80:d4:20:b5:cc:b7:9b:c8:38:60:b0:a8:7a:
                    6d:a1:43:cb:b4:72:d2:31:92:3e:6a:55:33:0f:80:
                    35:b1:48:17:0d:df:d0:94:21:e4:a2:e5:94:00:9e:
                    6c:46:d5:09:71:88:bb:0a:f6:18:77:b5:2e:af:47:
                    e4:26:92:6d:76:18:b4:a3:a1:22:0e:f4:13:f1:2e:
                    00:93:ca:db:27:57:76:02:83:b6:67:30:d0:b6:ff:
                    3b:c3:14:0d:45:4a:63:97:bc:5e:e8:c2:e4:05:19:
                    d0:db:7f:34:21:18:ea:e0:e6:af:af:67:35:b1:15:
                    99:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:13:97:27:4A:63:0D:19:B9:21:14:2B:4A:98:72:00:A8:1C:F9:CE
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jxOXJ0pjDRm5IRQrSphyAKgc-c4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:8a:97:a7:2e:aa:6b:4f:b8:f5:38:f4:69:4b:49:c1:b6:9c:
         b8:ba:4c:8f:51:23:4d:c7:54:c9:25:d6:a1:6f:c0:00:14:45:
         5d:03:77:86:31:7a:39:90:92:c5:4a:3d:1b:5f:47:cc:ee:d9:
         77:a1:7b:8d:02:c2:df:8b:b5:82:ee:c6:50:cf:d2:e4:86:0a:
         8b:6f:ba:6e:9e:51:36:31:c8:2e:0e:0e:ca:cb:ea:51:fc:be:
         76:84:0a:78:52:92:7f:4d:be:04:88:31:bc:41:98:f6:2e:c6:
         d5:79:26:68:f4:96:12:88:27:05:99:2b:48:c3:e5:84:a0:1b:
         fe:35:24:e6:94:bf:b3:54:50:39:a6:77:27:27:89:ad:cb:95:
         03:95:ad:82:2f:5b:bb:52:52:42:c5:fa:58:eb:67:ac:fa:b1:
         41:23:65:b5:ca:2a:e7:93:cc:f5:b7:b2:7f:d1:0a:ad:f3:98:
         d4:37:b3:6b:fe:84:2b:8a:5f:75:9b:2c:d6:dd:e6:46:21:1e:
         8b:5c:cb:49:d9:51:00:19:44:84:92:a1:1b:0a:37:0c:d1:4b:
         5b:29:c0:87:8a:66:ce:20:76:5c:ee:89:a3:2f:f7:55:b1:77:
         cb:4d:a2:7b:24:1c:62:ef:f3:ab:55:d0:94:e3:70:29:4b:2e:
         3c:4a:e7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org