Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/kG1pv0xDpK3CutSrHmcVvQxOO88.roa
File:                     kG1pv0xDpK3CutSrHmcVvQxOO88.roa (raw, json)
Hash identifier:          +B0yYCQpkLGmbkNJ1Ty5BdmwJaJwjmca2Nwcj19vVbM=
Subject key identifier:   90:6D:69:BF:4C:43:A4:AD:C2:BA:D4:AB:1E:67:15:BD:0C:4E:3B:CF
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0152
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/kG1pv0xDpK3CutSrHmcVvQxOO88.roa
Signing time:             Tue 30 May 2023 17:32:26 +0000
ROA not before:           Tue 30 May 2023 17:32:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:cc00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=906D69BF4C43A4ADC2BAD4AB1E6715BD0C4E3BCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d6:eb:79:b6:23:c5:58:3b:d0:8a:77:24:39:
                    85:b9:9d:4c:96:63:ea:89:3b:95:47:bc:87:4e:09:
                    2a:6a:9c:f1:96:ab:b8:9d:2e:fd:0b:6f:32:bf:0c:
                    db:d0:6b:21:45:1a:39:87:c8:8a:bb:79:db:0f:ff:
                    7c:1f:15:e8:3b:89:88:31:22:f5:f2:9a:4f:e7:e6:
                    78:17:80:2b:b5:cc:cd:64:42:dd:dc:5e:64:e2:f1:
                    e6:9c:7a:93:e6:4b:c4:b6:1f:9a:b9:d8:d0:95:93:
                    56:b3:44:6e:c7:42:17:29:5c:3d:23:fb:ca:19:58:
                    9e:70:1b:e5:5a:f1:d7:ae:18:30:ec:74:95:3e:c1:
                    28:70:cb:61:ea:1b:86:b9:92:7d:97:16:7a:da:f9:
                    74:3c:19:06:3a:02:84:7b:65:29:b5:d1:c5:ca:e8:
                    a8:e3:1a:b9:25:34:fc:be:b3:51:cd:12:13:87:9c:
                    d1:0e:91:bd:6c:28:17:0d:21:19:68:d9:05:cf:c7:
                    89:06:25:97:e3:ec:5a:3f:67:61:05:dc:06:8c:98:
                    b5:eb:d8:35:9a:94:51:d5:73:38:d1:b8:ab:80:36:
                    b0:d6:c9:b5:c6:6b:6c:cd:26:ac:42:74:f4:53:1a:
                    6d:b9:25:0f:b7:68:55:61:06:1a:f8:53:91:90:80:
                    b7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6D:69:BF:4C:43:A4:AD:C2:BA:D4:AB:1E:67:15:BD:0C:4E:3B:CF
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/kG1pv0xDpK3CutSrHmcVvQxOO88.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:cc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3f:92:b2:2c:8a:1d:87:48:2d:dc:c9:d9:81:df:5c:28:5f:8c:
         0d:46:80:9e:5b:6d:3f:5f:d3:6f:4d:b0:c8:13:0c:84:ce:f1:
         89:41:14:5d:bc:45:21:2e:7d:32:4c:5e:46:39:0c:83:e8:0a:
         6d:49:7b:af:69:eb:75:f1:cd:36:59:22:d2:43:7b:64:52:63:
         b9:7b:02:9d:08:bd:b7:cd:29:90:7e:60:2d:b8:d6:cf:18:87:
         04:69:dc:72:5f:50:eb:59:b0:40:21:99:2c:bb:ae:ab:25:8e:
         17:23:83:bb:ac:65:33:f2:f2:83:7d:f0:30:ab:b8:43:1b:13:
         41:33:c7:17:3d:bb:53:50:c9:b3:06:09:86:e3:a9:19:0e:e9:
         5b:fd:ce:e6:33:e9:e4:0d:f0:c0:04:90:2d:d7:62:9e:5c:7a:
         59:86:a6:4b:d2:33:af:ff:76:fc:9a:91:cd:52:90:c1:1d:e2:
         a8:75:b8:d2:de:f8:9e:52:ee:cc:59:75:3d:64:89:f4:e3:8d:
         dd:17:ae:49:1e:74:d8:0a:37:f6:0a:c1:f7:1c:77:0d:24:bb:
         53:c9:91:c7:03:fd:66:07:af:70:1b:6e:d4:09:5b:af:4e:2f:
         b4:ef:46:1c:24:b5:d7:27:4f:bb:fb:39:74:2c:42:2d:91:cf:
         46:a2:93:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org