Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lc3gZuMHmkYbydz-fVRk4Cp2ZW8.roa
File:                     lc3gZuMHmkYbydz-fVRk4Cp2ZW8.roa (raw, json)
Hash identifier:          j4dsZHeFqrCFexV38qbCHXiWORzy6B1s3OBgSrZ9Ly0=
Subject key identifier:   95:CD:E0:66:E3:07:9A:46:1B:C9:DC:FE:7D:54:64:E0:2A:76:65:6F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01D3
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lc3gZuMHmkYbydz-fVRk4Cp2ZW8.roa
Signing time:             Tue 30 May 2023 17:38:25 +0000
ROA not before:           Tue 30 May 2023 17:38:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5900::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=95CDE066E3079A461BC9DCFE7D5464E02A76656F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f7:80:87:44:fc:68:e3:81:b6:a5:24:b4:e3:
                    81:bc:6f:1f:ac:27:63:e2:06:82:7f:6c:3e:f8:3d:
                    68:67:b7:28:55:ba:02:4c:16:36:a2:16:8a:64:2f:
                    c0:b3:3e:53:86:c4:28:dc:d1:7e:f6:57:e9:66:9c:
                    8a:d5:59:66:16:10:b7:9e:4c:bf:55:89:2c:2f:d6:
                    e0:06:a4:24:51:c8:45:90:cf:04:34:4b:72:e5:29:
                    4c:0a:69:75:03:25:8e:a8:b2:13:f4:1b:b2:2b:c5:
                    92:7b:c8:1b:6a:19:a2:6a:48:c2:b1:c1:3e:2b:93:
                    e0:19:28:cb:75:74:1f:a5:09:ad:3a:c1:d9:6d:95:
                    94:46:1a:e6:8b:a9:f5:c3:20:b4:4c:15:81:49:13:
                    dc:be:e9:6e:d9:6e:2c:c4:26:cb:fd:a4:b2:b7:0e:
                    df:06:ab:7b:2e:fb:c0:93:8e:85:20:b0:9d:b4:39:
                    fd:8e:5c:5f:da:2d:f2:34:b5:1c:00:83:c4:a5:9f:
                    fb:7f:4c:ba:76:93:51:8b:bb:10:53:df:1c:bd:e4:
                    67:48:ba:7b:cb:da:9e:46:32:3d:d1:e0:19:fb:83:
                    dd:dc:4e:9e:28:34:d0:02:52:12:9d:a1:58:32:27:
                    11:15:c4:8e:03:3a:c7:f4:30:c4:32:80:cc:75:25:
                    07:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CD:E0:66:E3:07:9A:46:1B:C9:DC:FE:7D:54:64:E0:2A:76:65:6F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lc3gZuMHmkYbydz-fVRk4Cp2ZW8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5900::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:5c:8e:c5:a7:7f:72:88:dd:c4:87:f9:ba:2e:c4:0a:6e:81:
         e1:d0:bf:5e:20:a8:f7:3b:df:18:66:89:57:45:15:05:52:0c:
         97:23:18:c3:c7:f1:b7:27:19:5a:93:56:d0:63:6b:a7:d5:d5:
         40:7f:f8:8a:b9:ff:a5:e3:5b:b5:9e:46:3a:70:7a:d1:0f:34:
         03:24:8d:6d:88:69:5a:32:c7:34:7e:44:17:82:1d:41:26:8e:
         79:7f:c5:10:29:df:c7:23:db:c3:5f:3a:e1:3f:ba:f7:45:09:
         7e:3f:2d:0e:1e:fe:5c:c9:59:fe:29:47:c4:10:25:f7:7d:d8:
         2f:47:11:75:1e:fc:79:fb:2f:69:74:a1:af:73:48:78:e8:b6:
         f0:10:0e:e4:93:66:01:cd:2e:66:2b:10:bb:8a:d9:ff:8e:7e:
         f3:4e:fd:aa:f9:dd:6f:27:54:49:bf:24:f3:9a:9c:26:be:d7:
         fc:06:02:4a:48:9c:85:82:45:af:59:79:df:e1:01:27:e0:5e:
         c3:a2:24:3a:3f:e3:1f:68:ad:f1:bf:2c:05:9c:2e:23:21:8a:
         92:3f:e2:42:fe:30:ac:85:4e:9c:18:49:51:03:f8:d0:f8:ae:
         37:a7:7d:3b:20:3c:1f:50:02:29:d0:b1:3c:54:3e:f3:f0:c1:
         e0:c3:c3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org