Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lgQOlpBbmncOgvUM7lbYcESJAGE.roa
File:                     lgQOlpBbmncOgvUM7lbYcESJAGE.roa (raw, json)
Hash identifier:          D9OEpuQhY4mRZbGnurY6zGJnJuoSmZp4SvIV9eXzN1A=
Subject key identifier:   96:04:0E:96:90:5B:9A:77:0E:82:F5:0C:EE:56:D8:70:44:89:00:61
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       C2
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lgQOlpBbmncOgvUM7lbYcESJAGE.roa
Signing time:             Tue 30 May 2023 16:10:14 +0000
ROA not before:           Tue 30 May 2023 16:10:14 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b700::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:14 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=96040E96905B9A770E82F50CEE56D87044890061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ea:c4:d1:e9:6b:61:92:6f:e0:6b:9d:54:09:
                    71:f7:7b:eb:7e:d5:4e:7c:4b:3b:f7:dd:39:87:f6:
                    3b:bd:0c:43:f9:36:72:5b:3f:a9:d2:8c:b1:6a:a6:
                    a7:27:a8:63:62:49:8e:1e:b9:b6:34:61:f0:bd:32:
                    af:3a:0c:ce:18:b7:e5:ce:32:f4:74:c7:02:50:47:
                    8f:9c:f9:c7:ca:79:dd:ca:f7:af:dc:6b:f2:b3:4f:
                    74:87:a7:f7:c7:ea:30:d0:85:a3:08:fc:5d:54:5e:
                    12:0b:4f:5c:72:1a:55:06:b0:e3:9c:e8:2c:77:be:
                    dd:bf:59:63:13:c6:2f:8d:40:0e:5e:a7:7d:6b:04:
                    7e:e0:fa:e1:d0:a8:f1:ac:bf:75:b3:88:97:ea:58:
                    d3:d5:e4:14:ad:09:63:2e:b3:d0:50:8c:91:09:04:
                    49:f4:2b:63:16:72:e7:ea:e7:fb:8d:e9:47:2d:33:
                    4f:2e:ce:7b:49:2a:27:16:b5:86:bc:0e:f6:30:19:
                    a1:2f:18:0b:b2:2d:ee:5d:13:b1:ed:fe:e4:bd:94:
                    b2:28:c7:92:50:b6:f7:e0:ec:e3:f7:be:aa:58:63:
                    e9:40:45:23:98:e9:41:c2:cc:45:47:91:03:46:95:
                    59:29:92:38:c5:50:5a:c1:26:f5:ae:18:22:47:dc:
                    e3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:04:0E:96:90:5B:9A:77:0E:82:F5:0C:EE:56:D8:70:44:89:00:61
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lgQOlpBbmncOgvUM7lbYcESJAGE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b700::/40

    Signature Algorithm: sha256WithRSAEncryption
         37:a6:c4:77:73:0b:b2:f0:87:4f:79:45:05:30:d8:d7:a8:9f:
         b1:55:0a:9f:c2:d0:f0:e5:cb:b6:e8:1e:9e:23:61:98:50:84:
         ec:db:2f:87:d9:e6:96:69:7d:ea:39:7b:f0:cd:c8:1a:fd:da:
         d3:9a:99:ef:50:48:f2:d7:6a:20:69:05:85:63:83:83:a6:6c:
         06:7f:80:11:b3:9f:72:be:3b:b3:bf:1a:17:f1:31:bc:a8:fa:
         3e:ec:e7:4f:12:b6:4c:14:8b:0d:ef:39:50:28:04:df:ff:7f:
         13:60:5c:5b:41:10:d7:1e:8f:79:9b:75:55:ba:1c:46:7f:64:
         29:cf:c3:cc:19:9b:9b:eb:94:2b:f6:5a:a9:cf:d7:76:06:53:
         15:c9:52:07:db:49:c8:5a:a5:5e:46:7a:6e:44:5b:1e:c5:c5:
         f1:95:b4:8e:f5:67:5a:e1:7e:aa:0c:85:81:13:c7:c0:33:9f:
         2f:92:ac:e2:a1:39:74:fb:38:1b:9a:28:a7:5f:2a:e6:3a:d4:
         ab:8c:4f:40:4e:43:eb:61:bc:bd:2e:91:59:2f:47:9c:b4:05:
         65:1c:d8:c2:70:79:2f:1c:28:15:1a:60:47:cb:1f:03:5d:56:
         bb:bb:e8:97:7c:a0:87:f7:04:ae:56:b3:f9:58:69:85:9e:df:
         9e:34:20:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org