Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/m6UOuTvZo9zAoS1zpNi_CRbLZo4.roa
File:                     m6UOuTvZo9zAoS1zpNi_CRbLZo4.roa (raw, json)
Hash identifier:          8oZ6GDQMPQo0zC/MFOxpfQko2O+EnB/W8gQU0uoi5bs=
Subject key identifier:   9B:A5:0E:B9:3B:D9:A3:DC:C0:A1:2D:73:A4:D8:BF:09:16:CB:66:8E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       DB
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/m6UOuTvZo9zAoS1zpNi_CRbLZo4.roa
Signing time:             Tue 30 May 2023 16:10:24 +0000
ROA not before:           Tue 30 May 2023 16:10:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5600::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=9BA50EB93BD9A3DCC0A12D73A4D8BF0916CB668E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2b:75:ab:48:d3:24:b2:cc:ba:7f:28:09:9f:
                    76:60:b0:fd:b7:81:36:7b:8d:52:e3:07:b7:fc:a8:
                    38:66:9b:ba:6e:f2:e6:85:1d:0b:4e:1f:b6:e8:f5:
                    3a:38:9b:09:0d:c8:31:a9:29:dc:e9:6e:ff:b4:28:
                    da:61:e3:88:49:a6:fb:e6:f9:60:92:59:c5:5e:76:
                    c2:79:c5:06:92:9e:ec:33:3f:dd:2d:12:c2:7a:a6:
                    c3:ef:a7:ca:32:3b:19:46:46:14:64:a8:03:fd:7c:
                    16:6a:43:a3:26:ed:99:1c:c4:73:ba:88:71:2b:ec:
                    10:14:44:71:1d:f8:28:e7:85:3e:76:59:77:a4:04:
                    fd:84:32:51:83:2f:62:b5:0d:19:04:e5:f8:fd:51:
                    ec:d2:d1:84:ac:f3:30:0d:52:92:92:82:8b:61:33:
                    4c:f0:9f:b1:db:98:51:1c:37:c3:1a:d3:0f:1e:83:
                    5d:74:35:2e:be:da:24:a6:7f:3b:cd:98:c7:28:cc:
                    6f:ba:1a:41:2b:cc:c7:25:55:6e:a4:9c:7f:b9:7b:
                    fb:17:c9:36:6a:3b:9e:34:3e:c8:d7:fb:d5:ae:8a:
                    23:b2:02:57:67:a4:81:e1:7b:31:56:91:10:00:bf:
                    08:e4:2b:c5:2f:9f:1a:5c:6c:11:f7:e1:9a:16:38:
                    7c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A5:0E:B9:3B:D9:A3:DC:C0:A1:2D:73:A4:D8:BF:09:16:CB:66:8E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/m6UOuTvZo9zAoS1zpNi_CRbLZo4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5600::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:c2:fd:eb:0f:a4:71:db:39:89:34:5f:05:7b:01:c8:fb:cb:
         2e:d5:a9:d5:a2:95:d8:2b:44:0d:68:d7:fb:e0:36:64:9b:56:
         6c:a6:db:46:c0:72:af:c0:97:4b:06:4a:19:4a:f5:09:c3:89:
         09:7d:57:e4:37:df:64:63:af:6d:24:03:51:6b:c9:0b:4f:f7:
         b1:aa:dc:ec:fb:a1:18:8a:a4:ee:e7:fc:63:15:51:1b:6c:ad:
         1b:a6:e7:be:62:d8:ac:85:8e:28:bf:58:00:57:89:41:3e:01:
         14:93:1a:1b:47:6a:1e:be:a6:8e:79:41:99:40:2f:13:1a:f6:
         2b:2f:b2:e8:61:26:15:89:26:d3:c3:e3:3a:f8:bd:c7:99:e5:
         40:87:86:dd:86:9a:3a:52:4e:51:21:66:22:ba:a2:9b:4a:8a:
         6d:51:83:34:4b:f2:80:13:3f:d2:30:21:c2:af:2d:5f:1f:6c:
         d3:da:98:e2:15:0c:8d:f2:2d:25:cf:bd:5f:6e:54:c7:38:bc:
         5a:bd:b1:46:e4:35:cd:30:83:9b:0f:4e:f1:af:ce:2d:8b:82:
         e2:64:70:18:c3:ba:3c:29:9b:57:3d:b2:89:5f:6f:67:3a:60:
         aa:a4:14:57:96:3b:7a:95:f4:fb:c9:68:4a:be:78:33:2b:8d:
         c3:27:41:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org