Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mjFFIzDTev7bybDTu2wHUa4q9F4.roa
File:                     mjFFIzDTev7bybDTu2wHUa4q9F4.roa (raw, json)
Hash identifier:          iPD0X6VPCs7ySTdegWuV/++6hByZh+d4V4Y52l8E4OI=
Subject key identifier:   9A:31:45:23:30:D3:7A:FE:DB:C9:B0:D3:BB:6C:07:51:AE:2A:F4:5E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       D0
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mjFFIzDTev7bybDTu2wHUa4q9F4.roa
Signing time:             Tue 30 May 2023 16:10:20 +0000
ROA not before:           Tue 30 May 2023 16:10:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=9A31452330D37AFEDBC9B0D3BB6C0751AE2AF45E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:69:d3:19:07:b7:8a:23:03:dd:de:ce:cb:1f:
                    44:51:95:f6:ce:e6:c5:2e:80:1f:21:b6:31:6f:f6:
                    b7:51:09:bb:c2:f6:5a:f8:e2:84:f9:a6:e5:f0:2f:
                    e9:a2:61:4d:69:f6:67:47:84:33:09:88:6c:8b:2d:
                    a1:31:f9:9d:0d:0c:07:ae:c1:84:a5:01:44:47:ef:
                    75:ea:75:47:91:7b:c8:1c:9e:71:94:85:8d:49:70:
                    a1:30:c1:a1:56:2a:a1:12:a0:cd:6d:07:f6:b5:21:
                    4e:2d:f0:37:83:fa:a0:50:97:34:8e:3c:44:a2:92:
                    17:85:6b:2c:44:8e:11:61:f6:0c:32:c4:07:cc:b3:
                    3d:90:5c:90:28:53:df:e2:29:48:0e:1f:1e:99:3b:
                    40:1a:15:ea:8a:cc:34:de:f0:37:4a:17:42:10:3d:
                    c8:bb:eb:f6:15:47:91:46:25:01:08:b1:e7:fb:32:
                    16:46:d3:2f:a5:3a:ec:b1:9f:2c:29:aa:d8:6d:ec:
                    94:02:d6:0f:4e:6c:4c:2d:f2:6a:45:74:2c:41:69:
                    44:31:62:88:a1:57:c3:26:61:98:33:40:f5:00:be:
                    fd:72:ca:e0:1f:7a:74:d8:2e:8e:de:9f:ae:13:99:
                    fa:6b:73:c8:7a:76:a6:22:82:4b:21:bb:b0:46:52:
                    cd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:31:45:23:30:D3:7A:FE:DB:C9:B0:D3:BB:6C:07:51:AE:2A:F4:5E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mjFFIzDTev7bybDTu2wHUa4q9F4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b::/40

    Signature Algorithm: sha256WithRSAEncryption
         ad:17:a8:65:af:e1:1a:0a:f4:d8:e2:3d:69:4f:45:e7:0e:69:
         22:a9:74:ee:e9:de:c0:39:67:60:1b:6b:7c:4e:45:87:a8:0c:
         d9:ff:86:1c:ef:a5:2f:26:d5:d1:ac:e5:12:ba:f3:18:3a:ca:
         56:4f:f2:a9:67:79:28:b3:37:15:7b:ca:b9:f3:81:f7:67:38:
         83:93:2e:8e:f1:67:88:09:69:12:77:9d:3b:aa:4b:87:3e:92:
         b5:3e:8a:5a:96:32:41:52:83:43:fe:80:38:c3:6a:3e:54:4f:
         af:f3:1b:06:9e:80:3e:2f:30:7c:cb:de:52:b0:da:c7:79:7a:
         3a:97:79:91:c8:25:95:43:f4:42:85:ac:45:aa:3e:ef:bc:55:
         78:ac:e4:d0:c3:25:e3:68:57:87:02:ab:3e:bb:e8:31:d8:e4:
         e3:3e:71:f7:63:fa:70:0d:6b:b5:c6:2a:0f:fa:64:19:b9:03:
         55:02:40:5c:f8:af:35:37:24:2c:a2:9e:ae:6d:7b:5c:e6:7b:
         7f:02:a7:31:9c:fb:99:d8:9e:5d:54:fa:eb:c3:60:60:4b:9f:
         8c:8a:0d:52:91:e5:78:5c:63:e6:cf:12:54:33:00:94:c5:5b:
         12:18:4f:4f:93:ca:14:53:44:f4:8e:4c:3f:29:b3:b8:b9:88:
         a0:58:c5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org