Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/nHjduUAlG2x8500rDEN3ifp0ujY.roa
File:                     nHjduUAlG2x8500rDEN3ifp0ujY.roa (raw, json)
Hash identifier:          NwIAzyEjOGO83SHtubAWbxhX+l9lpCHmmtDqts26jNU=
Subject key identifier:   9C:78:DD:B9:40:25:1B:6C:7C:E7:4D:2B:0C:43:77:89:FA:74:BA:36
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       013A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/nHjduUAlG2x8500rDEN3ifp0ujY.roa
Signing time:             Tue 30 May 2023 17:30:05 +0000
ROA not before:           Tue 30 May 2023 17:30:05 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:300::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:30:05 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=9C78DDB940251B6C7CE74D2B0C437789FA74BA36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ee:34:aa:f1:02:46:48:8d:98:a5:01:ef:ca:
                    2a:d3:43:12:b4:f4:3d:c0:95:27:1c:f8:d2:de:23:
                    27:f8:c9:4c:21:0e:d5:ea:da:45:e1:4e:48:5d:40:
                    43:4d:96:9a:fd:f2:4e:09:ad:fb:07:73:a6:47:bb:
                    a4:a1:35:77:c2:7e:40:8a:e3:2e:9c:61:84:00:72:
                    e7:e8:c8:43:7b:70:e3:b2:bd:02:a2:fa:29:43:98:
                    fa:72:85:78:d8:a6:0e:46:d0:89:93:8b:3f:18:d9:
                    77:53:d6:50:3d:29:aa:29:64:e5:d0:a8:58:f3:00:
                    f8:10:ba:c2:5e:fa:d7:32:2c:df:0c:71:e8:eb:46:
                    7c:97:cf:8d:7b:ad:14:27:27:89:52:38:42:bb:5d:
                    ff:d0:ae:89:0e:e4:03:d3:8f:75:e2:93:3b:1a:ab:
                    1f:9a:e6:f5:2d:5e:91:6f:71:c1:84:59:78:c7:72:
                    35:65:14:d6:a2:14:ea:be:23:06:91:e3:8e:52:be:
                    ce:77:69:16:33:f0:eb:85:09:15:8a:4a:0b:9a:a4:
                    bd:b0:80:28:a1:9e:93:89:45:2b:0d:1c:33:f2:c1:
                    40:8a:d1:5f:21:29:bd:f9:ec:1c:82:f3:9d:82:99:
                    b9:41:2e:07:02:f4:97:81:cf:b5:f5:68:61:88:77:
                    ec:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:78:DD:B9:40:25:1B:6C:7C:E7:4D:2B:0C:43:77:89:FA:74:BA:36
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/nHjduUAlG2x8500rDEN3ifp0ujY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         c3:26:6f:da:41:63:5d:aa:51:44:2c:11:e5:04:31:b1:4f:d0:
         8b:3c:ff:05:f6:43:ad:01:52:80:a2:c1:aa:95:be:ca:1b:0a:
         1d:a4:e5:7b:fe:4c:21:9e:91:ab:ff:e9:4c:3b:53:dd:8d:2d:
         fe:99:ba:4f:2d:d9:16:53:e7:fb:6d:d8:88:fd:cb:a5:61:56:
         10:c4:94:c3:9d:00:8c:9a:29:ac:c1:56:5e:d9:e5:66:a3:0e:
         28:3d:44:a5:b9:37:3d:e0:29:f4:88:4e:cc:4f:6c:dc:58:dd:
         70:94:ac:de:6c:d2:5a:66:b1:74:bb:da:29:c7:b6:f4:81:92:
         37:2e:19:2f:d2:64:3e:8e:fc:8d:5d:f6:37:3f:8f:05:c6:5b:
         ef:78:ff:6a:c4:c7:e5:b8:cb:ac:8a:74:2d:41:47:01:52:32:
         96:38:13:f2:2d:6a:3c:a5:c8:04:71:48:16:a8:5c:69:00:d2:
         13:3d:16:9d:f6:37:0e:b3:10:16:c5:ac:2c:6d:c8:15:f3:e8:
         c4:72:5d:f9:3f:0d:d2:71:fd:b5:77:a5:46:a9:42:0a:69:ed:
         25:b6:46:e6:c7:20:04:d6:7c:77:2a:90:14:45:8c:80:5c:84:
         9b:9f:82:7f:5b:b0:45:45:10:5b:21:19:b4:f6:93:1d:f1:11:
         5a:35:a5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org