Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oRLITHyJkeNdOO_vJlAFSVL63Q8.roa
File:                     oRLITHyJkeNdOO_vJlAFSVL63Q8.roa (raw, json)
Hash identifier:          aeXa5JGH4gmyvCo0X5HYiWUSvSOcthwZQfvhLN31gNc=
Subject key identifier:   A1:12:C8:4C:7C:89:91:E3:5D:38:EF:EF:26:50:05:49:52:FA:DD:0F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       A9
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oRLITHyJkeNdOO_vJlAFSVL63Q8.roa
Signing time:             Tue 30 May 2023 16:08:22 +0000
ROA not before:           Tue 30 May 2023 16:08:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2e00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A112C84C7C8991E35D38EFEF2650054952FADD0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:33:26:20:d9:2f:96:9f:c3:b0:ab:0b:84:8d:
                    6c:bd:2b:41:b6:ff:21:ab:1a:3a:1d:b0:48:d9:a0:
                    a1:06:a9:c4:28:be:26:fa:b6:bd:da:57:6a:4e:b7:
                    98:74:6e:5c:c7:8c:49:e9:ad:b2:ed:dd:fd:c4:b2:
                    80:da:f5:30:b9:f8:70:b9:7d:41:a2:f9:43:60:c4:
                    6e:75:dc:a3:85:3b:c8:b8:95:66:cc:6b:5a:17:ec:
                    6b:5f:a1:0b:66:94:3c:b3:49:be:74:21:50:f8:bf:
                    34:d7:78:49:f7:8b:ac:e8:02:99:2b:e4:8f:52:2b:
                    45:d5:7f:0b:ee:8f:8b:29:bf:e3:27:b7:78:1d:cb:
                    b2:5b:2c:ec:3c:05:21:c4:ce:15:ab:ae:0d:c6:ab:
                    2e:b9:32:2a:2a:34:3e:7e:33:25:d5:bf:90:cf:38:
                    8a:f7:c3:35:c0:62:94:c1:a6:2f:ed:6b:07:49:9b:
                    6c:19:0e:b7:d7:7c:6c:0b:1c:72:00:ad:90:db:de:
                    63:cc:73:a3:8d:25:12:e7:e7:f2:c3:e3:a0:4b:31:
                    83:5d:34:d4:39:5f:5b:40:e1:48:61:a0:98:99:97:
                    ec:3d:0b:e8:41:d3:ab:f5:76:fd:92:7e:ab:11:85:
                    e7:db:38:71:f4:60:bc:a3:05:1e:3c:90:55:d4:87:
                    11:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:12:C8:4C:7C:89:91:E3:5D:38:EF:EF:26:50:05:49:52:FA:DD:0F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oRLITHyJkeNdOO_vJlAFSVL63Q8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0f:95:3a:b2:36:52:02:59:1f:46:b5:14:e0:37:ae:7b:52:71:
         b5:1b:2d:b5:74:3a:cd:77:80:57:91:87:51:6e:aa:7c:fc:82:
         8f:f3:1a:91:3d:27:19:49:df:bb:51:3b:47:37:f7:47:de:79:
         9e:59:5e:b4:3c:1b:f4:7c:58:49:fc:86:d6:c1:17:c9:06:67:
         ae:56:4a:0d:f5:83:6c:51:30:52:69:27:45:b9:2b:95:0f:7e:
         2e:56:d1:08:83:ff:b4:0a:75:95:21:63:c1:81:77:85:51:09:
         25:47:0d:5f:a4:0f:58:90:95:54:d4:59:9f:76:41:cd:ed:76:
         2b:31:48:8c:4a:91:28:3e:d5:ba:4a:dc:1e:a2:db:9d:a7:8f:
         4f:2d:7e:77:f0:c4:9c:b5:c7:41:ea:e5:ad:e3:5f:3f:e9:ba:
         3f:70:6d:f8:d6:b4:83:db:d5:41:d6:d0:9b:07:f6:ba:90:52:
         b1:2d:2a:28:85:7c:b8:53:a4:8f:5b:f6:a6:3f:ad:4e:71:60:
         20:eb:48:24:f9:0e:14:f1:49:a9:2b:a9:50:e1:dd:55:be:8b:
         9f:70:84:45:bf:70:40:37:e8:66:05:7e:bc:13:64:16:df:09:
         28:ed:43:68:8e:92:ed:db:6d:d9:5f:45:67:ef:b7:8e:2e:ce:
         27:07:04:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org