Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oeY8gI9n8Y-7tfQ_lYRv5XUKVCc.roa
File:                     oeY8gI9n8Y-7tfQ_lYRv5XUKVCc.roa (raw, json)
Hash identifier:          FdJi8oj6gE/5He8R/uMt6HsucVY96Lh/SSqpMkW/V88=
Subject key identifier:   A1:E6:3C:80:8F:67:F1:8F:BB:B5:F4:3F:95:84:6F:E5:75:0A:54:27
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01CD
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oeY8gI9n8Y-7tfQ_lYRv5XUKVCc.roa
Signing time:             Tue 30 May 2023 17:38:23 +0000
ROA not before:           Tue 30 May 2023 17:38:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A1E63C808F67F18FBBB5F43F95846FE5750A5427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e4:c5:a1:2e:21:ac:06:d9:5f:aa:fd:48:1d:
                    f4:6b:11:68:3b:a6:2b:06:10:8c:28:77:35:49:32:
                    ca:84:a8:a9:29:da:a8:16:75:99:f6:52:a2:75:7d:
                    81:1c:6e:d7:dc:a6:d7:d4:56:7f:9c:c1:9c:47:2f:
                    57:f8:52:6d:d9:2a:09:d0:e4:46:23:f8:c5:10:47:
                    6b:46:89:a5:c5:e1:08:bb:92:16:0f:c5:f1:60:4e:
                    7d:8a:59:da:5d:b9:9b:50:0f:e5:e9:eb:48:ae:8f:
                    56:e8:e8:3b:c3:55:b8:8b:90:f1:d9:65:f7:95:ef:
                    7a:48:7a:8b:2b:d5:11:4e:cb:d8:2c:be:e0:1f:2b:
                    cd:8a:94:b7:a0:e7:e0:8e:f2:31:cc:aa:1b:97:0e:
                    75:a7:21:ea:fd:79:f2:71:58:a9:94:65:31:e6:2b:
                    12:d2:f3:ed:72:fb:15:83:2e:18:ea:f2:b5:3e:ea:
                    70:c9:d0:ca:de:83:0c:6f:50:cf:f5:6d:36:17:0b:
                    d9:0e:29:7d:0d:54:ce:fb:57:d5:6d:4d:26:fe:30:
                    6f:3f:89:b3:81:55:07:df:6b:8d:83:b5:45:76:5e:
                    be:54:42:0a:e5:a4:5c:56:dc:91:7c:ab:43:6b:29:
                    ca:a3:99:60:b9:cc:71:e8:dd:3a:18:a0:4f:04:73:
                    56:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E6:3C:80:8F:67:F1:8F:BB:B5:F4:3F:95:84:6F:E5:75:0A:54:27
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oeY8gI9n8Y-7tfQ_lYRv5XUKVCc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7800::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:e6:aa:7f:94:2f:54:e9:35:d8:57:36:48:ee:5e:c9:75:99:
         07:25:d6:9e:82:25:e1:7d:ef:89:38:aa:97:fa:9b:8d:6f:04:
         11:c6:c7:07:43:3d:8c:ab:f5:0c:22:27:b2:57:3c:c4:d2:7a:
         ef:24:3f:b7:1f:0f:46:4f:c2:d4:e5:94:c3:cc:52:ab:a7:b1:
         8a:4c:bf:f2:4b:15:c9:94:3d:8b:f1:80:32:c0:46:2a:13:c2:
         d3:dc:fe:49:ba:23:cd:5c:85:81:f9:2a:62:78:17:0d:59:2e:
         9c:fd:a5:d4:02:2e:24:e6:e9:92:1f:be:72:28:42:d4:83:5f:
         ca:40:28:4e:9d:21:50:fb:b2:f6:a9:69:65:77:87:82:79:d1:
         1f:7e:3f:9a:bb:33:8b:7d:ff:e1:90:a0:e2:d4:a2:ce:a6:77:
         d3:05:d9:9e:92:82:b0:ab:b9:73:30:da:46:00:39:10:a4:5d:
         cd:89:07:80:f2:6a:fb:c0:18:97:73:1c:57:f3:3f:ce:e7:1b:
         b2:a9:d5:0b:e5:38:7d:56:7d:42:d8:37:85:1f:79:8d:32:5d:
         01:62:e4:bf:5c:97:81:3e:bd:e8:2a:16:a8:07:27:a5:0a:36:
         97:63:0a:19:a2:11:87:a0:c5:a3:ee:5b:85:46:f5:79:07:14:
         24:62:66:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org