Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oqygCkcMgrl-fQ_3qET0ULr6iJ4.roa
File:                     oqygCkcMgrl-fQ_3qET0ULr6iJ4.roa (raw, json)
Hash identifier:          IA7bCrolV3GsQ5jricNACm+j3Y9cL+EoN7pRTqtM25U=
Subject key identifier:   A2:AC:A0:0A:47:0C:82:B9:7E:7D:0F:F7:A8:44:F4:50:BA:FA:88:9E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       E1
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oqygCkcMgrl-fQ_3qET0ULr6iJ4.roa
Signing time:             Tue 30 May 2023 16:10:27 +0000
ROA not before:           Tue 30 May 2023 16:10:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:da00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A2ACA00A470C82B97E7D0FF7A844F450BAFA889E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f5:d8:f1:e9:a2:52:8a:f2:76:e5:3e:93:22:
                    d8:8c:0e:9e:24:3b:1f:ad:c6:d6:d1:93:51:8e:89:
                    11:6d:da:e8:77:17:79:b9:fa:80:1c:94:0d:79:f5:
                    10:c2:e4:ef:18:ef:d1:8e:de:68:6c:e8:66:22:db:
                    58:3d:88:3d:9d:45:d8:fb:85:3a:fa:21:3d:d4:4d:
                    74:16:8c:98:90:e3:fe:fd:b3:0c:a1:fe:6f:ec:43:
                    f1:86:4c:10:40:71:69:0c:b5:56:ef:ed:e3:89:1a:
                    12:82:a3:10:48:48:81:6b:16:be:36:be:ff:4d:38:
                    af:32:a6:e6:99:12:5f:83:d2:2f:3e:82:32:9a:66:
                    8b:0b:d1:18:9d:ad:6c:3a:3a:ff:77:6d:e4:de:e1:
                    5d:4e:d5:f1:8d:a4:2d:03:5a:15:a0:74:2c:89:3a:
                    5f:02:10:97:91:f1:17:95:27:67:de:f8:17:d4:4a:
                    8b:1c:53:83:11:1f:fe:14:e2:85:07:5e:d6:c2:37:
                    a8:ff:fc:52:71:be:c3:db:f7:e8:20:39:c2:8d:b0:
                    33:9f:2c:92:0f:83:59:56:94:c7:ec:63:70:e1:89:
                    cd:13:ac:c0:79:5d:2b:f4:e9:97:d2:e9:b8:d7:d2:
                    47:90:a4:e0:45:7c:3a:7b:52:6d:18:f1:cf:2e:ee:
                    4e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AC:A0:0A:47:0C:82:B9:7E:7D:0F:F7:A8:44:F4:50:BA:FA:88:9E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oqygCkcMgrl-fQ_3qET0ULr6iJ4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:da00::/40

    Signature Algorithm: sha256WithRSAEncryption
         36:88:6d:1f:da:38:78:b9:69:3a:b8:c5:36:8c:1c:24:b9:e9:
         f0:8e:0c:03:07:23:e3:26:c8:be:fd:35:c0:dd:f8:b8:6e:4d:
         0b:c8:b5:96:c5:3d:a1:0a:88:0b:8e:58:16:a1:5a:ca:42:46:
         8b:06:10:e0:26:a9:71:37:7f:8f:8b:35:dd:eb:01:e2:c8:31:
         76:be:1b:b3:bc:81:48:d2:b4:30:c4:ee:ef:c2:cb:fd:cd:c3:
         2a:24:31:ca:49:f8:7a:14:06:c3:cd:9a:82:78:9a:cb:69:28:
         7b:f3:7e:ea:5d:cb:4f:8b:8d:94:b9:60:d1:25:37:a3:61:2a:
         0d:23:05:2e:b8:c1:87:c8:dd:57:e8:a5:87:88:6e:2a:4d:2d:
         91:23:c3:00:04:06:68:8f:cd:7d:af:35:92:02:5b:06:47:b1:
         1e:88:48:14:60:8b:d5:29:d8:b1:0d:7d:f2:ba:02:39:3e:30:
         b1:d8:16:39:5f:33:d6:9c:5e:09:35:a0:a3:cb:6e:67:ee:1e:
         11:e9:ff:67:30:6d:82:a6:d4:ae:3d:2a:79:ae:d0:37:23:f9:
         1d:ad:32:19:dc:b5:bc:ce:fe:bc:36:f7:e7:fb:25:9f:24:d8:
         2c:28:78:76:ca:5d:d8:bf:03:39:52:22:41:f6:30:5e:fe:26:
         64:16:d3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org