Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/q57rsFLY7igY487ghHfzoHNNfQs.roa
File:                     q57rsFLY7igY487ghHfzoHNNfQs.roa (raw, json)
Hash identifier:          WAbnWemKgN76P+zEBjC0CVtHU/HF3VYKjJY1RJNZqPI=
Subject key identifier:   AB:9E:EB:B0:52:D8:EE:28:18:E3:CE:E0:84:77:F3:A0:73:4D:7D:0B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0174
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/q57rsFLY7igY487ghHfzoHNNfQs.roa
Signing time:             Tue 30 May 2023 17:34:19 +0000
ROA not before:           Tue 30 May 2023 17:34:19 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7700::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:19 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=AB9EEBB052D8EE2818E3CEE08477F3A0734D7D0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a7:60:73:0c:16:69:f7:f7:51:94:5d:b7:3c:
                    65:b7:bb:9c:c4:93:73:02:3b:41:e9:f7:2f:ec:dd:
                    00:92:91:7b:0c:db:9d:ee:31:de:4c:3e:eb:ee:f3:
                    77:49:ca:cc:fe:2d:63:f3:76:98:ec:3e:f0:69:bc:
                    ca:13:38:50:ce:72:8c:ba:2b:37:28:6c:a8:4c:c2:
                    4e:fd:ea:51:b7:2c:44:f9:ba:34:0d:dc:ae:12:f3:
                    89:d3:77:7d:7e:5b:7a:81:67:3a:d1:14:ac:a1:03:
                    d9:9c:2f:17:9f:c9:15:b4:a5:05:37:f2:5d:b4:14:
                    ac:d8:40:7c:17:cd:59:dc:28:ba:2f:b7:aa:ee:87:
                    af:4e:49:f9:c2:2b:c2:9f:9c:a1:28:fc:e3:d7:4e:
                    d7:21:19:cf:93:a4:66:08:c1:ed:4a:9f:57:11:11:
                    f7:08:9c:30:8b:4f:7a:0a:ff:0c:ea:6d:bf:9c:8a:
                    db:5d:f6:f9:1b:bc:d6:1a:1c:d0:18:35:85:79:b8:
                    1f:f2:05:c3:1c:26:73:4e:f7:17:0d:09:24:f3:69:
                    e2:7d:ab:20:ca:23:03:ca:81:12:3c:d2:f4:d3:34:
                    50:f2:6c:8c:13:fe:41:20:b2:41:33:7b:dc:4d:22:
                    81:6c:93:7f:6e:a7:84:02:68:34:25:3b:72:88:2e:
                    f2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9E:EB:B0:52:D8:EE:28:18:E3:CE:E0:84:77:F3:A0:73:4D:7D:0B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/q57rsFLY7igY487ghHfzoHNNfQs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7700::/40

    Signature Algorithm: sha256WithRSAEncryption
         b1:18:a9:7f:24:05:60:d3:67:7a:53:38:dd:07:58:e1:1e:4b:
         83:41:5e:1b:99:a5:65:76:1c:68:f7:41:fa:de:b2:cc:eb:db:
         08:0c:83:31:be:f4:d3:21:84:b0:03:31:6a:57:e0:7a:bb:f5:
         11:62:4b:ea:64:6a:2f:49:23:58:f2:82:5e:8d:22:2a:87:e8:
         d4:39:cb:f1:cc:8a:de:f6:aa:d3:50:9f:09:9c:a6:2b:23:4e:
         12:67:17:d0:4d:42:1b:20:17:2d:72:f8:f9:b0:44:39:ba:14:
         6d:a2:2e:71:3f:52:0a:f5:26:73:f7:e3:64:b9:c3:f8:8c:b5:
         e9:8c:5d:8f:55:b2:3f:09:b8:77:55:98:f0:d6:07:5d:12:12:
         e4:6b:73:52:22:a6:0e:95:87:a2:a0:c5:0f:09:8a:be:0a:90:
         9b:87:11:1e:b7:fd:d6:1e:fc:ed:0d:ca:a2:82:f2:ba:7f:25:
         54:8d:2f:78:a1:58:75:34:64:73:69:74:52:29:d6:15:76:7d:
         39:26:98:fd:8d:8d:da:c7:95:ab:0d:8e:c8:0d:e3:28:40:bf:
         a5:18:31:3d:66:c8:54:9e:09:9a:e8:ee:e5:85:67:a5:0a:b4:
         dc:c8:a7:74:4d:15:e2:12:e5:be:f8:b4:88:67:7b:dc:2e:50:
         f9:c6:a5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org