Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/q9te7KMctgMpqHmE2G8T1t49pZ4.roa
File:                     q9te7KMctgMpqHmE2G8T1t49pZ4.roa (raw, json)
Hash identifier:          W12gQkEyX2vuGM9kgCqd+b8AmZUVSKki4ftHPiG9mp4=
Subject key identifier:   AB:DB:5E:EC:A3:1C:B6:03:29:A8:79:84:D8:6F:13:D6:DE:3D:A5:9E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0229
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/q9te7KMctgMpqHmE2G8T1t49pZ4.roa
Signing time:             Tue 30 May 2023 17:42:23 +0000
ROA not before:           Tue 30 May 2023 17:42:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2100::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=ABDB5EECA31CB60329A87984D86F13D6DE3DA59E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:da:63:cf:37:04:7f:b5:00:1b:ab:d0:29:
                    10:11:d7:60:7d:cb:37:ac:40:30:0b:67:37:91:4b:
                    fe:2f:29:9a:36:93:d4:f3:18:88:dc:11:0d:a4:3f:
                    a8:19:cc:4d:b0:d6:1d:8d:56:a1:53:41:c9:de:ec:
                    e5:c0:f7:52:b3:f3:13:94:86:4b:58:f8:2c:38:a1:
                    fa:16:a1:57:fb:91:53:d1:b2:f6:a8:c3:eb:87:d5:
                    6f:b8:d1:31:67:71:b3:ab:35:7b:13:cb:7d:97:3f:
                    94:8a:ba:7b:3d:0d:90:c9:25:85:57:b1:16:d7:dd:
                    57:71:b0:0d:21:b3:78:1f:dd:c3:90:7f:d3:82:bd:
                    3c:3e:33:46:a2:2c:be:13:a0:9d:8d:ab:0f:c2:1f:
                    ba:7d:1b:06:3e:40:fa:9a:08:36:0a:6c:3d:93:a7:
                    77:82:84:6c:6a:7f:92:5e:a2:b1:a7:53:95:6d:a1:
                    42:c4:c2:cb:44:1c:47:4e:f0:40:b7:12:a1:d4:0e:
                    21:a9:7a:00:c9:ee:31:5c:2a:a1:ad:41:3e:e6:09:
                    26:7c:75:ba:63:32:a3:d0:c1:da:54:fa:e0:06:40:
                    ef:38:62:04:6f:d4:ee:dd:30:08:aa:33:37:7e:1d:
                    7a:15:d6:07:f1:f6:ae:f5:f9:26:56:1f:d4:4d:3a:
                    ba:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DB:5E:EC:A3:1C:B6:03:29:A8:79:84:D8:6F:13:D6:DE:3D:A5:9E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/q9te7KMctgMpqHmE2G8T1t49pZ4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         55:28:df:17:78:3f:93:01:26:7b:fe:fd:43:16:85:0e:6f:ab:
         c8:62:5e:7c:bb:09:dd:3a:f1:4b:7d:ff:a5:60:74:38:d9:54:
         f9:21:50:f4:ef:04:70:53:bd:3b:6d:67:5b:18:89:c5:94:ff:
         d3:9e:3f:4d:5c:c0:44:18:e9:bf:88:62:b1:ea:71:67:a7:6b:
         16:a5:24:11:19:2f:3a:7c:11:cf:d9:be:05:51:da:39:d3:ff:
         7b:5d:af:6b:b5:55:76:c8:cc:61:4f:31:9f:e5:d4:db:c0:26:
         30:11:86:ab:27:f0:d4:47:47:39:60:0d:39:af:a3:44:15:67:
         83:d9:44:7a:52:e9:ed:f4:29:3e:a1:48:8e:1e:f8:46:bb:35:
         de:d3:26:f5:b3:ee:17:83:7f:8c:18:c1:7c:dd:00:4e:f3:29:
         3a:67:13:04:ed:c0:f6:82:73:2b:2e:57:03:77:7e:45:33:43:
         21:8f:1e:b7:b6:86:04:a9:1c:6f:6c:db:22:e4:6b:66:9b:10:
         ce:49:43:84:87:dc:c9:83:a3:85:b0:3d:8f:bc:97:74:d0:0c:
         d9:9c:0d:62:4d:51:cf:a4:74:0d:70:02:64:4d:00:4a:c4:5a:
         00:65:a3:89:09:88:da:67:0a:82:b7:c3:75:23:11:19:aa:af:
         b3:05:4c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org