Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qtibfdkJzFNr9GuP9C4hzHiw0pY.roa
File:                     qtibfdkJzFNr9GuP9C4hzHiw0pY.roa (raw, json)
Hash identifier:          oLGHms/+hPs8WsdyiHtmJvrFA4QIUpg/i7jcYkgAlyM=
Subject key identifier:   AA:D8:9B:7D:D9:09:CC:53:6B:F4:6B:8F:F4:2E:21:CC:78:B0:D2:96
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       016C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qtibfdkJzFNr9GuP9C4hzHiw0pY.roa
Signing time:             Tue 30 May 2023 17:32:36 +0000
ROA not before:           Tue 30 May 2023 17:32:36 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5700::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:36 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=AAD89B7DD909CC536BF46B8FF42E21CC78B0D296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:e9:88:2b:a9:41:2b:cc:60:82:f4:9f:43:
                    a5:08:e3:95:62:bc:f1:08:54:cb:02:d6:94:32:2c:
                    b9:51:1b:7f:15:fb:a0:09:12:08:e3:ce:76:df:41:
                    2c:ff:fd:3d:8e:34:cc:c2:e1:7b:08:ee:b7:8f:a6:
                    6c:23:d2:3f:d3:0f:42:ea:c2:63:e5:f3:c3:48:7c:
                    c7:0a:b0:4f:bf:1e:f3:40:97:28:10:36:d9:0b:b5:
                    6e:66:16:ff:57:99:f0:1a:2e:22:6b:67:d8:e9:38:
                    a0:05:1f:9d:03:25:a1:f9:be:cc:84:72:ff:e2:9d:
                    fa:22:3b:21:bc:2b:ce:97:34:cb:74:4b:e4:40:17:
                    7e:0d:57:12:07:df:ee:f2:28:ec:bd:22:d2:2d:89:
                    3a:ea:fb:db:41:08:5e:7b:eb:29:32:2c:3b:68:c0:
                    3e:0e:ba:a1:70:f2:b6:3f:99:3a:32:2c:3a:0c:d5:
                    ab:e7:3b:df:56:2d:16:4e:4f:ac:f8:d4:94:db:76:
                    d7:3f:1e:08:2c:42:f6:66:b6:6c:51:1e:a4:a1:a5:
                    3c:df:22:e1:01:92:72:85:7f:2f:f8:f4:d7:c8:4c:
                    cd:1e:41:92:36:57:80:47:7e:9a:17:db:a7:6b:ce:
                    b6:52:9e:0f:c4:0d:75:32:c4:5d:8c:cb:cd:7e:da:
                    54:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D8:9B:7D:D9:09:CC:53:6B:F4:6B:8F:F4:2E:21:CC:78:B0:D2:96
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qtibfdkJzFNr9GuP9C4hzHiw0pY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5700::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:36:42:3d:d1:0b:b2:77:56:05:15:2a:38:0c:75:f6:7e:88:
         f5:a8:4c:8e:87:25:74:e7:f0:00:e5:e6:ce:4a:4d:67:f4:6a:
         cd:66:27:09:ac:b0:b3:33:91:2f:b5:2c:95:f8:df:31:90:53:
         f5:a9:6b:c7:03:b2:f2:00:03:32:32:1f:73:44:91:96:48:98:
         43:fa:2c:00:ac:fc:c4:c9:40:e7:4d:76:45:93:ec:54:09:ab:
         46:0a:92:4b:83:ec:bd:56:8f:c5:a5:35:2b:69:77:47:db:cc:
         99:7d:23:d7:6f:c8:dd:7c:a0:ec:48:d6:a5:83:a3:eb:68:00:
         22:2c:a0:f6:b8:b3:46:b6:4d:d4:64:f2:41:2b:30:48:89:c3:
         fe:4c:0a:07:5d:8b:8d:6d:28:2b:e5:33:28:49:5d:55:09:d2:
         cb:61:ec:e0:a6:51:95:2e:07:5f:13:64:69:62:44:8c:9a:67:
         19:dc:e0:c1:c1:d1:70:e3:84:64:5e:1b:d9:2b:2c:d8:38:4f:
         c8:66:aa:78:b3:2e:f1:46:86:fa:cb:b8:6a:9e:49:8e:f2:85:
         71:bf:14:c1:d9:7b:4a:97:5b:ec:13:b2:71:85:61:f5:44:34:
         78:9e:5a:50:8f:9f:4d:44:8d:2d:bb:2a:68:c1:ab:d2:56:cd:
         34:cd:e8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org