Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/r73mWNN2t5TxTE20kGuilQyBWk0.roa
File:                     r73mWNN2t5TxTE20kGuilQyBWk0.roa (raw, json)
Hash identifier:          KU9gHYZUEeLHleXkP4gLktFxqs0b2XDGVSJ6R52/Knc=
Subject key identifier:   AF:BD:E6:58:D3:76:B7:94:F1:4C:4D:B4:90:6B:A2:95:0C:81:5A:4D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       022E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/r73mWNN2t5TxTE20kGuilQyBWk0.roa
Signing time:             Tue 30 May 2023 17:42:24 +0000
ROA not before:           Tue 30 May 2023 17:42:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ad00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558 (0x22e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=AFBDE658D376B794F14C4DB4906BA2950C815A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:d4:42:4a:70:56:cf:41:48:27:21:82:ce:
                    6b:00:b9:3c:62:40:65:a1:69:99:e5:15:a5:bf:48:
                    6a:f9:02:29:b3:d9:9c:eb:b8:73:2b:ce:19:41:a7:
                    58:dd:01:f6:ee:7b:39:71:01:0a:26:8c:67:ea:ad:
                    62:c6:a1:02:db:25:91:e3:7f:ff:f1:ab:60:a4:a0:
                    1b:c4:a9:a8:0b:cf:f0:71:37:d6:11:14:46:f0:c3:
                    6c:f6:bf:16:64:dc:fd:26:be:47:2d:93:92:1f:fb:
                    e6:31:28:8d:92:b3:af:85:01:b6:2a:49:cb:9e:b8:
                    04:cc:be:c4:09:11:b3:b2:fc:5b:dd:72:0e:15:4d:
                    be:d0:a9:53:ea:c5:f3:61:37:fe:4b:06:75:d7:77:
                    23:68:3c:a9:36:d0:23:14:6a:89:8e:7c:37:8b:37:
                    d1:3f:e9:7b:28:1f:64:5c:ef:bf:f7:50:b6:df:01:
                    8e:bc:bd:1e:f7:7d:d1:79:57:10:73:1c:2e:9a:6d:
                    cf:59:3c:37:1b:2c:6d:66:f1:4c:28:d5:a8:b5:38:
                    af:cd:2b:f6:e3:ea:5e:c3:5d:eb:2a:9d:ee:38:04:
                    7c:7a:45:dc:3d:e5:2c:18:37:0a:9e:31:30:d7:4b:
                    26:34:58:50:53:96:f1:6b:6c:be:3f:4d:d5:13:30:
                    c3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BD:E6:58:D3:76:B7:94:F1:4C:4D:B4:90:6B:A2:95:0C:81:5A:4D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/r73mWNN2t5TxTE20kGuilQyBWk0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ad00::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:b1:28:4c:6c:02:b5:dd:63:0d:d6:2d:e6:d1:5a:b8:0c:c8:
         7e:a4:4d:c8:74:ed:88:dd:2a:ce:59:a2:ff:7d:a6:43:8d:68:
         ae:d2:10:61:cd:3f:45:f0:f5:1a:d4:3f:6c:97:ec:6b:6e:b2:
         78:f0:7e:58:f9:8e:fc:25:d9:a0:bb:8a:d6:65:93:84:e9:cd:
         11:14:e3:33:42:f0:a0:53:9c:9d:d8:c2:84:3e:0e:9a:33:f7:
         74:e1:9b:b7:bb:b6:98:71:96:ff:b9:79:62:c1:df:17:40:df:
         8b:62:e3:35:60:7d:cb:01:71:98:d3:3c:9a:c0:26:1d:5d:84:
         97:54:60:e3:c1:ba:86:74:2c:64:3d:06:03:30:2e:f5:a1:e1:
         be:4f:83:96:30:24:2e:42:c7:c0:f4:b7:47:76:f4:1e:c6:5e:
         34:bd:ab:dc:c1:aa:cd:80:7c:58:98:ee:be:63:8d:aa:64:c1:
         ea:df:b2:85:9c:4a:93:2e:41:cc:62:4c:29:f8:83:1d:92:22:
         40:b1:d3:86:59:19:35:10:1f:46:6c:f3:b2:4f:2c:7e:c3:73:
         f7:e7:70:84:a9:60:43:94:0c:1e:02:cd:07:b7:76:ad:2c:27:
         49:40:30:1b:67:4e:6a:36:a2:4a:01:57:73:8f:dc:6d:6a:38:
         42:b6:be:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org