Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rGAT-aIukSwQAkID3biXR1NUiDE.roa
File:                     rGAT-aIukSwQAkID3biXR1NUiDE.roa (raw, json)
Hash identifier:          +pI9wObc8il1jHrakzchOfmIrO8bUVapMECeWvQ9E9c=
Subject key identifier:   AC:60:13:F9:A2:2E:91:2C:10:02:42:03:DD:B8:97:47:53:54:88:31
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01F6
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rGAT-aIukSwQAkID3biXR1NUiDE.roa
Signing time:             Tue 30 May 2023 17:40:17 +0000
ROA not before:           Tue 30 May 2023 17:40:17 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3500::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:17 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=AC6013F9A22E912C10024203DDB8974753548831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4d:30:8c:18:07:50:65:7c:80:d8:80:6b:1e:
                    67:e2:da:87:cb:f7:6e:3a:f0:df:5b:c1:05:66:06:
                    b2:c1:47:a4:39:8c:03:7e:c1:ed:ce:7f:be:2d:f5:
                    12:6d:53:e8:25:c1:27:a3:75:74:92:46:db:6d:56:
                    e7:63:7f:bf:a3:af:31:4c:89:4b:75:f6:a2:b7:c1:
                    03:08:a9:00:ef:39:0b:87:58:d6:28:54:d8:1d:65:
                    f2:02:87:31:95:de:b4:7f:be:6a:cd:ad:75:44:eb:
                    7d:66:ab:2e:27:25:e8:5a:1c:ee:22:f3:c5:4b:81:
                    09:4b:67:35:e1:e3:a9:64:54:37:14:20:f6:86:27:
                    a1:c3:8b:e0:b4:a4:b5:d6:61:4b:a9:08:37:2a:0b:
                    28:07:f6:63:b7:30:4c:62:32:b6:d7:ef:d4:33:b9:
                    64:5d:69:27:02:86:16:80:65:aa:b1:64:ca:2e:f8:
                    55:da:61:99:83:a9:8e:7a:32:fa:2d:a7:a8:e0:1e:
                    ac:97:8f:df:e5:83:18:20:0c:7c:64:84:77:8c:1b:
                    5c:4f:71:5a:1b:2c:c4:05:29:9f:64:d3:16:8a:ad:
                    94:56:eb:68:1e:f8:2a:92:cd:87:f3:2f:47:cc:c6:
                    46:dd:04:63:57:66:a9:36:b5:cf:5a:19:d9:fc:ed:
                    10:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:60:13:F9:A2:2E:91:2C:10:02:42:03:DD:B8:97:47:53:54:88:31
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rGAT-aIukSwQAkID3biXR1NUiDE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3500::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:16:9f:d4:d3:44:e8:c6:00:88:d5:b7:fb:06:89:69:eb:db:
         5c:27:e1:54:f9:7a:3d:ec:96:75:89:11:9a:89:5d:56:b6:a4:
         29:56:79:e5:ce:fb:73:91:b0:4e:f5:da:ce:11:f5:93:82:85:
         ac:fc:df:6f:9f:7f:09:4e:6f:e3:5e:46:aa:fb:c7:ec:53:83:
         c3:b7:1d:c0:86:76:26:0f:0c:01:cb:97:a0:1b:90:fe:68:17:
         51:06:da:5e:71:69:ba:8f:26:00:89:75:10:47:2f:b7:63:bd:
         0a:17:14:46:2d:c5:9b:84:6a:1f:fb:b5:1a:0f:78:ee:9b:0f:
         09:e3:99:2f:ec:56:36:8e:27:09:f1:9c:fb:9c:16:f9:9f:f5:
         2a:2e:1e:f3:e4:27:61:bf:c4:05:a3:b3:fd:10:46:9d:8e:81:
         ff:2b:c0:f4:0a:a6:94:4a:67:20:7b:1c:55:00:ee:27:6b:d6:
         de:83:75:95:4f:b4:8b:28:e6:2d:85:13:64:e6:9f:56:8b:90:
         6f:7b:6c:36:6a:b5:28:09:0f:f8:0e:6d:85:5e:59:45:b3:cf:
         0e:f8:69:d9:b2:bf:62:f1:71:51:cd:e4:de:d1:09:27:46:96:
         a0:aa:2f:7e:d9:27:ce:e5:0c:e6:99:24:fe:b7:4c:f4:30:17:
         d7:a6:a7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org