Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sG3iqLfkgpo3Pphm6IRKkUYp6bQ.roa
File:                     sG3iqLfkgpo3Pphm6IRKkUYp6bQ.roa (raw, json)
Hash identifier:          bAlasdc+X10+LRfnylr46wGTKAo0UBEFgUVUWMhs6N4=
Subject key identifier:   B0:6D:E2:A8:B7:E4:82:9A:37:3E:98:66:E8:84:4A:91:46:29:E9:B4
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       93
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sG3iqLfkgpo3Pphm6IRKkUYp6bQ.roa
Signing time:             Tue 30 May 2023 16:08:13 +0000
ROA not before:           Tue 30 May 2023 16:08:13 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1700::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:13 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B06DE2A8B7E4829A373E9866E8844A914629E9B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ca:61:5f:30:fd:f9:c3:0d:c6:75:3d:3f:dd:
                    6b:b4:34:05:e9:6d:ce:e6:cb:80:e4:e5:ae:d0:bc:
                    12:37:76:69:90:34:d0:ed:dd:b1:dc:78:9c:a3:d1:
                    f7:d4:34:43:49:20:13:41:83:dc:63:21:25:ac:a0:
                    d4:ef:8a:fe:c6:fd:31:18:bb:95:2b:71:73:9c:49:
                    f4:a4:32:e4:b5:79:a8:5d:f5:bd:43:85:dd:3c:06:
                    4b:96:f8:96:97:7a:01:7f:4e:70:b0:dc:68:83:83:
                    fb:5e:38:41:0c:6e:97:8d:30:d4:86:4e:b9:b5:8f:
                    f3:b5:29:5d:eb:79:35:50:c1:fa:95:f9:24:f2:36:
                    06:15:aa:32:d2:1e:fb:46:c1:da:e9:09:f4:1d:77:
                    08:bf:61:ae:e8:5a:16:ee:a1:25:7f:fd:05:28:6f:
                    a5:7a:57:f6:42:0e:3f:12:db:3e:af:ce:96:0d:58:
                    32:64:03:b9:06:fc:73:8f:20:26:63:75:14:61:49:
                    75:a2:3a:48:58:ff:ba:0c:87:6b:6f:88:f4:23:5a:
                    52:f5:59:33:c6:23:63:42:47:02:6c:a5:7e:9e:f4:
                    26:1e:0a:91:a3:15:62:49:6f:4e:ea:79:df:3c:87:
                    1a:13:6a:6e:44:a0:4f:0e:f9:87:59:db:ab:d4:f0:
                    ee:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6D:E2:A8:B7:E4:82:9A:37:3E:98:66:E8:84:4A:91:46:29:E9:B4
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sG3iqLfkgpo3Pphm6IRKkUYp6bQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:e2:88:4c:92:2b:2d:ab:b5:f3:75:81:48:99:db:10:87:ac:
         87:c5:78:ca:63:69:8b:6f:0d:a4:9c:9a:13:33:b2:bc:15:8e:
         61:12:17:7b:16:ac:e9:2b:5a:41:a7:40:80:90:36:5d:bd:56:
         b6:ed:be:0b:b3:73:5e:89:bb:0e:37:d5:86:75:4b:fb:a3:81:
         0c:58:bd:d6:5f:7f:57:f7:b4:5f:99:c5:81:69:cd:c5:5a:a5:
         67:aa:7b:3d:01:1b:2b:77:2b:f0:84:60:95:ee:d6:d1:81:f3:
         8a:59:55:ce:42:ed:da:80:42:7d:a7:ae:e1:41:51:eb:b0:d2:
         e3:5c:d7:39:d4:01:6a:74:d2:d1:f9:83:f3:8b:79:b6:40:84:
         49:12:ec:85:56:d5:4d:16:41:1e:2a:13:27:9f:0c:f5:e0:54:
         ee:ee:e9:92:53:a7:84:2d:42:0e:8c:98:8e:8d:ef:95:47:1c:
         56:6c:f9:9f:55:14:09:f2:ee:4e:14:ce:6e:f4:4d:ff:b3:e0:
         76:ac:65:14:d9:fa:85:18:a8:a0:0f:e6:b4:47:f7:92:77:de:
         21:75:6b:f8:fe:24:13:17:e1:05:90:ea:f6:ab:1a:de:d4:55:
         ca:bf:1c:c4:59:0b:7f:72:ab:aa:7c:c3:a8:dd:3a:42:51:cd:
         e8:01:3f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org