Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sQ5pwWHyWupZ3FM-xhGkkH0NCgM.roa
File:                     sQ5pwWHyWupZ3FM-xhGkkH0NCgM.roa (raw, json)
Hash identifier:          goq2EKFMTMbbc5y2aPY5v0nzbxhaskr47+k2AcZ5Z3Y=
Subject key identifier:   B1:0E:69:C1:61:F2:5A:EA:59:DC:53:3E:C6:11:A4:90:7D:0D:0A:03
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       015F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sQ5pwWHyWupZ3FM-xhGkkH0NCgM.roa
Signing time:             Tue 30 May 2023 17:32:31 +0000
ROA not before:           Tue 30 May 2023 17:32:31 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3c00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:31 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B10E69C161F25AEA59DC533EC611A4907D0D0A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9b:13:0a:eb:44:f2:e8:4a:88:9e:93:fa:f1:
                    db:df:96:d4:0d:d4:3e:88:95:7d:8b:7a:08:a5:d9:
                    52:fc:6a:e2:59:64:38:19:9b:73:9b:57:dc:b4:cc:
                    a2:07:a6:4c:34:bc:5c:fd:03:24:c3:8f:b3:43:60:
                    2d:41:bf:28:8d:be:4f:cf:34:5d:02:c6:27:7c:cd:
                    07:60:26:fc:b7:fd:d1:c4:56:ca:89:20:7e:5f:c7:
                    54:89:ed:3a:7f:e6:ec:27:d0:2e:06:02:ed:a8:ea:
                    5a:53:65:0a:40:e7:ae:c9:cf:75:fe:fd:a7:34:e4:
                    b1:b3:6d:42:a8:8c:a7:04:19:02:80:a3:19:46:b8:
                    0f:a6:73:0b:72:48:45:5e:28:8b:b5:71:82:ed:28:
                    e2:52:c5:6a:30:63:99:93:da:50:d2:de:0c:c7:a3:
                    ca:be:20:f9:f5:71:5f:57:ac:87:61:a7:2e:2c:3c:
                    3f:56:06:5b:b0:7c:bc:6d:49:60:40:80:81:21:d5:
                    a9:c3:55:b9:d2:32:a2:2d:50:20:38:a2:42:df:2e:
                    b1:c8:c1:89:99:e2:f5:20:a4:f3:bb:03:b9:75:35:
                    3c:7b:0f:6a:ab:e7:8a:3c:37:44:45:37:b2:23:7e:
                    d4:fd:ab:e1:e2:3d:38:d3:ac:43:d1:43:70:a8:81:
                    b6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0E:69:C1:61:F2:5A:EA:59:DC:53:3E:C6:11:A4:90:7D:0D:0A:03
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sQ5pwWHyWupZ3FM-xhGkkH0NCgM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:f5:8a:be:0f:1d:ae:52:31:2e:ee:76:8d:05:eb:28:ce:b6:
         5d:a0:68:3f:10:76:ed:ea:d3:79:ce:e5:ea:a3:4b:5d:68:f1:
         15:73:e6:21:54:d0:f1:cb:da:43:da:07:71:45:04:8e:37:41:
         01:e6:96:2e:2b:78:bb:ee:70:cc:a0:52:0d:0c:f8:1c:b7:80:
         9c:fb:5c:e0:39:67:de:85:7d:d0:9b:85:e6:3a:b9:4d:e3:4c:
         22:36:a7:9e:10:b8:4e:14:e3:e7:57:1e:e8:f8:cc:d4:88:c4:
         58:ef:5b:a4:53:38:a6:88:01:89:f0:a2:67:69:11:3d:80:c1:
         1d:39:5a:ea:65:1a:ab:61:49:bd:7c:df:f9:c6:20:08:f3:93:
         9d:50:7d:f9:86:5e:1b:eb:7d:b5:3b:af:24:67:00:ad:76:e5:
         25:c8:1b:9f:45:a1:8b:29:40:7d:5c:25:df:e3:58:cc:2a:ad:
         24:a6:fa:58:60:6b:22:15:28:fc:5f:39:ca:2a:46:d0:ae:fa:
         83:db:42:44:57:d6:40:c1:b2:b7:71:b7:8a:ad:33:9a:65:00:
         bd:7a:ca:6d:f4:e3:b0:18:f6:64:4b:4e:d5:f5:93:b2:2c:b5:
         4d:af:50:88:10:87:39:d8:78:81:65:89:14:5f:8a:6e:5c:2c:
         bc:d2:53:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org