Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/t-sbKyNPfRlSHN7muWkmGxU9WRw.roa
File:                     t-sbKyNPfRlSHN7muWkmGxU9WRw.roa (raw, json)
Hash identifier:          hxLACTKQ8uY489DWuaFQ/x9AMRL/PRrko/lJNtRV0BU=
Subject key identifier:   B7:EB:1B:2B:23:4F:7D:19:52:1C:DE:E6:B9:69:26:1B:15:3D:59:1C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0166
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/t-sbKyNPfRlSHN7muWkmGxU9WRw.roa
Signing time:             Tue 30 May 2023 17:32:33 +0000
ROA not before:           Tue 30 May 2023 17:32:33 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1b00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:33 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B7EB1B2B234F7D19521CDEE6B969261B153D591C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:55:c5:cf:3c:f8:d1:12:02:51:6f:06:1a:99:
                    cf:d4:f6:f3:84:f5:f0:b0:cd:54:66:f7:51:15:42:
                    da:85:fc:e4:1e:0c:5c:1a:e2:82:be:db:10:40:a4:
                    dd:40:3a:79:12:e3:23:bb:61:35:a8:d8:e9:9c:2a:
                    8f:37:36:51:d9:99:84:1c:85:bb:6e:1e:77:1f:34:
                    21:b7:f7:e9:d0:e2:81:7b:dc:d4:32:97:df:c6:06:
                    44:69:f7:41:1c:84:31:6b:6d:5a:0f:c1:b5:bc:d6:
                    63:c0:2e:1f:b5:eb:f3:65:05:24:07:dc:2f:e4:02:
                    10:3f:ca:09:ef:67:7f:d9:9c:c5:ff:c6:bb:a9:fe:
                    f2:1c:10:2e:f7:a6:cc:3a:52:62:0b:36:fe:3d:61:
                    9a:7d:ff:10:9d:5c:de:0d:a9:8b:5a:6e:ac:a9:6b:
                    65:e3:b5:1a:de:11:c5:9c:e1:e9:5b:20:b9:5b:9a:
                    b5:0b:4d:97:ba:f3:49:1a:e0:35:95:d3:64:dc:3d:
                    f4:e4:b6:9b:6a:a4:11:6b:23:61:2d:62:b5:a2:7b:
                    4f:a6:0f:39:24:42:21:65:da:b4:e8:50:4d:15:ff:
                    00:88:05:b2:0a:6a:83:8f:fd:7b:6a:ee:72:31:69:
                    dd:45:ef:eb:2e:32:71:b5:12:72:d0:ee:03:7f:64:
                    ec:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EB:1B:2B:23:4F:7D:19:52:1C:DE:E6:B9:69:26:1B:15:3D:59:1C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/t-sbKyNPfRlSHN7muWkmGxU9WRw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c4:56:73:7c:55:55:0a:5d:06:e1:85:4b:cc:0b:ae:81:a7:b8:
         35:76:2a:48:89:d8:66:34:c1:f1:fa:9d:a2:de:02:e8:42:d3:
         58:5c:bf:b5:fd:fc:03:62:ba:c3:90:48:44:25:cf:c1:d7:02:
         00:1f:98:9c:44:08:ca:d9:fc:83:3b:4e:40:e2:bd:02:f5:8f:
         59:3a:f5:8b:01:7d:9f:37:d4:a1:14:ed:26:1f:83:dc:f8:9a:
         7d:5e:68:63:97:37:d3:60:6a:86:db:2a:c3:96:44:f3:e3:a1:
         1a:df:0e:2b:61:98:d1:fe:3b:ed:7b:56:32:e1:64:4c:62:60:
         08:3f:0e:b5:52:c5:97:88:8a:8c:02:96:51:64:1f:c7:91:41:
         df:29:d9:89:7e:88:25:be:65:7e:17:e0:6a:49:24:60:37:53:
         29:18:20:9f:b1:9f:06:1b:50:5c:6d:d9:3c:c9:c0:bf:9e:21:
         2d:e5:0a:9c:1f:b6:23:54:c9:fa:46:68:0a:54:cc:45:19:db:
         c9:6d:9a:f9:27:0b:d9:6b:f9:82:81:29:57:41:00:e7:21:11:
         1b:43:2a:d3:ac:16:ae:40:e7:cf:fe:fe:7d:91:19:cf:f8:3a:
         e4:7c:ec:ac:b2:1f:2b:c8:e2:86:a4:9a:48:fb:06:e9:8b:21:
         7e:fa:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org