Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tBLXt3rghtHmomlYqYi6gn46h5c.roa
File:                     tBLXt3rghtHmomlYqYi6gn46h5c.roa (raw, json)
Hash identifier:          O1JZptnmnZDZQx+RshFSLibey6rMVBF86Kbx6cRCCW4=
Subject key identifier:   B4:12:D7:B7:7A:E0:86:D1:E6:A2:69:58:A9:88:BA:82:7E:3A:87:97
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       17
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tBLXt3rghtHmomlYqYi6gn46h5c.roa
Signing time:             Wed 22 Mar 2023 17:04:15 +0000
ROA not before:           Wed 22 Mar 2023 17:04:15 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:0:200::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 22 17:04:15 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=B412D7B77AE086D1E6A26958A988BA827E3A8797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fc:5d:01:62:ad:96:b5:4a:e8:46:aa:b6:bb:
                    c5:a4:75:e8:88:ae:9f:35:d8:2a:b5:09:0a:4d:4e:
                    50:e7:1f:be:b0:97:e7:34:29:af:f5:b2:85:d0:f7:
                    91:8e:bd:26:81:b9:fb:29:a8:65:57:a5:39:9f:57:
                    02:92:08:b7:34:43:be:41:5c:37:e3:92:90:28:34:
                    ff:ef:02:ef:00:3d:27:c7:69:62:90:47:5e:bd:25:
                    7f:72:c9:2d:80:65:d5:bf:2f:a3:54:be:f9:ae:94:
                    61:92:2d:8d:d4:67:f4:19:dd:0f:6e:52:7b:22:96:
                    b5:ef:e9:c2:24:b6:82:28:d6:32:a1:dd:ef:1d:b3:
                    9e:c3:0d:14:60:68:d2:f4:a8:c8:1d:94:5b:51:28:
                    17:c8:ac:67:80:d2:ec:81:f0:c8:01:79:25:13:28:
                    31:b5:23:40:99:d6:ad:c9:02:40:a7:93:19:e6:e6:
                    4b:64:ab:e1:62:af:9f:c6:a0:3e:6d:be:0a:40:cd:
                    d3:04:47:d1:30:44:72:21:4a:a0:c6:7f:63:cf:54:
                    48:80:72:8a:21:32:57:40:b5:a9:9c:4f:d2:7f:f7:
                    bc:f9:59:eb:19:58:f0:34:86:6f:77:77:69:c7:42:
                    fb:d9:8b:6b:e2:04:ad:50:7b:28:e2:f2:50:cc:f9:
                    39:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:12:D7:B7:7A:E0:86:D1:E6:A2:69:58:A9:88:BA:82:7E:3A:87:97
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tBLXt3rghtHmomlYqYi6gn46h5c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         7f:85:3b:33:c4:35:76:40:79:a0:2a:b4:6b:ef:37:b1:60:9e:
         5d:a8:02:d0:ab:fb:cd:ca:09:f3:16:44:bb:85:a1:46:5e:1c:
         d0:ef:bf:27:77:75:fc:02:6b:fc:3f:1b:99:61:85:2a:1f:fa:
         3a:0b:2f:af:7b:1b:f1:f3:ba:09:32:0c:2c:b8:28:52:a7:3a:
         de:c5:50:39:b0:09:68:f5:25:7c:9a:e3:0c:ad:64:f3:94:94:
         71:b9:92:22:b5:1e:61:3c:dc:d1:f9:38:ec:c4:49:1d:e7:03:
         dd:da:75:65:88:1b:65:ce:62:55:3a:6d:13:8e:8f:b7:b2:6b:
         f7:de:b1:ca:e4:fe:01:63:f3:73:49:0f:3f:83:c2:ab:8f:7a:
         37:df:7f:2d:e1:3c:80:14:cc:1a:1a:be:85:05:bc:eb:0f:37:
         3c:d0:d0:43:22:18:b9:89:a3:b0:d2:3d:16:13:33:26:81:66:
         29:86:5d:7e:55:90:a5:5a:34:cb:2f:71:38:61:35:78:48:68:
         ba:84:ed:59:98:6a:dc:38:2c:59:6c:6b:dd:df:07:64:a4:3f:
         dc:2c:7d:34:6e:d9:7e:0c:6e:f7:f0:05:33:73:31:93:b8:40:
         aa:7b:6c:3c:0d:25:4f:f3:04:9c:15:f0:f1:50:33:10:28:43:
         b4:c6:4b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org