Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tPs2eSiA48mQw2BH7q43GGgLK5o.roa
File:                     tPs2eSiA48mQw2BH7q43GGgLK5o.roa (raw, json)
Hash identifier:          1aMzH9Yq5QDURyTPKnKzbYpR6I5IVoCdLXWDcTNBODY=
Subject key identifier:   B4:FB:36:79:28:80:E3:C9:90:C3:60:47:EE:AE:37:18:68:0B:2B:9A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       6A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tPs2eSiA48mQw2BH7q43GGgLK5o.roa
Signing time:             Tue 30 May 2023 16:06:17 +0000
ROA not before:           Tue 30 May 2023 16:06:17 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f100::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:17 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B4FB36792880E3C990C36047EEAE3718680B2B9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5f:4b:a4:ab:23:c9:50:5f:ed:08:ae:59:39:
                    10:eb:03:58:3c:a9:6f:43:a9:75:72:e4:71:d6:9d:
                    ee:0d:2d:a0:fd:09:89:1b:8b:07:fb:4f:5d:a5:b5:
                    f2:f1:2f:bd:e0:65:37:d8:be:7d:c8:f4:9b:8c:60:
                    48:17:0a:bd:a5:35:68:49:3c:63:4c:85:db:f2:b2:
                    c1:07:b9:22:0f:20:7b:c4:02:d8:9c:b6:86:d9:7c:
                    fa:cc:3b:4b:25:d3:f3:0e:7c:d8:f7:10:6e:94:f4:
                    96:83:f9:3a:1b:0d:7f:1e:23:14:74:ff:3d:7a:b2:
                    2f:c6:b2:56:ae:05:90:11:bb:85:66:24:d9:2e:c0:
                    b9:94:7d:02:9d:5d:46:46:a4:14:50:94:48:f4:ee:
                    bf:22:18:18:76:a0:5d:16:1c:4e:9f:ba:b9:1d:90:
                    88:0c:a3:82:55:bd:bf:88:2e:55:70:7d:39:01:c7:
                    8b:6c:0a:81:77:73:25:23:f4:5f:47:22:0b:d9:d7:
                    a1:c0:ee:e9:52:64:d4:28:1e:9d:3f:eb:bc:d6:bc:
                    97:75:2a:66:da:59:4e:b6:be:ce:0d:a1:33:76:ff:
                    d0:82:ca:7c:39:db:70:cd:05:25:a4:6f:89:7f:fb:
                    46:67:6c:d1:3b:6d:59:17:d3:35:59:30:7c:62:9f:
                    c8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FB:36:79:28:80:E3:C9:90:C3:60:47:EE:AE:37:18:68:0B:2B:9A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tPs2eSiA48mQw2BH7q43GGgLK5o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f100::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:9e:c5:83:40:5d:4e:56:df:af:d5:c3:e4:f1:1f:79:58:6e:
         b7:34:1c:50:65:5b:bd:aa:d6:fa:21:16:4b:f5:8a:98:4e:34:
         fb:d0:8f:d6:78:96:b6:46:6d:b7:ee:00:00:f0:4a:19:17:4c:
         e0:62:f4:b3:ae:26:37:51:76:aa:82:a8:4d:90:12:f1:1a:b8:
         3e:35:10:3d:9f:46:33:b5:62:bc:55:4e:36:6e:80:79:fc:44:
         8a:5c:17:c9:ec:20:5f:5b:e3:cd:1a:fe:0f:29:f6:3e:0d:dc:
         68:9c:9b:09:40:63:92:b5:13:06:0d:b7:31:32:21:b0:56:b1:
         67:44:3b:f6:73:2c:96:10:11:81:d1:88:95:50:f4:a0:04:64:
         6a:3e:d1:29:82:ea:a7:a3:6d:eb:95:89:d1:ef:82:47:ff:5e:
         c9:f3:3c:14:82:74:d4:d5:05:f8:8d:c7:e2:42:c5:9f:79:3b:
         07:b3:d4:a7:33:f6:7e:b7:c1:fe:cd:97:9e:12:c8:bd:88:6b:
         db:a0:80:18:6d:55:c0:8b:d4:9c:b5:c2:b2:32:7d:7a:e8:22:
         19:c0:37:d7:8e:17:af:0c:35:ec:a2:6d:39:47:af:f4:88:0d:
         8f:a0:11:87:fc:3e:95:3a:57:cd:13:2f:8a:02:5e:1c:1b:5a:
         94:c5:3a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org