Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tjCAc3uaB8nUMcR4qsbcS8lfweY.roa
File:                     tjCAc3uaB8nUMcR4qsbcS8lfweY.roa (raw, json)
Hash identifier:          we22RWiAw1yH0TzgMqaz2bRRstAGKV6XK+gVKaZOpFA=
Subject key identifier:   B6:30:80:73:7B:9A:07:C9:D4:31:C4:78:AA:C6:DC:4B:C9:5F:C1:E6
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       E7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tjCAc3uaB8nUMcR4qsbcS8lfweY.roa
Signing time:             Tue 30 May 2023 16:12:22 +0000
ROA not before:           Tue 30 May 2023 16:12:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:1800::/38 maxlen: 38

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B63080737B9A07C9D431C478AAC6DC4BC95FC1E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6b:5c:6a:a7:7d:28:b6:2e:06:41:8d:c0:00:
                    21:06:76:eb:14:c7:aa:51:00:14:07:c3:46:4c:17:
                    b6:78:48:86:7a:b8:8a:43:ad:df:8b:b5:c7:34:a0:
                    da:7d:4d:64:93:21:e9:04:85:9d:64:32:e5:df:b7:
                    21:f3:1d:ae:83:44:f2:79:63:eb:1a:3f:1b:b3:22:
                    f9:31:83:92:fc:6b:14:e0:4c:5f:86:ab:47:0e:8b:
                    81:0c:95:68:1f:81:27:d8:d6:91:96:83:78:74:98:
                    66:f8:95:cf:c4:16:41:05:4a:91:d4:be:c3:49:90:
                    30:fc:f4:5d:42:2c:6b:f1:80:92:6e:be:6c:24:72:
                    91:78:27:07:12:14:be:45:81:3e:10:b5:d0:a0:9b:
                    c2:5b:38:87:7a:93:3f:54:7e:55:43:17:85:47:35:
                    11:f7:9d:c7:74:92:28:68:d9:b9:3d:92:f3:0d:95:
                    61:80:d4:07:b4:82:05:45:63:22:b5:14:b9:4a:6c:
                    32:20:4f:58:82:47:c6:0c:c8:76:9d:85:c7:40:dc:
                    6b:01:f5:2e:71:6e:d1:f0:2a:79:12:54:d7:19:45:
                    8a:ab:bc:6e:d8:fe:54:ef:76:57:26:49:f3:f0:da:
                    b5:e4:8d:7b:0d:f7:c9:50:80:7e:7e:c9:d4:eb:a8:
                    7d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:30:80:73:7B:9A:07:C9:D4:31:C4:78:AA:C6:DC:4B:C9:5F:C1:E6
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tjCAc3uaB8nUMcR4qsbcS8lfweY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:1800::/38

    Signature Algorithm: sha256WithRSAEncryption
         b5:58:12:a3:10:3b:8e:61:fd:0e:ed:36:2d:38:bc:f0:88:00:
         68:32:79:47:2d:63:53:37:e8:c6:eb:85:99:ae:f9:34:83:55:
         2f:08:12:86:3f:60:e2:e9:13:d7:94:ad:a0:ba:90:7c:25:14:
         c2:78:fa:a3:97:d5:50:97:e9:b2:30:6e:33:e5:bf:53:3d:27:
         6a:52:34:11:fd:68:02:66:41:b5:14:71:31:b8:c3:86:84:6a:
         c8:7e:52:02:c5:95:13:fb:c9:69:bb:96:19:47:3e:1c:f6:da:
         6d:a8:93:d0:f3:8c:b2:3f:0a:03:35:f1:79:e2:ac:e6:75:e4:
         25:69:4f:f3:cb:28:c2:ac:69:af:12:f8:a2:cd:d1:08:c0:8d:
         ae:6d:57:e1:a7:4c:82:aa:66:f0:fa:55:d0:90:77:03:ad:2f:
         4b:15:13:a9:1c:3d:eb:0b:02:8c:3c:94:f2:d8:13:67:2d:dc:
         3b:f9:d3:b2:d7:f4:63:7d:95:ce:2a:02:87:4e:b3:8c:b9:6e:
         b2:8d:bf:10:53:e4:77:10:1e:22:0b:e8:ff:0d:3c:c9:8b:3d:
         83:6f:d2:f6:04:84:20:2e:e5:36:1a:7b:fd:6b:9a:6b:35:f9:
         4f:e4:1c:0b:88:4b:4f:1a:bf:45:81:aa:84:dc:70:6d:f8:08:
         1b:05:b1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org