Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/trnQa_rytK5QGU5TX6kn4UuQQGk.roa
File:                     trnQa_rytK5QGU5TX6kn4UuQQGk.roa (raw, json)
Hash identifier:          04N3xljv/8KBdfZbZ1yD64RNqbs5jCtyPArgGyO//a0=
Subject key identifier:   B6:B9:D0:6B:FA:F2:B4:AE:50:19:4E:53:5F:A9:27:E1:4B:90:40:69
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       FA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/trnQa_rytK5QGU5TX6kn4UuQQGk.roa
Signing time:             Tue 30 May 2023 16:12:30 +0000
ROA not before:           Tue 30 May 2023 16:12:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2d00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B6B9D06BFAF2B4AE50194E535FA927E14B904069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:e9:79:af:99:72:03:c3:fb:f0:5c:24:c2:
                    0e:9c:04:b0:39:5a:a7:d7:3d:7c:51:9a:ab:1f:9c:
                    2f:24:71:2a:0b:1c:80:72:0a:6c:7f:3f:b2:a9:b9:
                    1c:70:07:24:46:d4:66:ea:62:c2:40:54:79:07:d1:
                    6e:ac:fb:09:b5:16:ad:9c:d6:45:83:74:da:af:0c:
                    3e:12:15:0c:75:a5:09:ae:47:e8:52:06:f4:82:13:
                    7d:03:0b:d0:c3:ff:33:4c:4b:2d:98:a2:69:cc:61:
                    f3:0c:8c:d0:af:1d:c4:13:b9:0d:ae:9e:34:e9:e7:
                    e8:9e:1d:f2:07:f7:4b:15:34:84:8c:d1:fb:75:69:
                    3e:1a:77:8f:58:ff:7b:dc:e8:de:d8:a3:1d:9a:e2:
                    c0:e2:65:e9:19:fa:c7:91:c1:87:83:ec:f8:9b:1c:
                    45:72:cf:dc:f0:c3:f4:a9:c8:e0:db:be:bd:93:d6:
                    47:e7:c8:52:74:f8:a5:92:12:c1:8a:80:34:e9:b9:
                    e3:a1:43:36:f2:2a:0e:93:ad:4e:d3:e5:a7:8f:5d:
                    0d:33:fb:bb:c3:d5:0f:a7:0e:f4:23:76:24:01:45:
                    ed:2c:59:5b:ad:b3:db:27:86:03:ee:86:07:ba:3b:
                    12:71:bd:c2:7b:25:34:ec:ed:1d:98:fa:1a:14:4f:
                    27:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B9:D0:6B:FA:F2:B4:AE:50:19:4E:53:5F:A9:27:E1:4B:90:40:69
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/trnQa_rytK5QGU5TX6kn4UuQQGk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6b:a4:35:c0:2b:df:6c:ce:0c:b1:8e:f4:a4:b1:73:3f:ac:de:
         2b:be:ca:dc:dc:91:1a:fc:38:4e:9f:5f:bd:ae:ff:75:7a:3c:
         f8:5e:89:34:2b:19:19:ce:94:c6:36:69:21:9e:04:0d:de:4b:
         1b:65:34:6c:0c:b2:23:01:4d:fa:6a:a5:ff:46:e0:51:45:14:
         71:c2:b0:b6:d0:c4:77:35:5f:8b:e9:25:64:77:f1:c8:df:ae:
         d8:a4:99:6e:44:1a:88:5e:f5:a3:59:1c:4c:45:78:4f:21:61:
         1b:29:57:d3:db:98:d5:85:09:c7:6a:fd:19:04:b2:d5:5e:1d:
         3e:af:7a:1e:fa:36:c6:37:f3:d4:92:8f:55:c0:24:1c:ac:5c:
         07:ff:9c:51:95:a7:52:39:bb:e1:71:52:c9:a3:26:8e:1b:d6:
         6b:06:d1:3b:cb:bf:3d:ba:2e:e2:d2:22:0c:96:8a:2b:b9:1c:
         c7:c3:83:a6:f1:40:2c:41:7c:86:38:d4:22:43:18:bd:39:9c:
         14:73:0c:c3:ad:4b:a4:bb:d3:fb:16:8c:f6:32:1b:88:73:92:
         20:07:e4:ef:7b:93:f7:0e:04:74:61:72:f5:76:36:54:6e:ba:
         ab:6f:27:5f:0e:ab:d1:9a:34:20:89:1b:ab:c2:30:aa:35:32:
         32:d2:92:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org