Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uAmsSrS_ii5EC2pTONb0Kzyw4Ac.roa
File:                     uAmsSrS_ii5EC2pTONb0Kzyw4Ac.roa (raw, json)
Hash identifier:          ZRNebJJV9t1Cn/+RLv/L6mvf8sathCNwTrm2Ps4Lbsc=
Subject key identifier:   B8:09:AC:4A:B4:BF:8A:2E:44:0B:6A:53:38:D6:F4:2B:3C:B0:E0:07
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01C8
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uAmsSrS_ii5EC2pTONb0Kzyw4Ac.roa
Signing time:             Tue 30 May 2023 17:38:21 +0000
ROA not before:           Tue 30 May 2023 17:38:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8100::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B809AC4AB4BF8A2E440B6A5338D6F42B3CB0E007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:22:01:ac:40:70:cf:a9:2f:6f:24:df:f6:79:
                    50:95:49:03:34:b6:f2:29:43:e3:66:42:26:da:40:
                    65:59:4c:10:f7:b5:49:16:48:05:c0:2c:ba:70:de:
                    a3:dc:6e:51:17:c8:00:ef:9b:92:c8:6c:04:b3:28:
                    34:14:3e:7c:07:f6:2a:3d:b5:8b:e5:7f:76:32:4a:
                    01:32:e5:f6:4f:1a:29:05:0b:e7:f7:1d:a8:74:9d:
                    2d:4f:b9:9d:e2:d1:f4:34:15:ee:bd:9d:e6:49:c2:
                    04:db:b7:e1:2e:d0:eb:cf:ca:38:26:d6:0a:96:31:
                    fd:f6:98:72:12:13:d5:09:c1:e2:cc:e6:fd:9f:0c:
                    2b:35:31:03:e8:12:ff:02:39:88:d8:4a:21:e1:e7:
                    b6:96:0a:8b:07:b3:a6:16:b8:c8:d3:b1:27:82:32:
                    14:9b:d5:9c:97:9a:0d:8c:b2:4f:12:1e:11:98:68:
                    24:83:c8:13:14:46:e6:ee:cf:dd:84:db:83:f9:8d:
                    22:e5:80:98:f2:95:b2:2e:12:1b:1d:dd:b2:a6:b5:
                    98:eb:27:f1:10:9f:34:e8:88:f8:1a:f3:10:be:13:
                    ed:33:17:23:93:2a:bb:56:2f:f7:08:71:8f:bc:91:
                    0b:6b:88:69:43:94:e6:16:40:05:65:61:c4:16:cb:
                    d3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:09:AC:4A:B4:BF:8A:2E:44:0B:6A:53:38:D6:F4:2B:3C:B0:E0:07
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uAmsSrS_ii5EC2pTONb0Kzyw4Ac.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:74:24:88:63:84:74:6f:f8:cb:e7:17:13:a8:59:b8:74:98:
         56:fe:e0:d1:91:4e:61:38:74:1b:21:6e:35:98:49:08:62:6a:
         be:a8:45:87:6f:c9:a1:d1:d9:b9:28:1a:23:5f:3d:0b:a1:ec:
         f9:a5:45:3b:24:4a:e2:9a:8e:3c:63:9b:ff:67:e0:7a:2e:0b:
         bc:1d:88:b0:40:c2:5c:09:e5:47:6a:df:0e:08:f6:b7:52:20:
         ce:e4:ba:cc:96:ef:76:fe:46:eb:2c:42:21:b1:8c:96:af:e6:
         ea:47:e2:85:ca:0a:76:cc:ad:c1:07:ea:b8:67:a9:bd:35:72:
         0f:45:27:66:fb:0f:fc:1a:e0:0d:a0:4b:d0:ee:d5:83:a5:8f:
         92:f3:22:bf:06:95:6e:5c:c7:c4:e4:e2:61:47:93:53:0f:5f:
         d7:9f:19:78:46:b7:6a:58:58:e8:02:88:fb:d3:09:46:64:0e:
         b2:b0:79:26:3e:8a:be:29:cf:a4:67:a9:bc:a8:5a:b5:53:1e:
         43:c6:de:fc:7e:cd:9e:3a:65:fe:2e:6e:0c:39:ed:88:e3:da:
         74:a2:c5:a9:2d:d9:1b:48:48:88:4d:c0:21:48:6c:10:f4:37:
         cd:f0:23:eb:10:e4:e3:fb:7f:e9:e4:38:02:61:95:b7:88:84:
         a9:a5:a2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org