Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uBGuBjzOXDRKwDQ74Q0iYacwpC0.roa
File:                     uBGuBjzOXDRKwDQ74Q0iYacwpC0.roa (raw, json)
Hash identifier:          8Ek3SnrjgV3SHYQxJrAnsB9kfOq+9sbborf5VzQRUsQ=
Subject key identifier:   B8:11:AE:06:3C:CE:5C:34:4A:C0:34:3B:E1:0D:22:61:A7:30:A4:2D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0147
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uBGuBjzOXDRKwDQ74Q0iYacwpC0.roa
Signing time:             Tue 30 May 2023 17:32:23 +0000
ROA not before:           Tue 30 May 2023 17:32:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8a00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B811AE063CCE5C344AC0343BE10D2261A730A42D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8d:21:47:af:ab:2e:2a:cc:69:25:92:70:8e:
                    6d:b2:1a:2c:97:62:44:34:a6:59:b9:08:bc:dc:13:
                    6d:25:d4:50:1f:e8:2f:f5:43:16:58:2b:6a:c5:c4:
                    2c:61:04:36:fa:a6:b3:14:7f:83:b0:0e:01:83:77:
                    85:e7:8d:b8:ad:83:fb:35:e0:fc:4a:b2:5d:e7:c3:
                    7b:22:d6:93:a7:8c:da:65:69:e3:a1:b1:1d:d2:ad:
                    17:79:bf:fa:b7:53:64:8e:4f:e8:9a:c4:66:22:53:
                    b2:1b:cb:ea:ed:71:fb:6c:ef:f4:33:d3:43:74:33:
                    6f:e8:e8:64:be:70:66:98:2b:99:62:bc:ab:5f:a1:
                    7e:f6:48:9d:27:6f:8f:6c:dc:97:95:1e:77:b9:79:
                    10:98:c0:bc:0e:a3:64:6f:d1:43:ea:c7:b8:f4:bb:
                    b5:8a:af:49:ff:ef:52:b2:cf:87:e7:9e:80:eb:bd:
                    ac:00:10:96:4a:c2:b5:70:70:86:11:e7:65:18:06:
                    26:fe:cb:06:6f:fc:eb:45:1a:fe:c7:a1:ce:b1:65:
                    a1:fa:08:36:a0:01:a9:d9:cf:4d:12:b7:a6:6e:09:
                    e3:a2:f1:b0:78:00:98:65:29:7d:ea:5d:af:d6:f9:
                    09:97:25:52:b0:07:bf:d2:e0:b0:93:15:04:04:63:
                    84:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:11:AE:06:3C:CE:5C:34:4A:C0:34:3B:E1:0D:22:61:A7:30:A4:2D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uBGuBjzOXDRKwDQ74Q0iYacwpC0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a5:e2:a0:97:48:da:7e:53:bf:0a:2f:03:3c:fa:73:f6:a0:8b:
         28:ae:8a:de:0b:80:07:c0:c6:35:90:64:82:90:32:ee:8b:7c:
         29:41:81:c0:f8:77:e5:ae:6a:01:28:5f:a6:45:e3:f5:f2:d5:
         7a:6e:57:c6:b3:93:a1:0f:3d:c7:a6:25:01:12:1e:2c:55:e5:
         0a:d8:0a:85:42:3a:2c:04:e5:48:99:3e:bc:71:9f:e5:74:80:
         04:94:ff:54:57:69:b1:22:08:ca:08:4f:2a:5c:d2:ed:d5:a1:
         32:cb:19:8b:54:54:dc:27:b3:06:36:04:dc:4a:0d:d1:0b:2b:
         7f:a2:8e:bf:a8:58:3a:e4:dc:40:f8:e5:a8:80:12:c1:ce:24:
         d8:10:af:d2:cf:c7:91:b5:db:8b:12:b3:38:2a:6b:dd:b8:8d:
         c4:ac:d0:42:2b:8f:9e:37:c0:75:94:54:b5:19:d2:51:e2:75:
         0d:78:76:14:1c:21:93:f2:f0:0a:c6:f9:de:85:07:a7:bb:a2:
         95:a3:b4:63:12:f8:50:58:74:e0:3d:e1:73:73:b8:ba:1e:5c:
         55:3f:ed:f1:b3:76:46:03:68:2c:6e:b4:ab:fd:ef:1e:a2:2e:
         72:68:b5:17:9e:4a:94:d9:87:5a:51:e9:ca:ec:16:3e:7f:21:
         74:f6:20:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org