Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uT66p6ZuCFZC1LJQAy4U0CzKauw.roa
File:                     uT66p6ZuCFZC1LJQAy4U0CzKauw.roa (raw, json)
Hash identifier:          W48B5B3NDZX+b+SLUGz++jfiyuemlr1XnlKUxnA5oPc=
Subject key identifier:   B9:3E:BA:A7:A6:6E:08:56:42:D4:B2:50:03:2E:14:D0:2C:CA:6A:EC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       018B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uT66p6ZuCFZC1LJQAy4U0CzKauw.roa
Signing time:             Tue 30 May 2023 17:34:27 +0000
ROA not before:           Tue 30 May 2023 17:34:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c100::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B93EBAA7A66E085642D4B250032E14D02CCA6AEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:31:00:51:39:05:eb:b8:12:5e:27:78:84:45:
                    17:dd:c3:da:67:f8:20:2a:74:06:36:3a:1e:a8:9f:
                    4e:04:77:39:99:c3:72:42:10:9b:21:87:44:ac:4a:
                    a8:dd:07:5e:a2:5a:e4:ba:ff:e9:1a:7e:7b:c0:30:
                    f0:e0:22:d8:4f:c7:5f:41:0e:35:33:e1:92:4a:21:
                    c0:04:f5:c8:54:04:3e:7f:fa:77:06:29:fd:8e:a8:
                    79:b3:18:51:82:31:d5:a5:45:18:e5:1a:11:5f:93:
                    d5:3e:fa:11:0f:8e:64:6c:b8:3b:4e:c6:fe:f5:21:
                    06:21:7b:db:f3:9d:58:30:13:e2:ee:cb:f1:3b:d8:
                    ff:a3:2b:9e:b4:ce:ae:c9:49:f1:50:68:dc:22:04:
                    fb:d5:00:e5:1c:d1:8a:c4:dc:96:69:75:a1:66:f4:
                    8e:09:90:02:63:60:93:db:4f:79:11:b0:ef:c0:14:
                    b9:f2:18:88:dc:53:f3:ef:7f:da:84:f3:89:d6:d8:
                    af:58:4a:33:96:02:90:6e:ef:90:09:5c:f7:94:f4:
                    1f:26:1e:2b:11:c8:f9:62:33:64:5b:9f:44:2e:13:
                    d3:a9:bd:7b:25:34:30:7d:76:9b:5a:32:89:ff:0a:
                    92:c6:02:89:5c:8d:71:d2:d1:d1:65:7d:8c:b7:2e:
                    33:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3E:BA:A7:A6:6E:08:56:42:D4:B2:50:03:2E:14:D0:2C:CA:6A:EC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uT66p6ZuCFZC1LJQAy4U0CzKauw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c100::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:91:cb:94:ad:eb:ef:e1:20:2d:b7:ea:0f:36:1c:f0:9b:d5:
         e6:e5:ae:6f:ce:97:2a:e9:93:ff:53:9c:c9:0a:35:b6:e3:2e:
         6a:52:11:e7:0b:bb:8a:35:80:c6:99:4c:8a:ce:de:73:57:10:
         1a:62:ff:5c:d3:d4:8c:c1:8f:cf:fb:7f:6c:6c:6d:68:e2:bb:
         cd:9c:35:90:b3:11:5b:7f:96:00:72:e2:ff:cf:de:5b:b6:93:
         5d:27:dd:03:28:cc:26:75:d8:f2:86:5e:98:70:4e:d3:54:68:
         5d:c5:6e:7c:28:27:75:d1:fb:8d:c1:48:5c:40:86:3b:7e:fb:
         7b:f3:92:02:c1:85:f4:91:c1:4d:43:ff:a7:00:32:a9:42:0d:
         ca:57:70:19:0f:71:90:2c:27:38:26:06:46:5b:12:72:dd:73:
         b2:5d:1b:c1:e8:71:85:34:f9:f8:4b:fc:ab:0d:51:7a:b4:13:
         d8:bc:16:62:9a:a7:7f:ab:4a:57:c3:c6:ed:b0:e7:d7:e7:0d:
         d4:7e:a7:b5:c3:c3:e1:32:0c:c5:ff:03:ff:00:30:a8:25:9f:
         7f:3d:d9:df:a7:47:15:ca:4e:33:f5:d6:4b:1d:13:5a:70:ae:
         02:21:31:4c:36:0e:bd:1e:0d:b3:bc:e8:6a:f9:75:37:45:15:
         09:09:bd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org