Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vv8_pBQJcRi6EYdaXPGi6QlHQR8.roa
File:                     vv8_pBQJcRi6EYdaXPGi6QlHQR8.roa (raw, json)
Hash identifier:          EDpzlFdJ+PtLaj0kr9QIjK8kwNOFYHhqcUuEYIwoL8U=
Subject key identifier:   BE:FF:3F:A4:14:09:71:18:BA:11:87:5A:5C:F1:A2:E9:09:47:41:1F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       50
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vv8_pBQJcRi6EYdaXPGi6QlHQR8.roa
Signing time:             Tue 30 May 2023 16:04:21 +0000
ROA not before:           Tue 30 May 2023 16:04:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6a00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=BEFF3FA414097118BA11875A5CF1A2E90947411F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c1:b6:53:f4:ab:32:bc:be:1d:f3:0b:68:73:
                    fd:12:ee:cd:63:de:fa:37:99:05:d4:2e:08:b4:08:
                    c3:c3:d9:3e:1a:60:c0:d6:40:63:9c:8f:ec:9c:63:
                    cb:9b:22:9f:d8:7f:5d:63:ef:97:e7:8a:be:e2:e1:
                    aa:0d:3f:60:a8:b8:ae:36:e5:99:28:00:4c:95:3a:
                    3b:28:c7:7f:f5:59:79:be:ca:6e:44:16:46:b7:77:
                    c7:06:02:68:13:d6:99:13:e7:da:b0:b7:95:99:ad:
                    3d:53:99:e1:60:d1:62:f8:b2:ab:06:4c:2e:cc:7c:
                    5e:0b:72:6b:2d:e1:d4:fe:8d:90:c0:d9:5b:15:e7:
                    4d:44:b4:26:de:c8:55:1a:6f:8f:aa:d9:f2:30:5d:
                    62:51:cb:db:40:e0:52:19:f0:36:ad:78:be:36:8c:
                    0f:71:f3:59:fe:21:99:20:18:6e:70:d6:61:3f:da:
                    0c:d7:06:8b:58:d3:ec:11:13:86:cd:11:1d:13:97:
                    de:d4:82:da:43:99:27:b8:6a:51:84:ae:16:e4:bc:
                    e8:7c:28:75:bc:a4:ef:43:f0:9d:28:f8:35:cc:8c:
                    c0:e8:39:3e:2c:af:dc:4b:e1:57:10:88:ea:5c:36:
                    d3:0a:c1:2a:d0:e7:d6:20:34:65:f5:87:5c:57:ca:
                    19:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FF:3F:A4:14:09:71:18:BA:11:87:5A:5C:F1:A2:E9:09:47:41:1F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vv8_pBQJcRi6EYdaXPGi6QlHQR8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:42:7d:3f:42:9f:2a:85:d6:f0:1b:1f:10:ab:db:d0:10:2a:
         b6:47:b5:98:e2:57:1f:24:fd:5e:2d:e5:42:44:fa:fc:12:d3:
         96:f5:35:0c:36:fb:11:29:77:fe:54:3c:88:ec:f9:5d:41:2f:
         33:c1:ac:77:aa:c8:db:c4:9e:34:7d:da:b4:bb:eb:f2:ed:ab:
         5e:2c:95:40:21:45:80:21:c2:84:78:e4:37:02:92:5a:e1:da:
         6a:33:eb:87:b6:fc:5e:89:64:f4:0b:26:a0:8e:85:fd:2d:c2:
         11:d2:b1:67:b2:3c:c7:1b:e5:7c:f2:d0:71:f0:53:7a:df:dc:
         43:95:2d:69:70:1b:f0:43:99:39:f3:6a:ae:f2:31:ed:07:a2:
         74:ba:cd:c7:df:6b:8b:14:fb:8e:0c:81:e5:1c:d2:48:44:e1:
         e8:47:9e:b8:c8:f4:ff:b8:b7:f4:83:e7:ae:d4:3a:9c:63:b4:
         73:e5:64:46:93:26:9f:58:97:2f:0e:41:d2:ea:ff:f9:2c:80:
         67:2e:b4:60:36:ae:4a:e4:4c:5f:97:47:85:a2:b3:46:d7:75:
         93:62:9f:b5:f4:3a:9f:49:de:7a:a9:da:0a:93:05:07:e2:7b:
         9d:fe:39:89:41:ff:41:ed:a9:0c:fd:d1:78:d9:1b:00:fb:b8:
         60:4d:46:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org