Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/w2IDHpCVWCg_Md1_TWd-VIiWYwA.roa
File:                     w2IDHpCVWCg_Md1_TWd-VIiWYwA.roa (raw, json)
Hash identifier:          /0Plm28dZpXHVD5mQCyjOuEjExWMcA5rgJ2M+j3L8EM=
Subject key identifier:   C3:62:03:1E:90:95:58:28:3F:31:DD:7F:4D:67:7E:54:88:96:63:00
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0245
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/w2IDHpCVWCg_Md1_TWd-VIiWYwA.roa
Signing time:             Thu 01 Jun 2023 16:30:55 +0000
ROA not before:           Thu 01 Jun 2023 16:30:55 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:2e00::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun  1 16:30:55 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=C362031E909558283F31DD7F4D677E5488966300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:41:78:13:82:59:4b:a1:0b:3b:2e:f8:ed:
                    fa:7e:14:30:f3:30:33:ed:cc:7b:8e:c4:63:8f:4e:
                    d3:f2:35:a8:01:0f:ca:fd:ae:fc:b4:1a:15:35:69:
                    6c:4b:57:c2:d7:bd:37:e7:f7:60:46:50:6d:5d:6c:
                    b7:a1:5f:6b:94:cc:1a:91:56:d9:3e:df:05:ed:25:
                    e9:44:6e:90:41:3d:63:cd:28:9e:f2:16:14:dc:89:
                    41:f0:05:5e:67:10:ec:b2:51:ad:fa:2f:6d:bf:f8:
                    56:c0:b0:25:13:e2:16:3b:55:05:0f:52:1c:2b:d7:
                    81:fb:62:df:f3:aa:69:fb:81:97:45:7e:f1:d5:31:
                    23:7a:cd:d1:67:bd:e4:00:97:4e:32:ba:f0:dd:b0:
                    81:3f:af:d3:69:b3:60:78:46:75:2a:f1:2a:f9:a0:
                    76:83:39:54:cf:c1:f2:c4:09:96:d9:78:b8:74:d5:
                    f4:1b:4c:2d:ee:53:54:e7:b3:cc:91:ee:6a:2f:c5:
                    40:1b:39:88:bf:0f:18:86:dd:ee:99:27:ac:0f:99:
                    31:83:26:29:28:26:a8:08:97:db:72:09:ba:ff:ae:
                    c8:71:b9:e6:9a:14:24:b2:49:28:19:74:18:d8:dd:
                    4d:c1:6e:fe:ce:04:d6:f7:d9:a3:4d:87:68:92:f7:
                    38:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:62:03:1E:90:95:58:28:3F:31:DD:7F:4D:67:7E:54:88:96:63:00
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/w2IDHpCVWCg_Md1_TWd-VIiWYwA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:2e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:58:fb:a0:68:05:d5:c2:c3:cf:21:4b:d4:f3:df:e2:54:9a:
         b8:17:3a:8c:d5:6f:3a:a8:15:32:4c:0e:68:4b:85:ae:42:6d:
         46:24:cd:85:7d:b7:1e:58:9f:5d:9b:42:ff:5f:ce:a4:18:16:
         ea:5f:85:b1:a2:36:dd:9f:9d:ad:b9:83:83:33:ee:09:82:02:
         63:7f:4c:92:7e:f0:1c:0b:a0:c3:9c:75:40:d6:0a:33:af:ba:
         22:f4:a2:f5:10:90:59:99:68:a3:99:3e:6f:8c:a2:41:8f:35:
         b5:f3:e5:c6:de:b1:1a:66:a5:f1:c4:db:77:f6:3f:06:98:7f:
         46:24:02:46:5d:98:6a:7c:24:d8:f4:83:58:2a:08:45:95:34:
         64:fa:bf:37:7a:f2:d7:e4:b7:b4:4c:1b:ed:8d:51:1c:9e:c6:
         3e:b6:e7:01:1b:a7:f9:2d:91:b0:cb:c1:09:d7:aa:26:e4:33:
         4b:d8:d7:38:8e:65:73:4f:42:7d:74:c6:57:0d:48:fc:3c:72:
         c4:01:74:8a:c5:34:98:af:8f:6b:22:17:df:26:f0:37:a6:12:
         95:9d:56:d0:d5:0b:6c:b2:b5:7d:d3:da:cf:0f:7a:89:ad:61:
         a9:04:36:dd:13:8a:6f:3d:5d:03:35:47:c5:07:df:07:dd:bb:
         16:f3:46:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org