Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wWLY_0juhhO8qxqD3xD9x-eYclo.roa
File:                     wWLY_0juhhO8qxqD3xD9x-eYclo.roa (raw, json)
Hash identifier:          1kwSIKsoIn7WY20vGX68zD86vKSMzvcJSoKweAPyH3w=
Subject key identifier:   C1:62:D8:FF:48:EE:86:13:BC:AB:1A:83:DF:10:FD:C7:E7:98:72:5A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       28
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wWLY_0juhhO8qxqD3xD9x-eYclo.roa
Signing time:             Tue 30 May 2023 16:02:07 +0000
ROA not before:           Tue 30 May 2023 16:02:07 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9300::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:02:07 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=C162D8FF48EE8613BCAB1A83DF10FDC7E798725A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a4:58:4b:46:2c:1b:a8:61:99:06:d2:a6:96:
                    a5:c1:e3:c8:42:a2:d4:aa:90:e2:4a:5a:ae:cf:69:
                    0a:80:9b:b4:4a:97:33:4b:14:96:39:9e:50:12:b8:
                    60:da:50:83:b0:90:09:fb:f1:05:05:bb:66:ef:58:
                    62:21:02:dd:c7:ee:61:a0:5b:b0:5b:bf:dd:7d:04:
                    b4:10:95:34:3d:b0:4c:84:77:91:a3:08:09:de:15:
                    b5:d6:35:34:ca:2a:f6:c5:0c:81:05:f3:ff:16:79:
                    d1:79:a2:41:64:85:06:e7:69:24:8a:9e:83:8d:22:
                    f4:30:29:8b:e7:db:7a:a8:4c:1d:a4:03:85:ab:56:
                    bd:52:33:cb:a6:a6:f7:5e:39:8e:f0:98:46:5d:ec:
                    aa:27:39:93:f6:ca:5c:77:ee:4f:8d:30:07:79:94:
                    a2:5d:5b:05:d1:9b:96:67:97:c9:a9:1c:5b:a6:6d:
                    b6:65:87:01:63:1d:0a:c5:c7:a6:70:f1:e3:db:0c:
                    f0:a1:91:44:92:33:cf:70:be:05:62:8e:06:25:b1:
                    ce:9c:37:7f:5e:e2:a1:0e:88:0b:59:73:c6:d6:aa:
                    e6:e6:41:5b:32:0b:46:03:80:1d:e9:56:c6:a4:1f:
                    01:6d:cd:1f:81:35:83:25:9a:f4:77:20:80:e8:5e:
                    e0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:62:D8:FF:48:EE:86:13:BC:AB:1A:83:DF:10:FD:C7:E7:98:72:5A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wWLY_0juhhO8qxqD3xD9x-eYclo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9300::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:d8:78:2f:7e:ec:b8:60:4c:71:00:55:0c:f3:ee:12:b7:1f:
         ef:54:58:75:35:3e:15:bf:1e:a8:53:8b:68:03:66:3c:f2:24:
         8a:4b:d9:3a:82:0e:5f:86:1f:ea:f5:2f:33:66:db:6c:d9:18:
         75:3c:38:dc:c6:08:39:25:22:7f:41:9f:a4:32:b2:73:5d:fe:
         49:1c:49:93:c0:02:bd:1e:14:a3:f3:02:77:3b:28:32:8f:f5:
         34:26:87:3e:f5:c9:d0:88:da:8f:88:62:be:b7:39:f9:6b:fd:
         d6:14:3a:4c:47:3a:8c:25:ff:2c:6c:26:8b:da:76:eb:5d:be:
         5e:86:8c:db:12:d0:59:67:ba:45:c9:01:f5:bf:61:6c:58:83:
         da:3c:19:84:17:9d:15:3c:48:c4:3a:94:f2:d9:8e:71:00:ca:
         8d:2e:e7:85:3a:fa:66:b5:92:d9:03:f0:cd:83:32:99:46:37:
         23:20:12:3e:74:61:d2:f7:10:a5:89:9b:08:77:55:10:ae:93:
         67:89:13:d5:54:b3:c9:43:bf:58:54:e6:60:cd:e1:69:a4:1d:
         68:81:9d:1e:fb:a4:52:1c:48:66:11:51:b6:29:b3:32:c8:27:
         0a:61:cd:41:e1:76:95:ee:9c:dd:13:4d:a4:34:e9:84:dc:53:
         5d:b2:ca:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org