Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/y5v20JZlZDgB-bPzqxFK9yEzXCA.roa
File:                     y5v20JZlZDgB-bPzqxFK9yEzXCA.roa (raw, json)
Hash identifier:          lNVL7tJjWpomn7Uk14BJxQxD+/Ee8YvFWdYjYK/WLAQ=
Subject key identifier:   CB:9B:F6:D0:96:65:64:38:01:F9:B3:F3:AB:11:4A:F7:21:33:5C:20
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       EE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/y5v20JZlZDgB-bPzqxFK9yEzXCA.roa
Signing time:             Tue 30 May 2023 16:12:25 +0000
ROA not before:           Tue 30 May 2023 16:12:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:d600::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=CB9BF6D09665643801F9B3F3AB114AF721335C20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ef:09:28:9e:58:fc:f6:5c:83:83:a3:66:c0:
                    0a:e8:3d:56:56:43:fa:cf:ed:04:a9:16:40:02:20:
                    99:9a:4d:18:c5:a3:7b:35:12:60:96:9b:00:fa:65:
                    06:c2:8c:25:a9:52:06:d6:99:64:30:96:4b:cc:67:
                    bf:5b:6f:9e:4b:44:d5:ba:91:39:3e:92:61:fb:04:
                    68:c4:b5:89:7e:fe:de:ab:29:7a:aa:5d:f4:74:0c:
                    ab:af:c2:ca:50:c9:62:86:ae:50:dc:29:a3:3b:28:
                    60:a8:61:0a:62:12:0d:c6:0a:c0:eb:0f:62:17:61:
                    93:e7:cb:57:be:6c:61:a4:9f:be:75:35:34:0a:96:
                    75:0a:a5:e0:12:58:36:0f:d7:4c:a3:c5:a4:52:53:
                    a0:c6:03:0a:24:ae:01:33:6a:31:96:54:31:be:10:
                    ed:93:3b:35:c6:1e:7e:56:78:5e:e9:c5:bc:8b:ce:
                    f8:92:ff:0c:42:52:a9:a0:b1:24:c1:f4:2c:2a:05:
                    c0:e1:e4:47:23:9c:a1:8f:a7:17:ec:43:2a:cd:14:
                    ea:31:88:9f:8e:77:e6:7c:29:17:d2:c4:25:00:cf:
                    1d:a1:46:f7:e6:3d:3c:21:fc:eb:22:5e:db:54:6b:
                    36:e9:73:ec:fe:49:fd:75:ce:f1:13:48:65:1e:f8:
                    be:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9B:F6:D0:96:65:64:38:01:F9:B3:F3:AB:11:4A:F7:21:33:5C:20
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/y5v20JZlZDgB-bPzqxFK9yEzXCA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d600::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:eb:b0:8d:c1:40:b0:bf:02:42:56:21:0a:33:2c:69:e1:a3:
         51:b5:2e:43:15:82:a0:a7:b7:f3:2c:11:37:be:34:21:13:c3:
         4e:b4:45:5b:77:12:3b:9f:01:33:8d:d0:7f:33:1c:4c:c8:ed:
         a8:ff:a1:ad:91:10:cc:9a:ff:91:f6:10:a4:cf:ce:9f:02:5c:
         e2:8d:b4:9c:97:d8:5f:56:45:c4:d0:86:0c:6d:32:5e:5c:95:
         27:d6:f5:74:f8:a9:0c:f9:17:29:45:da:25:49:1b:6b:57:35:
         f4:52:78:6b:3e:58:91:50:83:1d:b8:a4:bc:a2:77:0e:a5:b0:
         45:db:3a:23:87:e6:a3:79:09:22:3b:09:ce:2d:6d:ea:bb:ae:
         d0:01:60:a3:ca:48:6f:c1:db:1c:fb:0a:2c:db:6e:7c:2b:0a:
         79:58:d5:01:01:08:bc:85:c4:ea:a5:ce:85:ce:06:bc:7e:5f:
         5d:12:75:48:0c:c9:38:c6:db:43:ea:5a:13:62:3d:28:7b:5b:
         37:0e:0e:fe:6a:f0:e3:f4:9b:62:28:24:e7:08:39:09:ec:e4:
         43:f8:26:3f:12:f9:5a:16:f4:3e:27:9c:4c:25:68:a1:f4:8f:
         fa:57:81:97:17:46:50:c4:b7:a0:27:29:78:de:6e:c5:14:8f:
         05:b2:80:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org