Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z2HYHZPmeBfMc-SfUB1SXxuHdgE.roa
File:                     z2HYHZPmeBfMc-SfUB1SXxuHdgE.roa (raw, json)
Hash identifier:          uEVwCTISNksReZBr4HagGrbE8+N7wn7kg9PYglcFsxA=
Subject key identifier:   CF:61:D8:1D:93:E6:78:17:CC:73:E4:9F:50:1D:52:5F:1B:87:76:01
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0201
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z2HYHZPmeBfMc-SfUB1SXxuHdgE.roa
Signing time:             Tue 30 May 2023 17:40:22 +0000
ROA not before:           Tue 30 May 2023 17:40:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:1800::/38 maxlen: 38

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=CF61D81D93E67817CC73E49F501D525F1B877601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2b:9b:61:ff:ba:68:c4:c6:40:59:64:81:bf:
                    59:75:93:21:67:3f:17:57:0a:9c:ce:2a:63:5b:b5:
                    77:48:9d:38:32:d5:aa:0b:2c:98:e1:1f:3d:91:ad:
                    5b:d8:77:7e:7f:e2:a8:15:83:a3:a6:f1:d3:f3:84:
                    8e:c4:ae:69:83:d1:76:fb:85:3f:bb:e6:f8:a9:0c:
                    00:62:59:64:41:1c:e9:fe:31:8d:eb:06:21:d9:86:
                    68:43:07:db:c3:33:6d:97:8e:a3:e5:05:80:ef:3a:
                    79:3c:0d:76:cd:ee:78:bb:09:6e:93:63:9a:ff:d1:
                    cf:15:e8:cd:f5:dd:2c:41:82:08:5c:a4:c0:14:39:
                    26:d7:74:91:13:a1:ac:2a:94:dd:18:e0:72:e8:f5:
                    8c:88:3a:19:94:10:e7:e7:a2:0d:4f:99:e9:bf:15:
                    77:c6:c8:d7:25:6b:aa:25:5e:9b:b7:f9:c0:37:70:
                    c8:c9:66:71:ac:82:a1:bc:3d:fe:81:7b:69:e4:17:
                    98:37:7f:b0:f0:37:73:30:57:7a:9b:e2:a4:46:d6:
                    98:06:87:27:00:46:d4:62:85:9d:51:d1:cf:2a:94:
                    09:d9:31:19:cb:08:29:aa:e1:df:9d:15:ff:b2:1c:
                    1e:0c:b7:e9:f5:0e:17:95:b5:76:7a:0f:9c:64:76:
                    e3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:61:D8:1D:93:E6:78:17:CC:73:E4:9F:50:1D:52:5F:1B:87:76:01
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z2HYHZPmeBfMc-SfUB1SXxuHdgE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:1800::/38

    Signature Algorithm: sha256WithRSAEncryption
         1b:11:fa:22:d3:8f:7a:7b:40:20:39:bf:b3:46:43:88:1e:b8:
         ef:ac:c7:58:ea:e5:77:6d:00:7f:78:fa:c9:62:e4:5c:95:d4:
         bf:50:20:78:2d:cc:42:28:68:a0:89:f0:05:35:28:19:d3:c3:
         7c:64:14:64:6a:5e:52:f2:cc:b2:33:b8:e8:e0:63:78:f2:6b:
         7a:aa:73:db:ee:03:7a:58:3f:aa:3a:fa:4b:d6:a6:23:8a:23:
         12:41:6f:1e:e9:ed:1a:58:8d:ef:34:bc:b4:74:d9:67:11:17:
         33:a5:46:7a:db:af:d8:0e:b0:ee:e3:65:9a:d7:d5:1a:84:ba:
         5d:9a:07:40:be:0f:66:dc:e8:18:b3:1a:8c:aa:78:dd:99:a2:
         bc:2d:7d:26:55:77:19:ed:d7:42:f2:b1:32:8e:1a:01:95:8f:
         75:bf:3b:f5:dd:8f:21:f0:8a:e5:3e:5b:3d:50:59:eb:36:f8:
         36:43:6e:66:40:06:56:e2:e1:92:9c:e3:b3:4a:a5:4b:f8:6e:
         a4:9d:b0:c4:38:47:5e:f6:c0:8e:34:f3:a9:4d:3a:ac:57:a3:
         9d:ad:56:d9:00:ca:b8:14:54:75:35:fe:dc:50:9b:47:c1:81:
         4d:9f:c7:00:a7:07:52:fa:68:ba:46:fc:08:a8:19:e4:f1:8a:
         2e:fc:10:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org