Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z46PKDANFkan9XTmXSZj0e3MIBg.roa
File:                     z46PKDANFkan9XTmXSZj0e3MIBg.roa (raw, json)
Hash identifier:          hIw6NFWhBCzbOMkeT3V/xCGJFByk6hEiycJwmA9lKzg=
Subject key identifier:   CF:8E:8F:28:30:0D:16:46:A7:F5:74:E6:5D:26:63:D1:ED:CC:20:18
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01D1
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z46PKDANFkan9XTmXSZj0e3MIBg.roa
Signing time:             Tue 30 May 2023 17:38:24 +0000
ROA not before:           Tue 30 May 2023 17:38:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=CF8E8F28300D1646A7F574E65D2663D1EDCC2018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d5:f3:70:c3:4c:2d:df:c8:7c:33:7a:1f:cb:
                    fb:55:88:82:d7:56:b5:0a:29:64:b6:2b:ad:cd:dc:
                    c5:65:2a:fb:f2:56:11:de:cd:08:ee:4a:64:48:c9:
                    6b:ba:e4:83:82:b9:e1:42:e0:5c:eb:cc:7f:2f:e1:
                    b4:a5:2e:96:5c:1c:c6:c6:ec:78:9c:9e:3e:96:49:
                    27:c7:02:a8:c1:e2:55:f0:73:76:49:28:38:3f:b5:
                    a6:bb:09:47:a3:53:79:a9:45:f7:db:c0:46:7f:92:
                    3b:67:aa:82:b4:9b:4b:6e:1a:dc:cf:3a:62:88:d4:
                    b2:0a:b0:09:b4:20:5f:b5:3c:ab:ba:1a:de:49:57:
                    ac:9e:aa:44:7d:1d:24:97:c0:f3:e7:80:8e:fc:78:
                    26:35:7b:41:e8:7c:06:35:fd:1e:f3:7e:5d:9f:69:
                    1a:d1:4d:45:e8:f9:cb:10:50:a3:30:ad:be:15:fd:
                    f1:0b:7d:01:07:e0:ad:3e:3c:7f:90:5b:31:72:77:
                    8f:b2:c6:ab:0d:68:11:aa:ec:67:9c:b7:a6:ea:52:
                    e5:e8:b5:1c:5f:b4:62:b0:d9:57:1c:33:fe:a3:b5:
                    b9:b9:a2:6a:e0:40:d8:a3:d4:cc:07:11:b5:6f:fc:
                    ea:90:de:40:32:31:db:fb:a2:89:a7:d2:aa:eb:d4:
                    e3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8E:8F:28:30:0D:16:46:A7:F5:74:E6:5D:26:63:D1:ED:CC:20:18
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z46PKDANFkan9XTmXSZj0e3MIBg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:25:79:58:7d:d4:ae:b9:f4:5a:ae:e6:0b:c5:38:86:16:ce:
         a8:ec:ae:e5:1e:f9:87:6e:c4:0d:5b:8d:62:c9:c9:5c:f6:e2:
         21:b8:af:9d:f7:31:2c:87:05:f6:59:a2:67:51:0f:23:73:16:
         1c:12:df:0d:4b:03:bc:40:d6:ee:28:51:c7:0a:b8:54:36:5b:
         ad:ea:6f:73:ae:20:81:e7:c7:8b:31:71:d2:fd:ca:ee:2e:5d:
         6b:94:bc:64:2d:4c:a1:e2:c0:b2:fe:14:06:86:b0:a0:9b:19:
         9f:22:f3:18:80:81:76:b0:27:90:68:7c:83:ad:ef:a7:fd:86:
         c4:cc:22:1b:dc:d0:37:40:71:73:ff:12:da:57:e2:f4:ae:f9:
         7e:74:78:51:ee:5e:f1:df:79:15:63:03:c1:4b:5b:08:99:67:
         34:fa:39:84:c6:9e:f6:a5:7c:46:2e:7c:88:2e:32:b7:39:1e:
         c8:5e:e8:04:f0:5d:2d:7b:c0:65:a9:83:01:54:3f:93:84:47:
         a5:ed:20:76:d4:3d:4f:21:39:c6:7c:cb:34:3b:94:c4:b9:e7:
         17:ba:ce:6d:a8:88:de:23:bd:b9:75:0e:9a:c0:65:d5:3c:74:
         e7:e3:61:93:a9:e8:c4:1d:f2:2e:f3:66:1d:b0:88:49:ce:2f:
         0b:34:b7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org