Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zXSCiArtoK8IkEL3WbX0a9HY0bo.roa
File:                     zXSCiArtoK8IkEL3WbX0a9HY0bo.roa (raw, json)
Hash identifier:          ai1aaLa4KJY2n4lGTRzPC+r0wziIvK2Sj19ooZy+cMg=
Subject key identifier:   CD:74:82:88:0A:ED:A0:AF:08:90:42:F7:59:B5:F4:6B:D1:D8:D1:BA
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01AD
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zXSCiArtoK8IkEL3WbX0a9HY0bo.roa
Signing time:             Tue 30 May 2023 17:36:26 +0000
ROA not before:           Tue 30 May 2023 17:36:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=CD7482880AEDA0AF089042F759B5F46BD1D8D1BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:2f:24:33:4e:34:9e:85:ad:16:1f:cc:f9:
                    9d:4f:f8:60:6a:e5:c0:93:52:9d:45:39:86:5a:97:
                    f1:c5:7f:e5:4a:d3:6d:93:00:0f:ef:de:f2:36:f6:
                    c6:7c:89:59:2d:73:a5:a8:a7:80:71:a8:7e:57:e9:
                    cc:60:de:dd:a0:2d:bd:75:4b:ca:4e:a4:9b:b2:b3:
                    d4:a1:ff:07:23:99:1c:8a:84:96:54:f1:0c:69:33:
                    35:f1:66:7a:3b:ae:69:72:7b:86:72:be:07:04:fe:
                    0a:98:0c:70:27:b2:7a:8e:7d:cb:20:ca:66:b7:61:
                    38:01:68:04:7a:61:8a:85:44:be:3e:1a:60:2b:f3:
                    23:6c:22:86:af:4c:d6:0a:cc:f2:15:14:30:08:2d:
                    1b:ed:58:cd:53:41:41:1d:c1:eb:92:5b:2e:67:76:
                    5e:d7:44:d9:18:e3:80:e2:2d:99:f6:52:3d:94:2b:
                    34:55:00:37:e0:ef:da:4b:7b:c9:14:ca:20:15:3c:
                    4b:27:aa:e2:48:6a:84:72:51:fc:6c:b4:ad:31:c7:
                    52:7c:30:52:7e:97:df:53:7a:7a:89:b7:99:36:30:
                    1b:7b:88:ce:15:ce:e3:68:9c:0d:47:8f:5c:ae:43:
                    13:13:aa:d6:6e:89:e1:49:75:09:36:3f:8d:1a:4a:
                    f8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:74:82:88:0A:ED:A0:AF:08:90:42:F7:59:B5:F4:6B:D1:D8:D1:BA
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zXSCiArtoK8IkEL3WbX0a9HY0bo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a800::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:d8:a3:d7:b7:bd:e4:00:10:d9:8f:b9:7a:8c:9b:a3:24:e6:
         65:fd:71:c1:13:38:0d:7e:68:8d:05:ea:93:7e:c1:df:0f:98:
         5e:b8:3c:9e:2d:88:97:7f:b0:45:46:9e:fd:f5:fa:78:a2:f4:
         c2:b3:2d:5e:ad:9d:9b:e8:3a:1b:6b:9b:15:47:2b:40:fd:78:
         04:d9:df:0b:56:a4:ab:ae:dd:66:84:01:84:88:97:d1:74:cf:
         50:bb:af:b0:a0:c4:b2:8c:f1:60:82:87:30:6c:40:af:dd:e0:
         8e:a8:a7:dd:45:81:75:b4:9f:2a:e5:21:c8:e9:7b:52:f5:ef:
         f6:52:64:3e:6e:7b:78:b7:12:e1:54:f8:a0:03:4a:42:ee:36:
         a8:8c:1b:11:96:22:41:4d:9e:9a:d7:35:a7:78:d8:75:bb:4e:
         99:6c:53:7e:e9:25:2a:e2:15:d4:fa:9f:2d:03:c3:f6:ec:08:
         12:47:f8:ae:58:b3:04:67:28:7c:0b:7a:cc:5d:98:51:78:f3:
         c6:37:ab:00:c0:91:27:13:00:a2:c1:c5:61:99:bf:96:17:4b:
         4d:8f:c0:2e:e5:79:d6:4b:3f:f5:5c:22:cf:d2:23:f3:2d:35:
         0b:87:aa:a9:d9:3b:ef:29:78:9e:4b:b3:b6:cf:80:f4:e1:4c:
         11:7c:0d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org