Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zXxaRu6NqjKy2R0jFnD5hxeBtJE.roa
File:                     zXxaRu6NqjKy2R0jFnD5hxeBtJE.roa (raw, json)
Hash identifier:          K+r/6S1CnE5lwcd9pEq8jCvXXaApKHL5JhzdWOvUxR8=
Subject key identifier:   CD:7C:5A:46:EE:8D:AA:32:B2:D9:1D:23:16:70:F9:87:17:81:B4:91
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       46
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zXxaRu6NqjKy2R0jFnD5hxeBtJE.roa
Signing time:             Tue 30 May 2023 16:04:17 +0000
ROA not before:           Tue 30 May 2023 16:04:17 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b100::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:17 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=CD7C5A46EE8DAA32B2D91D231670F9871781B491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:75:35:53:e2:7a:30:c1:3c:e5:0e:54:d4:
                    80:c9:78:92:ef:fe:7b:16:b6:0a:4d:72:98:3a:16:
                    37:39:44:dc:8e:44:34:12:6d:6b:7c:c3:3c:f4:43:
                    da:d8:8d:66:63:e2:eb:d2:59:6f:58:91:dd:21:4b:
                    50:dc:c6:74:a6:e9:02:e9:8d:c7:24:c7:80:36:73:
                    91:da:10:b2:d2:4c:2a:2b:e5:0c:5f:67:0e:d6:e5:
                    72:11:bb:0a:8c:d8:cd:d2:87:a7:07:00:aa:4f:6a:
                    8f:6e:a2:1a:12:86:66:e5:ee:5a:93:ff:67:ea:67:
                    3f:97:04:13:93:af:78:34:e5:01:9d:45:24:50:fe:
                    d2:90:59:19:c2:1b:be:d1:6d:b6:e0:f9:a9:4e:7e:
                    e9:ff:af:7a:80:aa:42:d6:5f:55:b5:ad:5a:38:70:
                    6f:51:16:89:47:ef:9f:85:2d:c1:85:0e:b4:15:51:
                    61:33:b6:f4:df:4a:6e:c6:c8:8c:0f:cd:89:45:e6:
                    b5:0f:87:17:4b:2a:f6:37:2d:7a:30:5e:18:b6:cf:
                    22:33:6e:ad:ae:cd:72:84:83:10:8c:7d:9e:df:32:
                    e4:06:96:21:2d:de:33:3b:00:30:af:ba:d0:cc:c6:
                    ab:54:2b:d4:ef:59:71:2e:4e:14:19:45:4c:d7:11:
                    1e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7C:5A:46:EE:8D:AA:32:B2:D9:1D:23:16:70:F9:87:17:81:B4:91
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zXxaRu6NqjKy2R0jFnD5hxeBtJE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b100::/40

    Signature Algorithm: sha256WithRSAEncryption
         7f:51:b3:3b:a4:ff:31:d9:b9:a3:e2:8d:4a:6f:14:39:48:64:
         b8:67:ad:74:82:fc:87:a7:b0:11:fd:bf:30:9f:7a:b4:18:e4:
         12:44:f2:9b:94:27:c4:40:ff:68:23:a9:bf:0e:97:9d:cf:37:
         9a:8e:51:6a:f3:68:09:84:d8:ff:37:06:18:46:fa:fb:35:3c:
         3e:d2:1a:1a:30:4c:96:da:68:30:18:04:c6:79:17:b6:7e:cb:
         64:ca:20:d7:1e:c1:64:7d:8e:77:2d:35:69:bb:54:b8:b2:13:
         e5:fd:4d:b2:4f:93:32:d1:95:41:ba:6f:2f:d3:26:92:87:e0:
         37:6e:01:e5:a1:89:69:f1:2a:fe:ee:3d:e8:3e:e0:fb:68:68:
         f1:bf:7b:12:9f:39:1d:fb:70:28:27:99:f4:1f:e4:2a:4f:64:
         48:b6:78:b4:17:f2:5f:30:8e:02:dc:b1:99:28:c4:9f:d6:a1:
         fc:ab:22:43:36:e0:56:32:14:a0:f6:aa:14:a7:24:61:02:7d:
         01:17:ce:b3:d9:09:e9:0e:27:c6:02:f2:f9:54:4c:ed:f1:a5:
         fd:41:ef:0d:18:06:fd:9f:46:b1:07:7f:5d:36:9f:67:4a:52:
         38:6e:c8:0f:a0:e4:83:ec:95:84:c6:4a:55:45:15:3a:76:b3:
         56:4c:16:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org