Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FG4G2-BPPQjE9FfPr4gEO5TLZhg.roa
File:                     FG4G2-BPPQjE9FfPr4gEO5TLZhg.roa (raw, json)
Hash identifier:          q6zryhLepWleBMeGqWSsEsprYObJoND198uMQm7qLqs=
Subject key identifier:   14:6E:06:DB:E0:4F:3D:08:C4:F4:57:CF:AF:88:04:3B:94:CB:66:18
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0250
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FG4G2-BPPQjE9FfPr4gEO5TLZhg.roa
Signing time:             Thu 08 Jun 2023 16:26:14 +0000
ROA not before:           Thu 08 Jun 2023 16:26:14 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:3:bfe::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun  8 16:26:14 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=146E06DBE04F3D08C4F457CFAF88043B94CB6618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7a:0a:c3:8b:a6:96:da:f2:a0:2a:30:bf:d5:
                    8d:0d:46:dc:17:e9:6b:46:36:ec:b7:50:6b:6d:19:
                    96:97:f3:57:0e:ac:b3:32:a6:20:8a:f9:b8:88:61:
                    12:bc:b7:d3:1e:9e:b5:93:73:40:8b:56:85:f4:e2:
                    b0:9f:9a:f3:06:88:b7:a4:17:01:4a:78:87:58:bf:
                    d5:1a:01:58:42:e0:c6:21:95:2c:f5:31:14:51:7a:
                    ea:df:be:dc:e4:74:75:ea:6c:2a:5f:4f:dc:3e:fd:
                    81:65:82:4f:45:4c:a8:2e:bc:87:f5:ce:d2:51:e4:
                    43:56:59:c6:b7:22:f4:f9:c5:3b:d5:9d:a2:c7:d9:
                    9c:2f:55:c1:f6:55:ed:48:0f:45:24:13:5b:f0:58:
                    39:32:ee:01:c3:cc:d0:6b:d2:07:4b:be:4c:e6:ef:
                    9c:aa:77:02:f9:4a:02:ca:d2:10:fa:45:9d:c1:a1:
                    86:b4:09:df:d5:31:66:e7:b4:03:d8:ac:4c:20:81:
                    36:b5:93:bf:19:2a:31:14:83:2e:5a:73:c7:cd:52:
                    44:fb:65:8e:60:fa:01:3d:6a:42:27:ce:14:d1:af:
                    22:b0:dc:9a:ba:a4:0a:68:69:f2:78:13:f4:ba:96:
                    d3:89:01:98:25:e6:2b:12:16:7d:16:be:21:ce:58:
                    54:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6E:06:DB:E0:4F:3D:08:C4:F4:57:CF:AF:88:04:3B:94:CB:66:18
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FG4G2-BPPQjE9FfPr4gEO5TLZhg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:3:bfe::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:c0:77:62:ce:1c:b5:73:5c:3e:30:1a:b0:2a:f9:05:99:24:
         48:e2:32:5f:92:59:0c:ee:2d:e4:99:2c:2c:7b:e0:d3:53:8c:
         53:eb:17:22:68:e8:6d:af:97:f1:21:63:1d:80:02:e2:eb:47:
         e4:64:70:c9:5d:af:c3:d1:5c:16:80:34:e8:60:6f:a7:fd:dc:
         9f:eb:12:01:88:e5:71:c4:06:f9:09:f0:e7:d7:21:87:77:84:
         5b:11:18:12:08:37:8a:1f:52:25:bb:11:c3:b9:3e:85:45:6d:
         40:9a:57:cf:85:7f:68:6f:de:d7:d2:ff:b6:bf:bc:44:84:fc:
         0b:ea:97:1d:d1:62:3b:a8:7c:b7:3f:02:1b:ae:3e:91:19:4e:
         41:6c:d9:81:36:aa:3d:7c:d0:c7:f7:69:28:a4:9d:71:65:9d:
         25:58:db:6f:68:85:45:e5:96:1b:86:3b:a9:49:27:88:aa:93:
         59:70:fa:77:7c:21:6e:0a:78:1a:c3:d4:2c:67:07:39:24:62:
         9a:8b:6c:a2:33:db:99:8e:af:d1:9e:b7:2f:9d:54:50:83:4d:
         81:75:ed:af:68:e6:d5:91:58:8a:9c:aa:e1:47:ec:b3:c4:3e:
         58:d0:ac:a1:dc:c5:62:64:57:5e:08:fc:6b:b9:33:f3:3b:19:
         65:59:ce:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org