Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LhIwPwDQ2dQSNMOXeZgCwVIAPoE.roa
File:                     LhIwPwDQ2dQSNMOXeZgCwVIAPoE.roa (raw, json)
Hash identifier:          I0REsily5WnDwZ++Khq6f/OjA5D11Xee3C559zcze7s=
Subject key identifier:   2E:12:30:3F:00:D0:D9:D4:12:34:C3:97:79:98:02:C1:52:00:3E:81
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       C4
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LhIwPwDQ2dQSNMOXeZgCwVIAPoE.roa
Signing time:             Tue 30 May 2023 16:10:15 +0000
ROA not before:           Tue 30 May 2023 16:10:15 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8300::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:15 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=2E12303F00D0D9D41234C397799802C152003E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5e:c8:59:d8:8f:40:91:81:5c:df:1e:34:d0:
                    7e:2a:ae:08:c3:dc:b3:a1:e6:b2:19:d8:3e:37:0c:
                    ea:39:36:73:41:df:9d:40:62:e6:2d:db:01:55:1e:
                    41:52:bb:59:09:e3:fd:ab:70:b6:55:76:4e:10:e7:
                    10:c6:66:23:8e:05:3c:11:7b:6b:d6:e0:cd:78:81:
                    c2:d0:65:7b:63:46:05:87:0b:60:dc:46:2c:a7:aa:
                    d7:b9:a1:1e:6e:75:a2:81:3e:01:1c:8f:a6:28:42:
                    31:88:09:ef:2c:ef:04:c3:e8:d8:30:8a:f6:26:02:
                    6e:24:24:46:fa:6b:6a:0b:f6:ce:70:55:93:33:ed:
                    8e:34:36:1b:37:a0:58:8a:94:0c:17:ac:43:58:b4:
                    3b:56:8d:16:da:9f:98:05:bf:eb:89:d4:0c:90:f5:
                    6e:31:6e:aa:fa:2a:21:d4:07:fe:6d:1b:67:e0:ee:
                    4e:ff:43:2f:27:88:c1:f8:0e:41:5b:5b:ba:b1:da:
                    f9:e5:ae:2c:a7:98:c4:1a:0e:5a:c6:e3:c3:96:3a:
                    9e:60:89:5b:4f:c8:eb:d4:70:a2:16:b2:76:77:e3:
                    92:75:f3:2c:ee:b3:2c:58:b2:60:88:3e:78:b1:18:
                    9b:b5:f2:d8:f0:de:fc:0a:2e:81:11:b7:86:30:bc:
                    75:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:12:30:3F:00:D0:D9:D4:12:34:C3:97:79:98:02:C1:52:00:3E:81
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LhIwPwDQ2dQSNMOXeZgCwVIAPoE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:1b:de:e8:f1:cc:21:90:40:40:3e:c9:95:7a:70:33:bd:b4:
         6e:a9:7d:84:ec:86:f9:bd:4c:3c:11:f9:be:ce:fe:2c:db:e3:
         12:68:72:cc:05:fb:76:42:60:fc:c6:de:92:06:2a:2b:0a:10:
         5f:d9:e2:5c:45:1c:6d:8e:19:b5:a2:e1:cf:82:ae:e0:24:f0:
         39:a6:0a:05:12:81:ba:2e:99:2d:22:d6:26:21:a9:44:12:2c:
         78:ab:e9:d5:2c:45:f1:12:20:f1:78:f7:a8:fa:67:2c:7a:1b:
         47:11:4c:f3:33:1c:fe:de:a4:ec:d4:4e:0d:70:dd:bd:29:4d:
         fb:66:9e:26:fd:e4:71:44:0c:b7:18:90:77:70:72:ca:10:e0:
         e8:b6:b0:25:38:87:b4:85:ed:ec:de:19:e0:a0:ea:5e:f2:4f:
         1c:32:bd:21:00:76:02:6e:a7:a8:a6:75:27:cb:cb:20:9f:37:
         67:e3:96:62:b4:8e:90:bd:7a:47:cc:7e:b5:0f:de:cf:e9:0e:
         91:d0:33:6c:1d:21:0c:d0:62:4c:bc:d8:cc:84:49:05:4e:14:
         6e:66:0e:ad:0a:c9:f0:e2:54:63:a0:22:87:cd:16:1b:43:c3:
         fa:c0:8d:56:b0:85:bc:f3:c7:1e:6f:cd:7d:29:c1:51:ef:d4:
         58:c1:19:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org