Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MTGHb_D6F0X8paMC9aRG2hXAWgI.roa
File:                     MTGHb_D6F0X8paMC9aRG2hXAWgI.roa (raw, json)
Hash identifier:          wpElZtusUhQC/HT8AL197y1koGLhSj3bbd1H3eGvrAY=
Subject key identifier:   31:31:87:6F:F0:FA:17:45:FC:A5:A3:02:F5:A4:46:DA:15:C0:5A:02
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0191
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MTGHb_D6F0X8paMC9aRG2hXAWgI.roa
Signing time:             Tue 30 May 2023 17:34:30 +0000
ROA not before:           Tue 30 May 2023 17:34:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a900::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=3131876FF0FA1745FCA5A302F5A446DA15C05A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b9:dd:91:62:3f:fb:61:6a:6b:e3:09:83:bf:
                    51:8c:d7:84:0d:ce:cd:87:4f:e2:06:7f:ae:5b:61:
                    cd:57:72:21:00:e4:e0:4d:36:ce:d1:d4:fc:69:86:
                    6d:50:fe:95:7b:2d:6e:36:dc:29:af:54:51:25:aa:
                    06:ed:3e:ca:23:b1:2d:ea:7d:56:37:52:7a:af:5c:
                    9b:a1:18:7b:57:fc:10:72:45:4a:e9:fc:6b:08:4d:
                    81:67:03:6d:1d:a5:d8:c1:f9:ed:9e:c7:8e:e7:e5:
                    13:89:93:f8:bd:31:86:6a:ec:5c:36:6f:6e:d8:5f:
                    d3:a4:bf:71:b8:52:51:aa:5c:9d:70:68:66:bb:7c:
                    ce:45:18:73:38:fd:ae:6a:0d:05:e2:f2:72:4f:74:
                    be:6d:bb:a6:4d:46:6a:73:a4:2a:35:2f:4c:86:d6:
                    96:8d:10:fd:28:a9:f4:49:bc:b6:b7:34:94:b1:6d:
                    91:96:a4:fd:c9:d2:08:58:51:62:23:28:74:5d:5a:
                    df:de:79:11:a9:f0:d6:c5:c5:0b:3b:0f:02:73:44:
                    3d:67:2e:6c:2b:9e:55:dd:48:34:31:62:96:d2:81:
                    f3:62:03:53:11:36:e8:c5:7d:c8:d9:12:0c:20:1f:
                    a3:ea:ce:e7:73:c2:d7:b3:5f:71:66:57:1a:cd:99:
                    5d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:31:87:6F:F0:FA:17:45:FC:A5:A3:02:F5:A4:46:DA:15:C0:5A:02
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MTGHb_D6F0X8paMC9aRG2hXAWgI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a900::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:57:8e:54:d3:f9:6c:ab:04:51:a3:b3:86:4a:d8:62:38:7b:
         6e:6c:97:7d:97:27:58:be:04:7a:96:3c:9f:30:b2:42:6e:32:
         8a:70:9a:bc:be:55:81:58:d5:15:a7:eb:44:54:f7:6b:97:9b:
         7b:c1:95:33:3d:9e:5c:12:67:d6:24:c7:10:98:78:44:60:6a:
         85:7d:05:68:cd:93:16:3e:e4:fc:8c:a4:91:8b:21:17:05:fb:
         cf:39:44:dc:ce:75:22:06:b9:6a:79:55:72:65:84:16:76:9a:
         63:ef:2f:d8:1d:b5:cf:35:11:c5:1b:f7:e6:18:33:22:31:7f:
         90:9d:9d:02:b7:36:51:50:15:e8:ca:d7:72:f5:51:f8:b3:ca:
         f5:7d:67:c5:ae:9a:8a:37:4a:e2:a0:d6:f2:42:7e:6b:67:33:
         1e:c7:a0:f3:a5:5d:e2:47:e6:51:30:1a:b2:88:19:dd:b4:da:
         a2:3f:46:d2:da:f7:00:0a:2d:c6:23:04:e6:94:7c:4f:29:94:
         6a:21:d5:30:28:4f:c7:cc:ba:c0:36:e5:2a:d3:35:62:10:d3:
         7e:13:ba:9f:04:38:58:61:22:5a:93:a4:9b:ea:96:ea:89:69:
         8f:03:61:a6:fe:62:d9:d4:a4:e5:96:17:25:af:93:b5:97:68:
         52:af:d5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org