Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/P6uqRQxbYxC89r4P7jqPogdiVY8.roa
File:                     P6uqRQxbYxC89r4P7jqPogdiVY8.roa (raw, json)
Hash identifier:          0Ie6LgVd8bzB/HAio/kvaGtNE0v5qk3aoL3Birhfp9U=
Subject key identifier:   3F:AB:AA:45:0C:5B:63:10:BC:F6:BE:0F:EE:3A:8F:A2:07:62:55:8F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       67
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/P6uqRQxbYxC89r4P7jqPogdiVY8.roa
Signing time:             Tue 30 May 2023 16:06:16 +0000
ROA not before:           Tue 30 May 2023 16:06:16 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7700::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:16 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=3FABAA450C5B6310BCF6BE0FEE3A8FA20762558F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:43:d1:ee:72:04:54:85:59:96:83:ec:66:26:
                    9d:a5:30:ea:7f:0b:11:d8:3a:4f:c5:21:66:38:d0:
                    8d:48:b0:00:f1:c1:72:bf:6f:eb:29:df:30:e7:5f:
                    07:4c:4b:d6:8a:3b:26:90:de:62:ee:b4:b9:2c:2d:
                    63:97:c2:b9:fd:85:97:fa:aa:13:22:af:ba:15:a0:
                    04:32:ce:3d:68:91:d2:68:e0:1a:ca:97:2f:b3:a1:
                    0e:40:bd:86:e7:98:49:40:95:ad:f5:f4:67:c7:72:
                    fb:ad:22:7b:91:37:6a:d1:e4:f4:54:9b:dc:72:00:
                    17:06:9c:1d:f7:29:96:37:36:04:5e:a3:f6:f0:59:
                    5f:c9:c3:14:ef:5c:62:8d:d3:75:c7:7c:e8:4b:a2:
                    50:27:b6:e7:4d:80:34:88:ff:c9:cc:c3:44:79:61:
                    75:d8:fd:51:d0:53:0e:a1:06:52:cf:31:26:49:f4:
                    4d:0c:f0:84:59:85:3f:bd:f1:77:ca:d7:87:95:a8:
                    83:dd:56:f3:9d:1a:d6:01:bb:e3:01:a3:66:1a:74:
                    53:92:30:0d:01:82:31:43:bf:35:49:2f:c6:dc:1f:
                    7f:12:df:c5:5c:d5:e3:a2:a0:0a:23:77:b1:bd:46:
                    64:da:78:f0:8f:69:68:37:c3:6e:cb:31:3d:f0:b3:
                    fb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AB:AA:45:0C:5B:63:10:BC:F6:BE:0F:EE:3A:8F:A2:07:62:55:8F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/P6uqRQxbYxC89r4P7jqPogdiVY8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7700::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:4e:d5:e3:c1:fa:b1:fc:99:db:05:0a:09:35:bb:8e:35:e3:
         b4:51:e3:06:7a:83:c6:2f:29:03:ab:fd:46:4f:b5:a3:8a:89:
         69:2c:77:59:df:52:9a:9d:79:52:6e:2e:7e:a6:ab:c2:26:b1:
         26:cf:c6:f3:30:47:99:7d:c2:fb:c5:cb:89:e0:a0:d4:88:cf:
         5b:79:be:b0:9b:ee:7e:21:3f:05:24:50:bc:94:63:07:f1:56:
         3b:c8:04:95:c4:97:ba:fc:7a:f6:61:81:04:4a:c5:86:9d:bc:
         b6:84:9f:80:cd:1b:12:73:57:06:0d:82:4e:8f:cd:ad:d0:bd:
         58:25:8e:41:e4:8f:a3:66:5a:b6:e5:0c:cc:12:1a:07:bf:c9:
         a8:21:91:70:60:21:1b:61:1e:19:f1:fd:58:70:66:ae:69:c1:
         a7:cd:e8:5b:66:cb:76:39:41:31:e7:44:e0:14:0f:51:65:ac:
         9b:c6:b7:39:6a:b9:7e:bf:2b:3c:7e:e1:d7:fd:94:52:93:7f:
         4f:c8:17:24:59:84:44:c6:62:50:2d:88:93:42:fc:24:7a:94:
         bd:aa:fa:5e:5b:d9:8b:c0:f2:aa:01:94:88:5d:8e:f9:6e:c2:
         7d:4d:77:10:f3:0a:7e:7e:c3:3b:10:4a:33:27:8c:fc:53:12:
         32:61:f6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org