Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/PpulEFXWTmUi-76TtNOyFprrvPg.roa
File:                     PpulEFXWTmUi-76TtNOyFprrvPg.roa (raw, json)
Hash identifier:          2pv8EgVROL4msjXc5v4rolWmE0tMCEy1W4h6kciCQNw=
Subject key identifier:   3E:9B:A5:10:55:D6:4E:65:22:FB:BE:93:B4:D3:B2:16:9A:EB:BC:F8
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0247
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/PpulEFXWTmUi-76TtNOyFprrvPg.roa
Signing time:             Thu 01 Jun 2023 16:30:55 +0000
ROA not before:           Thu 01 Jun 2023 16:30:55 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:2800::/38 maxlen: 38

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun  1 16:30:55 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=3E9BA51055D64E6522FBBE93B4D3B2169AEBBCF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:28:97:dc:56:22:13:0c:4a:2a:42:de:ef:3d:
                    3f:f8:24:6e:83:94:33:67:08:d2:cf:0f:02:43:23:
                    fb:95:40:ad:37:d1:38:7b:ae:e6:97:76:d0:63:82:
                    de:99:41:8e:33:be:82:d9:38:14:d8:69:61:1d:b1:
                    22:5d:3f:b7:1a:37:91:bc:48:fc:69:bd:06:8a:ad:
                    8d:f8:0d:bc:df:7e:92:74:dd:84:0f:99:85:76:76:
                    bc:ee:3b:54:11:44:36:d5:22:b6:c0:32:a7:6c:27:
                    de:11:05:6b:e0:8b:55:f2:c6:bc:74:83:a1:14:fc:
                    0c:1d:32:fd:01:3a:f1:59:d4:e0:0f:dd:ec:54:8e:
                    43:e5:90:8a:0a:66:19:3d:d3:36:3b:a9:f0:a2:1f:
                    9a:1c:b0:71:52:65:a3:1c:fd:f4:82:ca:47:a9:c6:
                    00:eb:a0:f1:0a:d1:9f:62:65:b4:3a:88:71:70:89:
                    36:af:c5:67:7d:7f:f7:06:e3:bd:8c:f9:9d:71:c8:
                    02:77:55:1d:d0:20:9b:23:12:eb:48:b0:5c:2b:bb:
                    5e:d7:cb:7f:c0:8e:91:f1:e1:8e:e7:12:b1:62:f1:
                    05:9f:63:01:6b:0d:2c:eb:dd:bf:d8:4e:99:83:1e:
                    d0:a0:bc:71:cb:e4:59:b0:bf:68:2a:ef:b4:46:aa:
                    55:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9B:A5:10:55:D6:4E:65:22:FB:BE:93:B4:D3:B2:16:9A:EB:BC:F8
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/PpulEFXWTmUi-76TtNOyFprrvPg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:2800::/38

    Signature Algorithm: sha256WithRSAEncryption
         b6:df:aa:10:a9:18:8b:e3:47:f6:93:1e:e4:b2:be:43:6c:4a:
         20:74:2d:76:4b:1a:62:65:60:41:6d:bb:91:41:ab:a7:9e:2d:
         8a:ed:42:8f:d8:97:a9:d3:30:1a:f9:54:7f:70:7d:0d:6b:0e:
         54:ae:d6:15:f1:29:c5:2d:db:c4:aa:49:2d:18:42:f5:92:4b:
         a6:0e:7a:80:79:ce:2e:c2:de:01:aa:53:90:a6:b3:87:80:37:
         23:d5:2c:ae:7e:e5:5f:c6:41:23:2d:67:50:43:47:ba:2c:5c:
         20:83:97:56:93:d9:39:ef:bb:cd:81:c1:0e:6f:0e:79:e8:58:
         a8:0f:12:92:24:c1:45:99:d5:38:e8:35:a8:07:93:28:7d:44:
         3c:19:55:97:e8:08:a8:d5:d0:65:82:69:1c:55:3a:98:64:0a:
         00:11:c5:9e:77:52:b2:79:47:8e:b3:96:53:28:ee:54:76:dc:
         09:af:7e:54:02:f9:5f:d9:e9:0a:30:76:42:d4:0f:64:ee:03:
         bb:d1:b4:44:94:3c:1f:17:b7:2d:a4:0b:e2:63:06:1f:67:38:
         39:e8:58:b2:68:23:98:bb:c0:f8:c6:4a:ca:55:e9:82:08:dd:
         d4:4e:a7:a2:96:a3:24:05:61:96:84:34:21:33:b3:e6:4b:a3:
         66:77:1c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org