Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Pu6sOhD5ogwf8oH3xTcHA8xSBo8.roa
File:                     Pu6sOhD5ogwf8oH3xTcHA8xSBo8.roa (raw, json)
Hash identifier:          Pu4fPGDNZV1JLzMIlIuaMl+7i8ikn3ZQedh7UaymEDQ=
Subject key identifier:   3E:EE:AC:3A:10:F9:A2:0C:1F:F2:81:F7:C5:37:07:03:CC:52:06:8F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       13
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Pu6sOhD5ogwf8oH3xTcHA8xSBo8.roa
Signing time:             Tue 21 Mar 2023 16:29:36 +0000
ROA not before:           Tue 21 Mar 2023 16:29:36 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:2:c90::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 21 16:29:36 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=3EEEAC3A10F9A20C1FF281F7C5370703CC52068F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:72:40:61:c1:b8:cc:2c:1e:5a:2c:90:75:c4:
                    c4:bf:6b:cc:9c:6f:c0:c0:ba:92:f7:58:0c:18:d3:
                    81:0f:15:e5:9d:08:9f:e7:49:da:c1:a1:86:fd:95:
                    b2:13:e1:33:29:21:f0:53:c5:76:81:18:c1:68:25:
                    e4:8f:51:46:98:19:9f:54:22:e8:7a:41:95:41:85:
                    4e:e6:37:a2:e9:fe:1d:33:37:8d:3d:4e:c4:8f:fa:
                    e3:11:ce:98:07:5f:12:6c:08:cf:c1:88:b0:98:2d:
                    68:90:84:17:03:72:67:76:3f:6a:19:7b:2f:72:fa:
                    13:1d:a4:38:46:b2:f5:90:4d:1c:b8:d1:bb:cf:bc:
                    93:10:6a:c7:7e:b4:7b:75:38:15:e9:6c:09:e4:7d:
                    8a:fc:53:4e:c4:3e:b9:c9:35:b3:18:85:97:78:5d:
                    67:ae:5b:41:5b:39:59:8a:3c:64:db:53:80:ad:e9:
                    b0:eb:27:26:61:70:c9:20:32:c9:b4:1b:ab:5e:00:
                    d3:9e:e9:ec:31:5d:69:21:85:d9:b6:41:79:1e:41:
                    be:8a:1b:21:80:73:fe:cb:e3:94:c0:c5:b6:f2:4e:
                    41:f0:6e:3a:1c:83:87:ad:b5:2f:ef:43:07:2a:d4:
                    96:d4:73:2f:22:d5:0e:20:e2:82:cc:34:39:58:34:
                    a4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EE:AC:3A:10:F9:A2:0C:1F:F2:81:F7:C5:37:07:03:CC:52:06:8F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Pu6sOhD5ogwf8oH3xTcHA8xSBo8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:2:c90::/44

    Signature Algorithm: sha256WithRSAEncryption
         89:cf:2a:63:1f:e6:ba:a1:fa:98:74:1e:c4:56:b9:0d:c6:2e:
         35:fc:da:79:9d:30:a2:58:d3:90:2c:4c:60:1f:30:49:68:be:
         0e:76:e4:a5:8c:b0:d6:3a:4b:5d:dd:22:fd:0d:4a:5b:d7:cc:
         f9:a0:87:87:86:9d:4d:73:09:ad:ce:be:75:ca:07:8f:cb:9e:
         45:c0:ac:91:94:b1:64:70:79:b8:bf:ff:6f:c1:45:1b:6f:cc:
         7c:f9:99:ae:d2:be:31:59:cf:dd:d6:3c:14:d0:4e:c1:cb:a2:
         7e:3f:13:47:da:c6:e6:d1:41:8e:05:cf:31:10:a3:37:32:42:
         03:8d:c3:e7:d7:7e:cf:44:dd:b2:43:5b:df:c3:cd:3b:52:49:
         5c:62:b7:f5:49:30:67:fc:6c:b1:da:a4:10:a7:b6:e0:c3:eb:
         80:a5:13:55:bf:db:9a:97:ec:06:b3:23:2b:a9:e9:22:a8:83:
         9f:39:bb:a6:72:fd:9d:b9:d9:cb:46:b3:d3:f9:65:1c:9b:fe:
         d6:46:fd:1a:bb:14:94:80:20:aa:6c:2a:20:63:41:8a:9c:eb:
         dc:86:ee:18:13:6a:00:62:e6:68:4a:11:d7:99:e7:07:7c:57:
         04:ce:38:e5:91:55:3c:8c:a9:83:82:3c:76:cd:5f:9a:c0:84:
         e0:4c:ae:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org