Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fhm-69raICqIrjFuX0Osru4Pw5Q.roa
File:                     fhm-69raICqIrjFuX0Osru4Pw5Q.roa (raw, json)
Hash identifier:          iQH6NiRJnQwOjUeiXXUTyYuY22qsuLC+F9wSVwpFr9E=
Subject key identifier:   7E:19:BE:EB:DA:DA:20:2A:88:AE:31:6E:5F:43:AC:AE:EE:0F:C3:94
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       7C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fhm-69raICqIrjFuX0Osru4Pw5Q.roa
Signing time:             Tue 30 May 2023 16:06:24 +0000
ROA not before:           Tue 30 May 2023 16:06:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e200::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=7E19BEEBDADA202A88AE316E5F43ACAEEE0FC394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c6:a5:1c:ab:ac:6a:9c:f9:52:10:5d:02:48:
                    1a:70:71:f7:dc:69:90:17:ad:5d:e6:34:2b:3e:1a:
                    4b:4d:0f:f9:ae:12:07:64:0d:af:d3:25:0b:7a:04:
                    fd:2f:c0:c4:30:43:65:56:f2:1d:dd:5e:99:69:09:
                    74:80:ec:e9:ad:38:09:97:7d:77:1e:67:57:e7:61:
                    7c:04:82:dd:bb:5f:56:55:2c:be:08:66:28:36:b7:
                    f6:fc:1e:26:ba:5e:24:56:8f:03:63:07:61:18:d2:
                    f9:23:d9:09:bc:86:3c:92:02:bb:09:f2:26:d4:66:
                    36:08:cc:71:75:63:dc:10:75:ad:57:d9:ad:a0:59:
                    a1:e4:ec:94:16:0e:93:c6:99:c0:7a:f6:0e:aa:b0:
                    c1:0e:19:19:23:3d:d1:34:4f:b0:b5:6a:5e:0e:2a:
                    c4:f5:5d:4d:57:7b:33:83:9d:5f:f6:44:44:de:0a:
                    b1:9d:ac:50:a3:05:75:ac:b9:a9:00:ae:c9:3f:c5:
                    1e:34:7b:1e:42:d5:47:c4:ec:8f:91:90:72:f1:99:
                    08:09:ea:f7:74:df:6c:f8:37:1e:26:76:ed:4e:73:
                    b3:1e:e1:8d:98:9b:ed:f6:07:91:d9:61:9a:5f:70:
                    81:4f:71:50:20:fe:f7:91:d2:60:1f:d8:72:42:aa:
                    55:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:19:BE:EB:DA:DA:20:2A:88:AE:31:6E:5F:43:AC:AE:EE:0F:C3:94
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fhm-69raICqIrjFuX0Osru4Pw5Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e200::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:fa:d6:57:69:32:96:ae:dd:a3:31:5d:10:34:c4:ba:c2:f8:
         21:ee:f5:3e:49:92:a9:42:2d:2f:c2:19:4e:17:69:14:da:64:
         9a:fb:5f:36:07:50:ef:e6:73:fb:9b:f2:ac:54:9d:d2:95:c9:
         24:d7:8f:8d:f9:4e:0a:95:01:d8:46:63:ec:fa:15:8e:28:55:
         9d:d9:05:f2:b4:62:b1:c5:2c:9b:84:b6:84:51:ab:c2:ea:6e:
         0b:7d:5b:21:56:24:9d:d0:e0:f2:79:54:ac:d4:b1:93:c6:f6:
         57:99:6d:1e:59:cc:d8:d4:f4:13:bc:e8:fb:59:ae:ee:a8:40:
         e6:62:71:46:07:3d:32:08:15:e6:17:ab:27:b0:a7:43:64:a7:
         48:3e:d1:3a:6e:56:52:9f:1e:d4:d4:a4:60:dd:d1:69:da:43:
         35:eb:f0:ac:30:2b:f8:44:75:77:70:6d:f2:49:09:2a:e8:90:
         49:d7:8e:03:8a:39:d8:ba:d2:ad:46:e1:99:2a:c5:cf:23:f5:
         6c:03:2a:c7:14:1f:8a:9f:31:e4:96:8e:70:7d:6f:be:54:b9:
         54:38:5d:8e:1f:ba:32:bd:db:7e:72:62:8d:91:8d:1b:39:67:
         2d:21:10:5b:7e:8c:6e:be:69:44:76:30:f7:3e:a0:d5:2b:ea:
         e8:5a:e1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org