Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/h2IVUHhYAAFNiGj4-T1tNKyEizw.roa
File:                     h2IVUHhYAAFNiGj4-T1tNKyEizw.roa (raw, json)
Hash identifier:          qG3guwmFLWlheNg3CQgirHl6hHh+cRfbDJ0Wy5FSK2k=
Subject key identifier:   87:62:15:50:78:58:00:01:4D:88:68:F8:F9:3D:6D:34:AC:84:8B:3C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       EB
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/h2IVUHhYAAFNiGj4-T1tNKyEizw.roa
Signing time:             Tue 30 May 2023 16:12:24 +0000
ROA not before:           Tue 30 May 2023 16:12:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=87621550785800014D8868F8F93D6D34AC848B3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:35:00:e9:a3:cc:e7:4c:cf:54:69:01:64:b7:
                    d4:6d:13:36:8a:2b:ea:30:92:2f:b0:7a:11:ba:7b:
                    d5:f4:cb:f2:95:1f:7b:cb:93:c9:59:97:ae:a3:ae:
                    ea:02:b7:ad:56:57:76:90:72:03:fd:2d:c9:46:25:
                    ad:61:ae:5c:53:05:7f:28:53:9c:9f:ba:79:c7:d2:
                    a9:b7:3b:08:b5:34:6f:82:31:c6:58:ad:7a:16:48:
                    1b:69:ae:75:f7:c9:40:57:a4:9f:a7:d6:a9:99:c8:
                    89:89:9b:88:93:e6:b6:e1:c4:76:75:42:51:f5:26:
                    63:28:59:9d:ff:5e:06:fb:a2:c2:6e:3d:28:10:df:
                    ea:f1:4c:d4:c4:b2:b5:4e:c6:21:bb:78:2c:59:af:
                    0e:00:96:38:04:bd:39:0e:d4:b9:83:c4:5e:d8:12:
                    2b:fb:67:15:10:6f:b1:15:70:83:46:14:db:05:5a:
                    5a:c0:23:bb:93:22:d3:cc:9a:1a:46:2c:26:11:ae:
                    29:52:78:31:9c:09:ea:df:1b:5b:5b:9f:d8:1e:16:
                    80:17:3e:1c:12:5f:c5:e8:f3:0c:58:71:98:48:87:
                    10:0d:a3:a1:f4:b9:e3:54:a8:c1:12:96:d3:e3:da:
                    9d:e7:4f:6f:be:1a:63:30:27:e4:a6:48:a4:85:66:
                    65:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:62:15:50:78:58:00:01:4D:88:68:F8:F9:3D:6D:34:AC:84:8B:3C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/h2IVUHhYAAFNiGj4-T1tNKyEizw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         b6:ef:ab:34:5a:dd:4f:6b:da:99:24:d3:bc:7a:46:6f:8f:3f:
         e1:72:aa:7b:f8:98:f1:2e:02:ba:0a:e1:7e:d0:65:cd:50:85:
         f2:32:48:7c:eb:1a:92:df:8a:60:fe:41:6c:6f:90:c4:00:9a:
         49:f2:d1:90:cb:13:9c:70:3d:74:99:11:55:c3:ec:43:c7:83:
         4a:a7:57:e6:c0:d7:ec:19:15:a9:f3:58:26:fd:eb:54:f6:6d:
         65:28:49:97:82:c0:71:ac:e6:b6:bd:0f:d9:77:68:62:3e:28:
         e0:17:64:18:46:d7:15:17:fc:7d:3f:ed:7c:e3:49:d7:c6:50:
         e2:8b:57:fd:02:63:3f:ad:49:91:d8:b1:12:ad:45:26:b1:a7:
         8b:03:31:8d:46:f2:a1:32:1b:eb:f1:8f:26:5c:6d:d8:dc:11:
         c9:d7:cf:50:52:6f:1f:eb:ad:f4:bb:3c:a7:9d:6c:26:97:13:
         72:94:53:6d:f7:f8:59:c4:15:03:2e:44:f8:d6:b6:f0:c1:12:
         b3:47:ab:21:4b:27:e2:bf:05:94:e4:b8:c1:15:a4:a7:1b:fd:
         e4:d2:2c:f5:c7:a4:e6:fd:05:6b:3f:80:e1:e8:4d:5d:91:c2:
         cb:c5:87:aa:a1:1e:be:0d:66:c3:c7:7c:12:05:be:d0:87:29:
         08:86:5b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org