Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/h6gL-REwnVzgBxn6AKiVxvePyfE.roa
File:                     h6gL-REwnVzgBxn6AKiVxvePyfE.roa (raw, json)
Hash identifier:          HvVybYNg2E2ZRNwos47W+QhzJSFXVmxrqigopw8hAoc=
Subject key identifier:   87:A8:0B:F9:11:30:9D:5C:E0:07:19:FA:00:A8:95:C6:F7:8F:C9:F1
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0158
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/h6gL-REwnVzgBxn6AKiVxvePyfE.roa
Signing time:             Tue 30 May 2023 17:32:29 +0000
ROA not before:           Tue 30 May 2023 17:32:29 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9c00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:29 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=87A80BF911309D5CE00719FA00A895C6F78FC9F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:99:c4:77:da:67:85:4d:7d:a6:ca:1c:1f:
                    29:ce:d0:6b:f6:da:5a:81:af:ac:7b:ec:a9:39:5c:
                    50:ae:bd:18:9d:e8:d1:fd:32:b6:5d:ac:8d:fc:77:
                    e4:56:b7:68:f7:1e:aa:73:4d:c9:9d:2a:30:c5:69:
                    64:99:8c:9e:31:df:e7:22:c1:f2:0a:c4:7f:4a:6c:
                    32:b0:24:18:6f:83:49:f9:88:17:5b:89:0c:2f:05:
                    bb:aa:9b:d0:35:70:db:01:13:db:54:d5:11:95:e9:
                    8c:21:d4:31:43:ff:e0:7b:09:37:f3:2c:70:d2:29:
                    b6:55:7b:36:12:0c:00:c5:44:8b:69:7c:64:0f:5a:
                    68:70:38:ff:91:34:8e:44:34:73:65:a8:6e:46:08:
                    08:85:f9:98:05:71:fa:30:00:3c:4f:ef:6a:e3:a3:
                    3c:f6:28:b8:a4:6f:30:76:ed:a9:0e:99:dd:84:8a:
                    e1:5e:6e:86:f0:d7:a2:e4:76:73:7b:79:c6:c3:dd:
                    7f:f4:ba:5b:38:08:ab:65:fa:7e:b5:8f:fe:bc:0c:
                    f2:a3:b6:58:23:99:8b:cc:ff:24:86:61:8a:18:03:
                    36:3a:e1:90:11:df:39:d9:99:06:ee:f9:b6:08:57:
                    ec:c7:01:0f:ae:b3:f1:92:4e:ea:5d:83:7b:18:96:
                    75:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A8:0B:F9:11:30:9D:5C:E0:07:19:FA:00:A8:95:C6:F7:8F:C9:F1
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/h6gL-REwnVzgBxn6AKiVxvePyfE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:4c:e9:83:6a:e6:c2:df:ed:48:c6:50:99:9e:21:ab:a1:42:
         a6:53:a5:2a:01:00:57:36:e8:66:80:eb:60:e6:fd:e9:dd:3d:
         f1:c4:5d:e5:37:94:b3:75:ab:a9:62:54:a7:ed:cc:b2:f6:a1:
         15:04:a3:39:32:0f:93:33:3c:4f:19:b7:d4:f7:58:67:41:3c:
         b3:7a:22:43:f9:54:9b:7a:2b:ad:3f:fd:3b:f7:83:5d:53:e7:
         a1:58:de:91:4e:41:42:d5:2e:30:d9:68:81:62:83:87:e2:3d:
         10:bd:00:59:78:0e:fb:0f:f0:65:88:ad:b0:6e:90:3a:22:4c:
         e5:8e:6e:cc:9b:ff:0b:90:60:32:59:ad:ab:d8:27:13:bb:a0:
         91:ba:1e:26:78:f0:b2:3e:5b:a4:ec:25:60:82:66:90:5d:ee:
         6f:97:b9:6f:68:38:65:ab:03:81:59:3a:c9:51:c7:90:07:d5:
         b4:f3:7e:3d:b3:6f:fe:75:c4:e8:e4:b0:77:12:67:61:61:f5:
         30:54:d5:04:f0:4a:41:26:27:f8:83:0c:f7:bb:a3:46:17:8d:
         42:fa:dd:a9:01:2c:79:e8:93:8c:fd:45:d2:ce:34:b3:b0:36:
         eb:af:87:67:96:d7:8f:84:6e:bf:69:76:b3:fc:a6:d7:ec:40:
         70:c7:3c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org