Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pRV6ktXtahrRNGvVAez2pIap5W4.roa
File:                     pRV6ktXtahrRNGvVAez2pIap5W4.roa (raw, json)
Hash identifier:          JiMZt6SVHyL1mf6jfpl8jJL5PbxhS7SPoF4u8ZNbbyc=
Subject key identifier:   A5:15:7A:92:D5:ED:6A:1A:D1:34:6B:D5:01:EC:F6:A4:86:A9:E5:6E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       4E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pRV6ktXtahrRNGvVAez2pIap5W4.roa
Signing time:             Tue 30 May 2023 16:04:20 +0000
ROA not before:           Tue 30 May 2023 16:04:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9c00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A5157A92D5ED6A1AD1346BD501ECF6A486A9E56E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1e:2a:89:dc:a1:02:94:3f:bf:81:b0:a4:21:
                    ef:e1:15:13:79:8d:86:55:88:d6:4a:bf:47:05:bd:
                    54:a0:0f:72:86:c8:eb:3d:0b:ed:ce:79:ae:5b:e8:
                    be:2b:30:59:08:fa:be:b7:c5:99:44:e9:57:62:f7:
                    63:52:68:51:d6:92:31:19:1e:0c:19:7a:5b:e6:8c:
                    1b:68:eb:49:30:b1:fd:35:b5:5c:a4:f7:87:20:8a:
                    ed:b9:c3:14:21:0f:35:03:5e:dc:b1:98:a7:67:f0:
                    1c:a8:9f:13:35:2f:53:5d:13:ed:c2:1e:68:90:50:
                    e6:ef:28:0d:db:35:a6:f0:53:ef:b4:a4:de:7f:4f:
                    ca:a4:7c:0a:a3:1b:30:18:9f:cf:13:61:24:b7:c1:
                    35:55:06:96:48:d3:bb:09:81:3d:b3:6a:2b:9e:3b:
                    54:e9:0b:90:ee:44:b1:11:f6:3c:29:9f:48:31:c5:
                    9f:b8:93:50:64:29:52:61:f7:2f:fa:b6:0a:70:3c:
                    ff:42:9e:b9:c0:a1:ce:5d:bf:0e:df:bb:fd:a8:9a:
                    89:e6:9d:91:cb:96:7b:fc:fa:2a:11:25:9b:73:c7:
                    7a:01:9c:4a:16:9b:64:65:74:04:70:8c:13:7f:ca:
                    e6:02:5e:06:fc:0f:8e:67:f9:12:f3:20:9c:4b:be:
                    6f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:15:7A:92:D5:ED:6A:1A:D1:34:6B:D5:01:EC:F6:A4:86:A9:E5:6E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pRV6ktXtahrRNGvVAez2pIap5W4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:c6:b0:4c:0e:39:02:47:f4:ce:32:e1:9a:b5:d7:24:04:de:
         ed:e8:ff:81:c7:85:4d:82:f4:20:fa:8d:de:8a:13:c5:ab:46:
         24:0a:db:63:11:68:6a:58:60:c6:78:1a:6a:cc:bd:9c:17:39:
         49:69:d4:3a:ec:52:6e:1d:5e:b3:11:5a:1c:19:a9:ac:8d:0d:
         8e:ba:a0:9f:1a:39:7d:92:72:9a:2e:8b:05:77:b1:79:a7:52:
         9a:a2:00:51:78:76:cf:a7:55:50:ec:cd:31:0a:67:6d:13:52:
         81:36:c1:4a:d1:2e:bd:47:a7:05:c3:73:63:cf:8b:6f:8b:93:
         00:3c:e5:68:d4:02:fa:19:20:de:69:c5:98:0e:ca:d7:b9:3a:
         69:5a:9a:00:14:a9:08:c8:e4:b3:b9:c2:2d:3d:5f:67:30:df:
         59:6f:64:33:46:52:4d:73:53:2f:69:2c:34:f3:cf:15:9d:65:
         79:ba:e4:40:9e:09:1c:e4:1a:60:03:a3:c4:1f:47:45:54:ec:
         64:ad:3b:23:0f:74:fa:6c:ac:ec:17:50:86:46:28:1d:31:54:
         4f:0b:b3:6b:64:f7:54:98:cf:e0:fa:a4:50:43:e9:7d:c9:7c:
         ce:37:eb:a5:53:58:92:20:cc:d6:99:44:76:cb:44:40:cd:25:
         c3:5b:86:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org