Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/plh7oJsA7x7d5WjTpWGuSQzRPWk.roa
File:                     plh7oJsA7x7d5WjTpWGuSQzRPWk.roa (raw, json)
Hash identifier:          UY7G5Z2i1IfQ4KtCv7iqzdMAFy0J3BV3IF+npJkeb8g=
Subject key identifier:   A6:58:7B:A0:9B:00:EF:1E:DD:E5:68:D3:A5:61:AE:49:0C:D1:3D:69
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       011C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/plh7oJsA7x7d5WjTpWGuSQzRPWk.roa
Signing time:             Tue 30 May 2023 16:14:20 +0000
ROA not before:           Tue 30 May 2023 16:14:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f500::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:14:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A6587BA09B00EF1EDDE568D3A561AE490CD13D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:df:d4:e4:bf:42:d1:99:39:1d:3b:7f:91:81:
                    7f:4a:47:67:7b:ab:be:f7:fe:c3:e9:e8:a0:57:fb:
                    2b:78:98:fb:ff:e1:e9:1d:78:e6:e0:da:1a:91:df:
                    02:f3:e2:b4:e2:54:3d:00:a7:15:f8:08:9d:cb:a2:
                    2e:8a:28:0f:71:25:c3:22:cb:05:4a:4a:0d:ae:e3:
                    19:12:36:44:8f:b6:24:94:2b:eb:b5:a7:72:f7:5e:
                    1c:e3:ba:79:8a:5e:81:2c:c9:fa:db:1c:a3:76:73:
                    03:13:e4:bc:c9:5a:ce:0f:2e:d6:eb:5d:05:a2:96:
                    52:ee:07:6b:20:00:dc:5c:bf:68:62:24:42:a7:75:
                    dc:c1:c1:8e:01:36:df:7a:b6:de:3d:5e:d0:c3:b3:
                    ae:4f:53:38:c1:60:b3:00:47:41:84:c2:bd:61:db:
                    c6:00:58:de:2e:8e:4d:ef:1a:9d:db:e5:52:f0:bd:
                    44:79:52:72:8c:fb:3d:2c:a3:6d:8d:90:0e:be:63:
                    07:e6:e4:07:0e:aa:a7:29:07:b9:38:83:38:20:43:
                    56:54:6c:02:35:92:cb:fc:2a:79:14:38:7f:97:b7:
                    50:34:1e:69:4d:1e:74:7d:7e:df:c3:20:f2:8a:42:
                    45:34:79:62:77:56:b2:35:70:4a:8b:a5:d0:ba:22:
                    e8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:58:7B:A0:9B:00:EF:1E:DD:E5:68:D3:A5:61:AE:49:0C:D1:3D:69
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/plh7oJsA7x7d5WjTpWGuSQzRPWk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f500::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:f7:92:d3:ec:90:c0:e5:55:41:48:a6:85:2d:30:3d:48:6f:
         2c:6a:9f:e2:2a:aa:74:1f:19:14:5c:bf:d6:e8:a4:04:36:a9:
         8b:da:7a:8b:4d:9e:ea:10:a9:0f:19:9c:df:30:76:59:4d:28:
         26:4c:02:0a:7f:7d:df:9f:22:55:9e:b6:61:30:97:d3:91:72:
         f5:26:09:b6:5e:90:58:82:4d:d3:13:c9:8f:96:e6:fb:e1:0a:
         fa:19:85:fe:4e:19:0c:d8:99:67:58:16:46:69:02:2e:22:4f:
         0a:59:85:7f:8a:2b:bb:7a:42:f2:77:a2:c6:27:4a:19:46:9a:
         9e:90:cd:14:52:e9:81:60:da:7e:6c:3d:56:73:09:dd:05:94:
         21:fa:d3:57:5f:5c:9b:78:df:20:0a:ca:8e:34:f6:de:d0:5f:
         a8:15:5c:ed:79:28:05:9a:d8:d9:30:3c:47:89:27:1b:b3:91:
         c1:13:e8:d5:f0:b2:d0:1c:e8:8a:f0:fe:67:83:94:dc:12:10:
         12:4b:57:38:42:8c:53:91:e2:c0:5a:c5:90:db:41:ca:41:9e:
         e3:f0:45:a1:69:2b:fd:79:7c:f2:a9:1f:12:67:6e:d7:d0:5c:
         9a:14:86:f7:ae:d7:c4:72:60:a0:60:ab:22:b4:60:fc:3c:c8:
         54:eb:56:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org