Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-y5xt3zaZ4nbRRTiqU9J--S9Ugg.roa
File:                     -y5xt3zaZ4nbRRTiqU9J--S9Ugg.roa (raw, json)
Hash identifier:          8SpRc2JBUe1oCgZrL2vVE8Im/2l3XzBDqGhNXhPBKlA=
Subject key identifier:   FB:2E:71:B7:7C:DA:67:89:DB:45:14:E2:A9:4F:49:FB:E4:BD:52:08
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       FB
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-y5xt3zaZ4nbRRTiqU9J--S9Ugg.roa
Signing time:             Tue 30 May 2023 16:12:30 +0000
ROA not before:           Tue 30 May 2023 16:12:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c600::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=FB2E71B77CDA6789DB4514E2A94F49FBE4BD5208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9a:0c:23:50:d7:eb:e1:15:20:48:72:52:d0:
                    3f:90:56:f5:c8:73:07:de:42:ac:c2:b3:22:56:75:
                    b1:3d:ff:12:f4:e7:d6:8c:e6:19:b3:1b:98:19:b1:
                    8c:22:ed:a7:7c:be:3c:05:c1:b3:c9:88:e7:d7:e3:
                    14:48:d0:ff:11:73:f4:93:bb:0d:21:ba:17:99:96:
                    a7:f8:e9:92:91:06:57:d1:b1:86:3a:a5:bb:25:5b:
                    c1:c8:8f:2c:03:f7:a2:5c:38:ad:a7:0c:24:d5:27:
                    75:79:df:73:8f:7d:38:cc:6e:bd:18:de:b0:73:32:
                    4a:1d:4f:91:b9:14:86:7c:f4:f1:18:a7:f7:f9:a6:
                    b6:2a:50:47:a8:1e:c5:5f:18:56:ee:b0:62:c3:88:
                    78:6f:ac:96:53:11:ed:7f:39:38:e7:35:1f:bb:32:
                    b0:e2:3a:35:62:09:4e:8d:db:9d:68:d7:4f:41:8a:
                    cc:34:58:29:37:c8:3a:29:21:46:59:ac:ef:e7:4a:
                    d8:50:f8:15:b5:12:84:f9:23:f0:18:c1:b9:f4:18:
                    fd:aa:58:d8:06:71:29:a2:f0:cf:e9:9a:e6:81:7a:
                    13:c1:9f:b8:f6:f5:c9:69:ec:e3:73:a2:99:b7:62:
                    8c:15:82:0d:d3:c5:10:2e:65:89:f3:94:75:39:4f:
                    bc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2E:71:B7:7C:DA:67:89:DB:45:14:E2:A9:4F:49:FB:E4:BD:52:08
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-y5xt3zaZ4nbRRTiqU9J--S9Ugg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c600::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:eb:8f:84:cf:a3:7d:74:8f:8d:3f:3a:4c:56:3e:09:76:1c:
         3a:17:96:f9:9b:db:fd:7f:4d:5d:3a:2d:c0:97:68:97:31:9d:
         99:f3:6e:03:d1:5c:de:c4:06:8d:14:4a:d5:98:bc:26:44:3c:
         94:ce:d0:03:30:93:0f:08:3c:40:19:b4:8c:51:af:d0:d9:5f:
         7f:b2:9c:37:92:7a:a3:4e:70:fd:30:f1:47:cb:8a:27:98:8f:
         59:1d:e6:2a:2e:90:7d:cb:ee:2d:0a:0c:53:aa:3c:a7:5d:33:
         8b:4b:d9:b9:f3:bf:c0:59:f3:57:bc:8b:cd:56:3c:cf:99:7b:
         f7:51:fc:be:c2:b4:7c:2b:b1:16:0e:fa:df:3a:26:33:2b:f7:
         58:65:8c:d7:c2:73:13:84:87:40:e2:ea:b9:0e:10:3a:98:fb:
         51:4c:8d:02:da:ac:ce:f5:02:0a:89:21:86:87:32:cc:de:94:
         c2:aa:9a:16:89:a4:2d:3c:f6:be:b3:eb:94:02:cc:15:da:21:
         97:3c:d8:77:0d:15:91:bf:c5:ee:5d:aa:17:a5:c6:ce:1d:d0:
         c3:26:29:17:65:ff:49:c5:df:7d:54:ed:df:a2:dd:16:1f:d3:
         2a:c7:d9:4d:fc:09:66:18:4a:4d:d5:ed:46:7b:6d:f5:05:ac:
         b1:28:f2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org