Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0q9ov5QhxXWbL1Zo97yKGkmGcSE.roa
File:                     0q9ov5QhxXWbL1Zo97yKGkmGcSE.roa (raw, json)
Hash identifier:          edZ36J/5iIv9Sw2L4guknQF+kfsPyk9qQONSPUZGSt4=
Subject key identifier:   D2:AF:68:BF:94:21:C5:75:9B:2F:56:68:F7:BC:8A:1A:49:86:71:21
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       020E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0q9ov5QhxXWbL1Zo97yKGkmGcSE.roa
Signing time:             Tue 30 May 2023 17:40:26 +0000
ROA not before:           Tue 30 May 2023 17:40:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8c00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=D2AF68BF9421C5759B2F5668F7BC8A1A49867121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:97:fe:bf:03:b3:2e:5e:0e:4f:4f:d4:93:85:
                    45:26:09:c1:19:55:3b:94:bb:0e:77:86:fd:d9:50:
                    13:e6:87:ee:e3:67:54:d1:74:c0:62:05:d7:60:ad:
                    64:e4:0c:0f:8c:a6:13:8f:53:ce:85:35:6b:76:51:
                    11:8a:35:d5:49:c9:a6:e2:dc:15:ad:bf:8c:b4:0a:
                    f8:8e:38:e8:8f:31:87:0d:f5:d2:bc:c0:ce:88:1a:
                    c0:93:03:bd:30:90:6e:8c:bf:ea:e0:c6:22:46:a3:
                    19:08:ed:2f:9a:40:db:cc:a0:c8:ae:19:f2:a7:52:
                    94:66:e6:b2:d1:74:fa:8b:db:40:23:f9:f5:06:86:
                    5f:13:46:2e:8a:72:50:bf:58:01:fe:4d:7a:a3:eb:
                    a4:1d:ab:1b:dc:1b:66:d0:01:fc:f5:c8:fd:d0:f4:
                    2a:81:ed:0a:61:2f:7f:7c:94:3e:8b:b3:73:a6:cb:
                    17:cc:16:b1:b2:c4:b4:47:ea:30:e2:1d:04:4f:39:
                    27:01:7b:02:d8:c8:de:6c:ff:05:b2:46:1f:b3:d5:
                    11:36:8e:cc:b1:5a:f8:17:df:50:26:02:03:8c:0f:
                    af:e5:67:9e:48:9c:43:40:a8:d3:5d:0a:d5:3f:5e:
                    c7:61:73:1e:41:6e:90:17:e5:63:c5:07:2c:d6:2b:
                    73:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AF:68:BF:94:21:C5:75:9B:2F:56:68:F7:BC:8A:1A:49:86:71:21
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0q9ov5QhxXWbL1Zo97yKGkmGcSE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         15:e4:e0:a2:7a:38:e1:4c:fd:f8:7f:e6:5d:ea:59:9d:f7:d5:
         96:c6:3a:8c:9c:52:ba:00:81:f2:3d:47:d8:6c:f2:b9:76:3f:
         62:57:67:90:7e:8e:cc:d3:3b:40:23:bf:6b:19:2e:74:ac:c8:
         08:fc:e4:a1:d9:fa:07:4f:a1:a8:9e:05:a4:ce:14:9d:4a:01:
         8a:e8:43:31:09:0e:36:3c:b8:d6:78:32:04:7b:87:d0:59:eb:
         fa:ba:d8:3a:66:37:86:d6:b8:9f:e1:bc:06:5a:1d:56:8e:75:
         5e:3e:a0:db:98:70:89:bd:f7:0a:e6:ab:c6:3f:84:55:95:4b:
         97:1b:00:52:9f:cd:d3:5e:2b:9c:31:ba:c5:fa:35:a8:e2:0d:
         07:37:ff:9f:bf:aa:6d:ba:03:01:90:b8:29:61:e0:e0:61:7e:
         84:80:93:5e:de:2a:77:d6:c1:8b:0c:fa:c2:98:ee:c8:ae:c9:
         a5:9b:cf:18:d4:a3:e8:02:02:98:3f:d2:8f:c9:51:a0:ab:85:
         1d:0c:cc:9c:4e:c3:b2:12:7a:9d:bf:e7:af:7d:c4:e4:ba:ef:
         67:14:e6:57:85:a9:e8:3a:d9:12:f6:6c:dd:f7:ed:9a:91:f1:
         16:b2:90:f4:f0:13:20:10:6f:e0:1a:8d:10:62:11:46:58:c8:
         c3:e2:9c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org