Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/16cw0pPqTaycpkeB7SdDHXnpNNQ.roa
File:                     16cw0pPqTaycpkeB7SdDHXnpNNQ.roa (raw, json)
Hash identifier:          LbYXJIZhf1qyzX9I5M8ws56rhhdDYWqF5H97zXRSUH0=
Subject key identifier:   D7:A7:30:D2:93:EA:4D:AC:9C:A6:47:81:ED:27:43:1D:79:E9:34:D4
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01FD
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/16cw0pPqTaycpkeB7SdDHXnpNNQ.roa
Signing time:             Tue 30 May 2023 17:40:21 +0000
ROA not before:           Tue 30 May 2023 17:40:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5100::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=D7A730D293EA4DAC9CA64781ED27431D79E934D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ab:fc:c9:58:ca:0d:bd:6d:e7:2e:78:b2:0a:
                    f1:30:80:21:8d:67:0f:c0:17:57:12:f9:e9:54:6f:
                    ea:15:69:f7:4d:17:27:c5:4e:18:27:7b:21:66:17:
                    33:af:43:bc:96:3e:36:f1:8f:98:6c:d9:17:d6:c4:
                    4c:04:6d:3e:34:eb:19:62:a1:65:8f:ab:0e:10:d9:
                    d9:65:d7:2f:6c:be:67:ce:ea:08:30:0e:16:72:26:
                    ab:d0:64:95:5e:72:7a:93:18:da:35:38:6c:15:14:
                    19:ae:bb:22:94:c2:b0:e8:9c:1b:23:dd:4e:3e:27:
                    03:1d:33:85:0e:cb:25:ec:9c:2a:cf:4f:73:03:9c:
                    60:96:65:59:ac:f2:bd:4a:69:8b:c2:a6:cc:47:91:
                    d2:22:94:a5:a0:d8:0d:02:fc:2c:e8:d9:25:28:15:
                    9e:28:72:ad:20:9a:e8:ab:c9:aa:5e:e7:58:f8:32:
                    de:62:bb:6d:79:99:ac:85:5e:43:8a:bc:f7:bb:d4:
                    a5:2f:80:dd:a5:5e:4c:29:d8:ec:f1:78:eb:c6:87:
                    74:ec:de:24:d2:20:a8:20:f2:0c:aa:7b:ac:45:91:
                    7b:2e:08:2e:2e:0c:56:d3:07:e4:74:73:d8:ed:3f:
                    4a:fb:4b:b5:3e:f1:be:52:39:19:6d:ff:32:e7:36:
                    3e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A7:30:D2:93:EA:4D:AC:9C:A6:47:81:ED:27:43:1D:79:E9:34:D4
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/16cw0pPqTaycpkeB7SdDHXnpNNQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5100::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:f8:db:83:53:2f:e1:cc:e7:42:2b:c4:20:fb:af:c4:ac:fb:
         b7:e3:7b:d6:a0:d0:1a:15:96:4d:b5:e9:fc:2b:a5:bd:06:ee:
         4d:de:dc:a5:b8:68:f7:22:25:1f:dc:c7:72:b1:fd:b9:95:0e:
         cd:94:6d:b6:3f:cd:70:91:75:00:3a:8c:12:aa:8b:80:4e:c1:
         86:7a:0c:50:39:d1:ff:63:e2:91:e7:56:97:2e:99:70:6e:c7:
         58:70:c8:ae:fd:0f:6b:0d:a5:3c:b4:f9:93:22:d4:d7:d1:33:
         78:68:11:7c:f5:c0:1c:8c:a1:d8:d4:3b:ce:8d:51:ba:35:9f:
         0d:ac:f5:ef:c0:fc:29:e5:61:4b:71:bc:1c:a4:cc:f2:f2:6b:
         23:0f:b0:f4:4e:3c:9e:2e:09:81:f6:90:55:c8:7a:0a:bd:d0:
         15:08:53:f3:db:c5:07:39:64:82:38:92:67:69:48:06:a1:75:
         77:bc:09:5e:1c:3f:86:52:ed:3f:bd:c2:b0:b5:6c:04:4b:0e:
         1c:bd:9a:fa:7f:27:85:3d:f2:ee:37:b4:60:5c:4d:3b:a2:5b:
         0f:52:83:d2:b4:9e:b0:77:10:53:f3:8c:49:23:3a:25:c3:d4:
         d3:39:4b:a4:4c:a3:a3:6e:51:aa:97:f2:c9:5b:d6:84:5f:e1:
         ec:b9:5e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org