Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1eE4Zj_cPQs_bhPPHklI8qSceTY.roa
File:                     1eE4Zj_cPQs_bhPPHklI8qSceTY.roa (raw, json)
Hash identifier:          cTiT035fz9yitA6CiTyVtnbZ5CC7BNw5wvxB9t+Ih7k=
Subject key identifier:   D5:E1:38:66:3F:DC:3D:0B:3F:6E:13:CF:1E:49:48:F2:A4:9C:79:36
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01A3
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1eE4Zj_cPQs_bhPPHklI8qSceTY.roa
Signing time:             Tue 30 May 2023 17:36:22 +0000
ROA not before:           Tue 30 May 2023 17:36:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1700::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=D5E138663FDC3D0B3F6E13CF1E4948F2A49C7936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fd:5c:e4:0d:c2:a6:81:fb:5c:27:15:4f:3e:
                    95:59:c8:27:19:45:f0:65:db:0a:7e:77:58:51:4c:
                    63:19:ee:1f:1c:c8:ac:aa:e0:2c:c6:d9:c3:11:0f:
                    98:20:a5:fe:c4:de:e3:66:cc:fd:9b:e3:cd:f8:78:
                    a0:87:b6:fd:e3:46:be:ac:12:8f:df:4c:f4:5f:2d:
                    9c:69:09:4e:01:2a:83:90:ab:73:30:cb:a9:41:93:
                    5d:a4:9d:84:48:a1:c2:46:2c:1b:59:52:da:13:cf:
                    cb:de:5f:84:88:bc:61:6e:9b:c6:9d:8f:94:a1:d2:
                    9d:5a:da:35:fd:72:02:ba:00:c9:0c:43:a2:a1:ba:
                    e3:77:fa:b8:50:65:12:e4:f2:b9:93:ca:23:b8:a6:
                    30:21:9f:60:ed:db:ca:b4:53:e4:3c:57:9b:49:ee:
                    90:73:03:45:15:2d:2f:80:8f:49:28:3e:de:e5:1e:
                    11:4e:b6:12:c1:b9:49:fd:21:05:63:36:4d:9b:04:
                    34:d8:b2:f2:34:2a:b7:26:10:aa:65:77:e0:12:e6:
                    4e:11:04:59:56:5d:b6:a6:02:31:f2:5a:78:cf:7b:
                    be:2e:4d:ad:2a:54:5c:7f:09:b4:b0:45:c7:5d:44:
                    09:49:9c:92:7f:1f:af:f8:08:2f:02:30:46:5f:5b:
                    12:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E1:38:66:3F:DC:3D:0B:3F:6E:13:CF:1E:49:48:F2:A4:9C:79:36
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1eE4Zj_cPQs_bhPPHklI8qSceTY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         61:81:e1:c5:ce:41:f9:7b:b5:38:96:e8:06:32:5c:7f:b4:f2:
         b2:7c:2c:19:1e:cb:b3:96:08:c5:61:12:02:b7:fd:cc:85:c3:
         8d:1d:7c:9d:0e:19:5e:f1:93:91:41:3e:90:aa:90:44:78:80:
         fa:ef:98:8a:9a:7c:74:51:f1:d5:4e:bf:a1:54:29:40:d0:e2:
         1b:8b:20:0e:26:df:b1:8b:56:c0:f7:4f:0a:cf:dd:a5:6c:1e:
         e3:87:ad:fb:a3:80:38:24:ef:dc:4d:a7:81:42:d4:08:48:f4:
         b1:6e:8f:36:a5:aa:58:72:ea:e0:14:4c:8c:17:19:cf:8b:db:
         69:f3:77:ee:df:20:bc:37:9e:62:6c:55:78:21:c6:85:80:bd:
         0b:ab:5a:6b:53:7e:04:87:f8:ac:33:9c:b7:37:a9:55:cb:46:
         0a:db:51:6b:8a:fc:5e:43:2c:b9:16:9b:5c:55:2e:e2:ae:35:
         50:8f:d1:d1:ad:6c:6d:4f:dd:4c:fe:53:23:21:b0:7a:fb:28:
         70:c1:81:51:0e:67:1e:e7:43:2a:a8:dd:dc:92:d0:20:32:b6:
         b2:29:f1:e8:b9:17:13:97:99:84:7a:45:41:64:de:74:96:36:
         7c:d7:8b:14:a6:ce:56:b0:9c:6b:8a:6c:b8:3f:41:9e:ac:2c:
         44:9c:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org