Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2uLqE30CHvbRyo_JIKpZBtKxT2Y.roa
File:                     2uLqE30CHvbRyo_JIKpZBtKxT2Y.roa (raw, json)
Hash identifier:          hJxJpcgbQabS3X+lQPBywKFqihQlZE9xlyemchv3h8s=
Subject key identifier:   DA:E2:EA:13:7D:02:1E:F6:D1:CA:8F:C9:20:AA:59:06:D2:B1:4F:66
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01DC
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2uLqE30CHvbRyo_JIKpZBtKxT2Y.roa
Signing time:             Tue 30 May 2023 17:38:27 +0000
ROA not before:           Tue 30 May 2023 17:38:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=DAE2EA137D021EF6D1CA8FC920AA5906D2B14F66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d9:96:32:ce:8b:9d:00:1d:31:c3:2a:32:dc:
                    44:3e:66:0b:13:40:64:e8:3d:72:ce:e9:dc:81:68:
                    21:f6:68:1a:ac:9a:1f:8a:2e:c7:70:ba:28:c2:69:
                    3b:e1:98:cc:6e:2f:8f:07:bd:e9:08:9e:d1:33:72:
                    12:8b:c2:57:14:95:ee:6f:dd:97:ee:c0:03:8a:d6:
                    0b:5b:73:b3:56:d0:80:f7:61:23:ac:6c:18:07:56:
                    7c:07:1d:f9:72:a7:e8:61:71:27:ee:aa:c0:ee:82:
                    5c:20:f4:5c:99:dd:da:ba:85:09:59:57:ce:62:91:
                    7f:85:40:40:eb:ac:c4:ce:0d:7d:34:fb:79:63:65:
                    bd:29:7e:89:7a:24:a1:4d:54:5b:2a:58:ab:2f:03:
                    93:53:83:81:6e:c9:c3:d5:ca:6c:40:a6:bd:72:41:
                    17:ff:20:46:05:12:74:cd:cf:e0:6c:56:05:a7:47:
                    16:29:04:59:d7:3e:34:68:52:49:a8:0f:9e:f2:a0:
                    b4:1b:28:bd:bd:1b:f1:f7:ab:4c:bd:8b:89:9b:3c:
                    0b:40:c3:09:65:cb:ad:79:86:92:0c:97:0d:2c:c7:
                    95:32:ef:9b:70:f1:1e:85:2e:a5:72:40:a6:4d:49:
                    0f:4b:8b:b6:f6:56:35:56:99:91:fc:a4:10:dc:b0:
                    78:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E2:EA:13:7D:02:1E:F6:D1:CA:8F:C9:20:AA:59:06:D2:B1:4F:66
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2uLqE30CHvbRyo_JIKpZBtKxT2Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         52:1c:fa:31:46:10:48:57:fb:30:52:e7:65:9c:e4:2a:04:ad:
         42:2e:c2:57:f1:74:e5:88:07:cd:52:88:7f:4a:08:2e:b9:e3:
         ce:c3:97:06:4e:5c:e7:1a:64:ab:11:c6:a1:ab:8a:61:f0:c8:
         c8:ac:26:13:88:41:ee:cb:a7:30:96:86:37:f6:03:64:e4:8f:
         4e:3b:97:3e:a8:c6:aa:81:bd:65:f2:33:1d:69:4c:86:cc:56:
         40:4e:7e:f3:47:05:25:a4:70:f0:a2:87:ca:d8:98:b1:37:e0:
         66:6f:4b:03:7c:28:95:9f:19:07:59:60:12:d5:72:57:87:5c:
         24:6e:34:9b:c5:4a:be:06:95:7c:c1:d7:55:fd:8a:66:4a:d4:
         58:f9:4f:71:b3:f7:70:10:55:89:bb:c2:fd:3f:52:4b:a0:4d:
         de:b0:8d:98:eb:6e:ac:58:44:03:47:31:5f:53:77:8f:8c:5c:
         1d:02:48:23:1b:6d:f3:b3:2e:33:4c:17:33:e9:de:6e:97:42:
         69:31:79:82:d2:2d:e9:24:8c:e6:f6:f9:09:7a:82:63:24:3f:
         34:32:14:46:1a:e3:d2:af:04:86:c8:1a:f7:9e:0f:ca:d7:72:
         9b:e3:54:33:59:71:da:cc:96:85:f9:16:bc:31:13:7d:93:d1:
         91:d0:7c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org