Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3dqCtqT1Fqw7bN7kM5g6WOVCpQU.roa
File:                     3dqCtqT1Fqw7bN7kM5g6WOVCpQU.roa (raw, json)
Hash identifier:          V6Ut0a2PKul46MreyVZ1pjqN9iR/c7WvHEQFf8tFBY8=
Subject key identifier:   DD:DA:82:B6:A4:F5:16:AC:3B:6C:DE:E4:33:98:3A:58:E5:42:A5:05
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       1B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3dqCtqT1Fqw7bN7kM5g6WOVCpQU.roa
Signing time:             Mon 27 Mar 2023 16:42:21 +0000
ROA not before:           Mon 27 Mar 2023 16:42:21 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:3e00::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 27 16:42:21 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=DDDA82B6A4F516AC3B6CDEE433983A58E542A505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:df:b2:57:80:74:31:73:95:d2:da:17:ea:ec:
                    43:d7:57:79:9b:c2:69:d7:9c:99:70:61:07:b9:67:
                    bb:31:ca:75:0c:e0:40:65:f1:e0:6d:02:eb:4d:a0:
                    52:54:d9:b7:ac:f2:c1:ad:54:80:e0:be:a7:a1:79:
                    4f:4a:27:ca:79:a7:ce:a8:b1:00:9d:aa:69:2d:55:
                    b1:e0:a1:cb:ee:a4:24:7b:af:14:39:84:16:77:94:
                    26:90:b2:8d:7e:08:9a:67:c0:63:8e:f3:7a:c4:f8:
                    22:cf:07:54:2e:11:87:1f:55:b7:cf:45:de:bd:1a:
                    d5:f3:7c:4d:f6:13:01:d9:a1:f1:7c:8c:fe:84:78:
                    fe:74:47:4a:91:ca:70:3a:3d:fc:01:c1:a8:4d:19:
                    23:66:b2:6e:e8:07:8b:ce:ff:cd:13:5e:d5:c8:04:
                    16:8a:c3:2f:be:6e:57:f8:89:e3:10:a0:34:08:42:
                    81:c6:35:a3:8b:78:da:19:26:c0:a2:4f:27:5e:27:
                    8b:d1:60:20:63:cf:9e:be:08:21:8a:da:59:ec:c4:
                    11:65:c7:2a:bd:9a:ca:b8:b2:65:2c:c9:be:73:51:
                    77:99:ed:4e:cb:b4:8b:bc:89:8d:d7:d0:ef:e4:89:
                    cf:d6:e2:60:1d:cd:e3:f7:dd:ec:db:ac:1f:26:e2:
                    6d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DA:82:B6:A4:F5:16:AC:3B:6C:DE:E4:33:98:3A:58:E5:42:A5:05
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3dqCtqT1Fqw7bN7kM5g6WOVCpQU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:3e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:ae:6b:21:85:cf:f5:66:64:95:8c:af:12:18:ab:b5:bc:db:
         54:53:1a:4f:5a:34:77:28:b8:4e:a0:1e:97:f3:07:0f:e4:0a:
         2f:ec:b7:56:2c:06:8a:3b:85:e8:73:d7:57:c3:b9:32:a1:6b:
         d1:d5:e4:6e:41:bd:fc:7d:21:cc:4a:5c:ee:67:a2:f8:4c:65:
         73:4d:bf:db:12:d6:28:3b:50:84:93:c3:3e:59:d1:da:c2:8d:
         ea:e8:02:31:76:69:40:8a:b6:87:fa:7f:3c:8d:3c:cc:43:3a:
         e8:56:ef:6b:ba:98:30:90:dd:13:a4:f0:b0:da:4d:20:2b:8a:
         08:7e:03:ed:fb:d8:af:94:a1:16:c8:ef:54:cb:07:d0:c7:75:
         21:4d:8f:71:dc:22:16:d9:1b:c7:8b:e6:e8:01:d0:2c:b2:70:
         31:e2:9c:0d:64:db:ca:9f:cb:fa:c9:6b:52:b9:2c:dc:f0:14:
         44:b0:4a:19:40:89:fe:de:da:ed:1c:8d:43:96:9f:49:f6:89:
         6a:e1:4e:bf:7d:49:0b:37:07:02:3b:f4:35:ea:1f:86:52:d6:
         c1:4d:6f:d8:46:f3:03:b5:41:dc:19:d8:60:7d:28:9b:e8:de:
         8f:11:9e:4d:61:fc:ae:e0:b7:f6:57:f0:0d:58:ae:b3:e0:b5:
         4a:8d:9b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org