Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3yalEwNCPScVunB0WHRM9FiKb6w.roa
File:                     3yalEwNCPScVunB0WHRM9FiKb6w.roa (raw, json)
Hash identifier:          wTlrW8+SmqlEOHxo3I7+VwyC2QwgF+5bBG3N2NtMfD4=
Subject key identifier:   DF:26:A5:13:03:42:3D:27:15:BA:70:74:58:74:4C:F4:58:8A:6F:AC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       24
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3yalEwNCPScVunB0WHRM9FiKb6w.roa
Signing time:             Tue 30 May 2023 16:02:06 +0000
ROA not before:           Tue 30 May 2023 16:02:06 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3600::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:02:06 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=DF26A51303423D2715BA707458744CF4588A6FAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:fc:c4:24:9b:50:f4:91:67:99:e8:78:65:
                    c7:e4:94:b2:fe:ef:2e:a0:1c:a9:e9:24:08:5b:15:
                    fc:00:a1:3c:dd:62:f3:99:43:ba:25:07:32:f2:a7:
                    7f:27:07:b7:c2:43:af:d2:e7:50:2e:b9:45:2f:1b:
                    c3:8c:35:e5:81:39:5e:fd:8c:ce:50:b8:50:0e:99:
                    88:bd:71:e5:a2:87:65:98:ee:ed:da:22:e2:ab:9f:
                    2b:e5:28:be:1b:b8:d8:ac:6a:3a:54:06:ef:f2:bd:
                    3d:f9:c3:3b:7c:c4:c6:22:f3:c9:da:84:2d:13:e9:
                    e3:35:42:40:99:4d:79:18:fc:84:b7:7f:fd:fc:10:
                    3d:65:92:b7:68:e8:f4:36:17:14:2d:a5:d8:fb:f4:
                    6c:5c:fe:7f:b9:07:1a:1f:ae:7b:f9:69:dc:c3:6b:
                    8a:67:ad:bc:ec:26:d1:f0:89:dc:f6:05:6e:c0:f2:
                    51:3f:6c:af:3c:58:f5:fe:6f:71:9f:2a:a2:ed:01:
                    d7:e0:2b:47:3f:65:17:0d:be:e2:f5:b9:5f:db:f0:
                    8e:32:16:47:bf:63:c5:d0:23:26:2e:44:c7:95:cc:
                    71:c8:be:e3:1e:d3:c8:34:47:16:3b:fc:c4:2c:66:
                    55:c1:cd:78:a8:2a:05:83:2d:b2:bd:69:63:70:c2:
                    b2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:26:A5:13:03:42:3D:27:15:BA:70:74:58:74:4C:F4:58:8A:6F:AC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3yalEwNCPScVunB0WHRM9FiKb6w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3600::/40

    Signature Algorithm: sha256WithRSAEncryption
         5d:2d:e1:5e:3f:dd:10:b5:6d:f6:89:ef:c0:81:2b:74:92:a9:
         e4:ca:3a:d6:a8:c9:a0:cf:e5:e6:f9:95:69:a2:8a:ff:c1:88:
         f1:58:9c:c7:72:e0:63:cb:c9:7c:37:06:63:0d:5f:00:b6:71:
         1b:d2:c6:9b:be:c8:83:aa:14:d3:e7:de:ed:c3:19:57:b8:d6:
         21:d2:35:79:c4:39:22:5f:13:d8:5b:73:b4:0e:b7:02:43:a9:
         af:ae:94:6f:b3:a6:59:c1:65:e0:37:f5:10:c0:f3:3b:94:99:
         1a:ca:02:06:4d:bb:f8:a6:8f:ff:7a:bb:cc:ba:9b:1b:c9:ef:
         ce:74:dd:66:ba:13:59:c7:ae:55:61:c6:03:e9:ac:99:d3:d4:
         aa:bc:64:d6:73:85:b5:8a:66:7a:9f:8e:58:5d:ca:f3:75:70:
         15:5f:93:7a:b1:87:55:9c:40:01:d1:d5:1b:4a:99:60:f0:26:
         a2:3e:14:89:51:e2:d4:b4:14:33:7e:db:b1:bd:75:a3:57:cf:
         a3:18:4f:95:a6:fc:d5:2a:a5:1a:1b:b6:3f:8f:7c:e7:a0:53:
         65:0a:bb:9e:ef:8a:a2:f8:5f:89:1a:fa:7f:72:1f:52:de:7a:
         8a:f6:32:ac:30:4c:79:da:fe:18:16:74:74:a5:bb:2d:47:13:
         b7:75:81:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org