Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/43HMhbMMqcfWVW5N_c2Hjof0HHg.roa
File:                     43HMhbMMqcfWVW5N_c2Hjof0HHg.roa (raw, json)
Hash identifier:          m3aqSDS9zileXhYPw+JqO9W/dGeS4/P18YxVH/qFBuI=
Subject key identifier:   E3:71:CC:85:B3:0C:A9:C7:D6:55:6E:4D:FD:CD:87:8E:87:F4:1C:78
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01CB
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/43HMhbMMqcfWVW5N_c2Hjof0HHg.roa
Signing time:             Tue 30 May 2023 17:38:22 +0000
ROA not before:           Tue 30 May 2023 17:38:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3e00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=E371CC85B30CA9C7D6556E4DFDCD878E87F41C78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:93:f3:56:1a:22:d3:13:6f:8b:00:a1:1c:98:
                    d9:f5:af:b0:a9:7e:72:10:d7:88:5e:34:79:d5:13:
                    38:99:b6:23:dc:43:86:48:48:69:87:4f:af:6e:86:
                    c4:d4:48:23:0e:a9:71:92:e1:a6:20:46:e4:dd:08:
                    74:6f:e1:f2:84:99:19:b8:07:5c:75:df:3f:e3:3c:
                    6f:1c:b0:64:9b:0f:ab:3a:17:a4:66:89:1b:70:70:
                    20:a5:24:9c:94:e4:42:32:8d:0e:20:aa:26:75:b7:
                    a3:93:df:aa:de:28:3c:de:74:4a:e3:ca:8f:f5:37:
                    00:45:59:2a:b5:fc:a6:20:de:ce:38:b3:a0:f7:15:
                    17:dd:24:e3:5f:8c:5f:3e:f1:a6:8f:45:30:25:bf:
                    20:01:8f:68:22:16:de:eb:d1:dd:4c:67:be:1b:44:
                    51:bb:5c:eb:fa:e6:c9:15:9c:2d:cd:3f:7b:4b:5a:
                    34:d1:cd:18:8c:6e:05:92:d2:c5:fb:e6:49:1e:1f:
                    1b:8e:60:1b:32:c6:79:f3:da:9a:3a:32:69:d7:7c:
                    26:c2:cd:49:bb:2a:cf:48:6c:aa:ad:60:7d:cb:88:
                    6a:de:29:54:f4:10:a4:b2:04:02:47:6b:a9:d4:ee:
                    4f:5d:a8:52:4c:27:af:32:39:26:b6:c3:fc:e6:46:
                    c9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:71:CC:85:B3:0C:A9:C7:D6:55:6E:4D:FD:CD:87:8E:87:F4:1C:78
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/43HMhbMMqcfWVW5N_c2Hjof0HHg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7f:39:39:bf:5f:6d:4b:ad:4d:5a:e9:69:7f:25:ed:56:ae:8c:
         4c:d1:17:9e:e7:94:44:14:8f:98:db:cd:19:64:c5:e6:c2:7c:
         af:d0:33:b4:f8:3d:fa:bc:29:ab:cb:b5:2b:2e:4d:52:ac:ae:
         2d:32:f0:38:b4:f5:68:e9:92:e1:fa:ca:ca:d3:ae:00:97:bb:
         a3:7d:60:6d:6c:79:3a:bd:fa:b0:1c:99:1f:c6:d4:53:c3:ff:
         ad:49:d1:c1:9d:f3:46:dc:0e:85:18:49:97:4d:24:58:4d:c9:
         dd:c0:43:9f:07:e5:d6:3a:7b:81:2b:54:e9:14:1f:0c:2d:24:
         80:c9:c5:17:a2:e2:c7:7c:47:26:8f:bf:93:00:1b:42:b7:40:
         fb:7e:2c:8f:28:51:3c:50:74:2e:30:e5:df:f1:58:9d:f7:3a:
         c6:2a:9e:9b:20:f3:a8:1e:44:c1:2c:73:30:08:37:6f:5d:93:
         7e:08:cd:1c:b8:b7:e6:8b:51:c7:54:35:e6:ef:6e:33:31:01:
         3e:e6:7f:22:7f:5b:74:16:ee:6c:5f:29:c1:e7:d4:da:56:e1:
         ec:fe:3e:a0:24:1a:77:04:49:ed:74:25:a2:bf:eb:e5:12:e3:
         fa:eb:9a:7b:56:8d:2b:5e:01:46:84:e5:9e:5a:d2:16:47:3c:
         50:c6:eb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org