Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4z8zNaLq7KWhauN6hHPDsTE-YLI.roa
File:                     4z8zNaLq7KWhauN6hHPDsTE-YLI.roa (raw, json)
Hash identifier:          a1KF+grgYOIYFzdK5nvgtWB+QpEgVTOCQFUSk2O76vo=
Subject key identifier:   E3:3F:33:35:A2:EA:EC:A5:A1:6A:E3:7A:84:73:C3:B1:31:3E:60:B2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       016E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4z8zNaLq7KWhauN6hHPDsTE-YLI.roa
Signing time:             Tue 30 May 2023 17:32:36 +0000
ROA not before:           Tue 30 May 2023 17:32:36 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:36 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=E33F3335A2EAECA5A16AE37A8473C3B1313E60B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dd:d0:8b:26:42:fa:9a:41:50:4d:45:1e:a7:
                    69:67:8d:97:1c:40:d5:6a:6a:be:ac:45:55:e0:b9:
                    1c:33:67:cb:55:f6:c1:f0:06:56:65:57:d6:09:75:
                    c9:a0:17:24:5d:56:42:6e:f7:93:78:b4:d3:51:f2:
                    8d:60:58:19:f6:01:3d:40:12:55:f6:bb:c4:85:4e:
                    db:af:7d:8b:ad:f2:39:22:65:1b:d6:b6:a1:69:01:
                    50:dd:68:cd:91:2f:5d:70:b9:52:52:9e:e5:9b:25:
                    d6:d0:47:af:b9:db:40:82:d6:30:98:5a:4c:0f:57:
                    8e:c9:74:a3:59:dd:e1:2e:b4:67:92:81:cd:2d:d8:
                    3c:da:fe:1b:28:1d:4d:ce:eb:ec:5a:ff:1d:d9:15:
                    15:7c:66:00:a8:1a:41:6d:e1:ff:9d:3a:f3:70:a8:
                    3c:f0:24:00:38:d4:23:06:01:92:62:e9:31:74:46:
                    04:9f:8a:49:ba:83:62:79:75:41:29:c2:64:48:8d:
                    23:0f:c8:39:0b:79:86:05:8d:b7:69:90:8e:65:d5:
                    f1:c6:7a:16:08:6e:7e:45:ad:e4:49:b3:bc:19:3c:
                    af:0e:cd:c7:ff:8a:1e:90:99:9c:35:17:c1:f1:75:
                    26:c7:4b:cf:68:28:28:7a:dd:42:f8:0e:08:65:04:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3F:33:35:A2:EA:EC:A5:A1:6A:E3:7A:84:73:C3:B1:31:3E:60:B2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4z8zNaLq7KWhauN6hHPDsTE-YLI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         aa:06:11:af:5a:29:e7:08:04:20:71:a7:85:2f:d9:99:d5:d3:
         11:70:a2:0b:35:34:0e:2d:d5:5c:de:a1:26:bf:fe:84:94:b3:
         1c:bd:69:3c:b9:ac:82:4a:64:90:66:6b:44:1a:a0:62:a2:ed:
         d9:ef:9e:c2:4e:7c:4b:34:00:cf:3a:64:0a:ba:e1:c6:c3:b4:
         7a:2a:2e:aa:4b:22:a0:65:0a:e2:cc:32:26:9f:c3:ff:27:85:
         d2:c9:a1:0a:ad:bc:a1:7f:be:08:cc:85:97:d8:44:77:09:67:
         6e:9d:c3:0e:94:e2:1c:97:1a:a9:2e:46:79:94:96:6a:14:29:
         36:1e:ce:16:0d:06:cd:92:92:c9:b0:67:76:2e:19:51:5d:95:
         df:ae:81:bf:7c:03:4e:c6:cf:46:5e:ca:30:a5:11:e9:05:37:
         92:4a:1b:15:9d:2b:79:5e:6e:4d:ef:66:dc:2d:13:04:90:d2:
         64:c2:25:26:e5:c9:34:34:2d:c7:fa:51:40:17:54:c7:11:e6:
         59:bc:36:2c:6b:01:b3:49:e2:e8:b0:01:a8:11:03:2f:b5:0b:
         41:ed:a4:81:34:4d:b3:85:f6:0e:a6:fb:4b:a3:3f:41:c1:2d:
         ea:27:f8:0d:c3:f6:3c:4f:9e:fa:33:ae:45:c3:97:af:05:ab:
         79:f8:13:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org