Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5pQuKmCP8-n_ymBA6mQPnCmGDPA.roa
File:                     5pQuKmCP8-n_ymBA6mQPnCmGDPA.roa (raw, json)
Hash identifier:          l90ykin0so0hKfFaPLa6Om2ON4F4gvyef/C7Er29mWM=
Subject key identifier:   E6:94:2E:2A:60:8F:F3:E9:FF:CA:60:40:EA:64:0F:9C:29:86:0C:F0
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0110
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5pQuKmCP8-n_ymBA6mQPnCmGDPA.roa
Signing time:             Tue 30 May 2023 16:14:15 +0000
ROA not before:           Tue 30 May 2023 16:14:15 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ad00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:14:15 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=E6942E2A608FF3E9FFCA6040EA640F9C29860CF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:68:2f:64:d4:61:bb:3c:31:f8:55:d3:87:41:
                    d6:60:51:b5:b6:34:21:ba:d6:f8:89:e3:62:0f:0c:
                    bf:f0:cc:0c:d3:1c:dd:69:02:53:6f:32:a0:83:e8:
                    b1:9f:c7:28:8a:51:f0:fd:c2:97:91:77:37:d4:31:
                    97:a2:f5:b8:c8:1e:70:86:a5:0b:8b:f2:8f:47:9b:
                    63:fb:65:fd:2e:d9:e3:a4:ab:e0:73:95:18:89:4b:
                    27:1f:a2:68:18:77:0c:cc:a1:8c:3b:86:ef:c1:80:
                    e5:d0:e8:32:8e:8e:d6:08:d5:93:80:dc:0d:fb:a6:
                    c0:f6:5f:83:b6:93:83:2e:d4:23:e2:d3:1d:ff:5f:
                    6a:61:6e:27:a9:9c:ba:a3:8a:dc:69:ad:76:00:49:
                    5e:d4:98:51:ff:57:40:b4:40:a4:98:44:04:be:9f:
                    d4:9c:08:6b:2b:d5:38:a3:73:6c:d0:14:56:69:20:
                    2a:93:5c:89:2c:53:d3:85:24:b9:99:72:d4:80:5e:
                    89:c9:7b:bd:52:78:9d:f6:a2:fc:0d:b8:09:05:e5:
                    b0:f7:44:0d:89:6d:36:90:50:b8:aa:c6:d7:42:56:
                    7f:96:d9:e5:ad:a0:de:a2:68:d8:51:01:e0:59:f3:
                    53:73:0e:e6:38:4a:46:54:51:17:99:69:c0:11:af:
                    eb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:94:2E:2A:60:8F:F3:E9:FF:CA:60:40:EA:64:0F:9C:29:86:0C:F0
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5pQuKmCP8-n_ymBA6mQPnCmGDPA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ad00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:8a:7b:b8:e6:b1:1d:b2:22:53:56:8a:27:e1:91:3a:52:00:
         23:66:14:0a:c2:ad:6c:11:18:c7:eb:b9:2c:64:14:4f:ed:4a:
         d8:cd:d6:d3:44:c5:16:27:70:36:5c:50:1a:48:80:07:cf:f8:
         41:8b:d6:d0:6f:d9:36:84:c1:27:9c:43:e8:f2:9a:91:1f:20:
         69:1a:70:41:52:78:09:fa:9a:f1:2e:bf:fe:10:56:f0:9a:75:
         4a:3b:4c:e5:06:e7:3c:5e:50:92:ad:e1:31:5b:f2:b4:bf:a5:
         2f:a0:0b:c0:f5:bb:87:07:da:17:4c:77:bb:fa:39:a2:e4:09:
         eb:47:2d:be:75:f8:1f:f7:6a:3a:40:0e:a8:3f:f2:69:65:ab:
         04:85:cb:36:30:e6:b5:57:86:a3:3e:b4:ad:af:9e:b7:e5:03:
         d2:54:0b:1f:10:f7:32:91:df:b8:66:26:ac:16:d4:ca:85:84:
         eb:0a:a0:33:14:8b:e1:9a:6b:58:d8:45:2a:a4:32:ad:c1:0b:
         19:e0:3b:46:56:9a:77:af:18:12:15:51:01:c1:54:78:a7:f3:
         af:c8:b1:7f:43:51:f7:ea:5c:f4:ba:1b:ae:41:dc:6d:3a:ff:
         60:a2:16:c1:65:1e:22:7f:6f:31:1b:f9:a7:18:8e:4c:fc:47:
         8d:78:ae:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org