Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7NV8fZk9O2NtAwnIxMF8ua342Sg.roa
File:                     7NV8fZk9O2NtAwnIxMF8ua342Sg.roa (raw, json)
Hash identifier:          DaLOnANdpt1/qIM02tcBpdUtT8fiZZDHvvAaMB4uZK0=
Subject key identifier:   EC:D5:7C:7D:99:3D:3B:63:6D:03:09:C8:C4:C1:7C:B9:AD:F8:D9:28
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0218
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7NV8fZk9O2NtAwnIxMF8ua342Sg.roa
Signing time:             Tue 30 May 2023 17:40:30 +0000
ROA not before:           Tue 30 May 2023 17:40:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:70:8::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536 (0x218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=ECD57C7D993D3B636D0309C8C4C17CB9ADF8D928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:90:b2:88:37:a6:03:16:5f:36:48:46:f9:8b:
                    94:d8:fa:18:6b:25:11:21:a0:63:0a:54:4d:3d:30:
                    3b:73:a1:02:43:7f:9d:c5:63:71:b2:c9:d3:95:f9:
                    7e:fb:08:d3:7a:a6:56:66:69:93:ad:d8:47:0a:c4:
                    ba:15:5f:ce:59:ed:2d:b1:86:4e:da:5e:40:1a:59:
                    97:f2:15:88:57:84:77:08:19:82:b0:af:91:e5:8e:
                    3a:4f:75:dd:90:e8:9c:49:ab:64:0b:bc:7d:72:32:
                    55:1d:b0:3b:43:ad:0e:03:3c:b0:93:a8:a6:43:61:
                    05:63:31:dc:0a:b3:01:a9:52:a3:63:a7:58:7e:00:
                    59:08:29:bc:68:2c:46:32:f3:91:ce:36:2b:22:9c:
                    9c:47:46:f1:3a:5b:0e:8f:35:87:ac:e7:5e:87:13:
                    a0:c4:72:c9:cb:6a:60:39:a5:1e:b6:cc:b4:99:69:
                    97:93:47:7c:c7:b1:28:19:4f:b7:4e:3d:9d:0a:e0:
                    06:ef:f6:82:64:b2:a8:4b:85:52:99:0c:7f:65:b7:
                    fb:7f:0e:39:88:55:e2:e4:6b:47:da:83:83:e9:88:
                    d2:6a:a5:7c:8d:41:89:0c:e8:b7:85:eb:fc:cd:ca:
                    d7:44:d3:71:47:67:d8:d8:ff:2a:13:b2:65:29:fa:
                    0d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D5:7C:7D:99:3D:3B:63:6D:03:09:C8:C4:C1:7C:B9:AD:F8:D9:28
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7NV8fZk9O2NtAwnIxMF8ua342Sg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:70:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         cb:81:d5:36:06:3a:f7:cd:5d:00:c1:3a:84:24:cf:d4:d9:b9:
         59:93:eb:b0:5b:de:b6:b1:6a:16:c9:8a:e0:5e:27:1e:eb:34:
         bb:14:68:2a:19:c7:c9:e2:be:22:50:e0:81:7b:2a:db:13:76:
         85:bd:29:72:3e:8e:99:a1:14:8b:a1:e2:21:9d:db:43:9b:3f:
         2d:4c:fe:32:a0:37:96:b7:42:c4:7e:12:51:64:b2:e3:64:b5:
         a5:46:5a:32:84:ce:70:13:62:0c:ba:8c:cd:a8:1a:ff:87:09:
         ea:75:fe:10:3b:77:1b:6d:ef:dd:e8:dd:88:67:3d:cf:be:80:
         96:78:d5:1c:8e:87:b3:8e:cf:47:e3:fc:f9:d3:15:14:1c:0c:
         27:ea:cc:de:1e:bb:95:50:12:21:67:53:29:44:5f:15:a4:ed:
         bd:8c:16:42:b9:d6:94:d4:00:6f:34:fa:2c:a6:c2:e0:12:a3:
         d1:d7:c5:86:8a:9c:89:6b:f6:b9:b1:93:b8:9e:0c:4c:c4:2d:
         30:2c:59:f7:bc:12:c5:07:5f:da:28:16:4a:6a:32:2b:e4:74:
         78:14:3f:7c:83:b0:78:1f:fa:24:2e:af:85:ea:ca:5d:f4:b6:
         9b:7c:12:3b:6f:06:af:49:1d:ad:e5:c6:36:6e:75:35:f8:63:
         4e:fa:df:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org