Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7PCy_ZHNC8DQEiPQrUZ2opF6Kn4.roa
File:                     7PCy_ZHNC8DQEiPQrUZ2opF6Kn4.roa (raw, json)
Hash identifier:          6hvg960e0hnqnz6xthKLkEzq31j8hm7tCjMLF8UuJpY=
Subject key identifier:   EC:F0:B2:FD:91:CD:0B:C0:D0:12:23:D0:AD:46:76:A2:91:7A:2A:7E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       37
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7PCy_ZHNC8DQEiPQrUZ2opF6Kn4.roa
Signing time:             Tue 30 May 2023 16:02:11 +0000
ROA not before:           Tue 30 May 2023 16:02:11 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8600::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:02:11 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=ECF0B2FD91CD0BC0D01223D0AD4676A2917A2A7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9a:0f:15:c7:0c:0f:dc:5e:a6:83:a0:d9:75:
                    a2:71:31:41:63:e1:b7:e1:41:83:e0:bf:f4:36:49:
                    0d:eb:4c:17:ff:57:d2:3f:89:e3:aa:ca:b6:39:32:
                    45:a0:d0:48:a2:03:7f:29:40:d9:55:0b:61:95:1a:
                    ae:34:58:d2:37:ac:b9:eb:e6:40:d6:5d:a0:f1:5b:
                    84:be:46:50:99:e3:f4:53:05:bb:46:c4:dc:d7:14:
                    a0:c4:72:f5:f1:27:64:6a:d7:b0:50:0f:05:83:be:
                    48:5b:c6:97:6d:1a:86:a9:1b:0e:c7:2a:57:b4:45:
                    5b:8c:88:89:ff:12:0a:33:15:b9:6b:6f:eb:14:eb:
                    0b:1c:2d:59:a5:68:bb:3c:38:cc:57:7c:36:9f:71:
                    fa:d3:10:88:48:02:1a:20:fd:3e:c9:d8:e7:e5:90:
                    8f:89:f0:d3:de:80:72:7a:7b:d3:ba:2e:5a:f8:e4:
                    55:04:16:8c:56:66:5b:3d:b5:db:f5:70:93:4c:c4:
                    b7:0c:e5:98:51:49:79:f4:1b:30:f2:b2:4d:ca:2f:
                    9a:56:f2:d5:c4:78:a1:5e:c0:23:de:79:c9:a2:3e:
                    b3:9c:70:43:01:bc:33:5f:65:f3:0a:4d:9c:ea:e5:
                    a8:de:a1:2d:a2:c6:bc:7b:41:73:54:a2:85:20:59:
                    35:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F0:B2:FD:91:CD:0B:C0:D0:12:23:D0:AD:46:76:A2:91:7A:2A:7E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7PCy_ZHNC8DQEiPQrUZ2opF6Kn4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8600::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:a2:61:30:c0:17:37:4c:e1:27:ae:36:c1:05:ea:52:ec:97:
         34:ed:71:c9:af:d0:6c:55:e3:b0:2b:52:98:aa:21:8f:be:f0:
         7f:60:d0:52:53:cb:53:fb:df:af:ca:23:cf:ca:2c:a2:0d:bb:
         ce:4a:7f:af:e4:f4:9e:4f:61:ec:57:c5:1c:60:b2:69:79:01:
         22:16:50:ed:8f:4c:77:dc:ec:34:fa:c2:57:21:6e:19:bb:bf:
         29:11:8c:7f:4a:a5:27:bf:e7:f1:ab:e3:59:ff:a1:2e:86:a8:
         77:d8:32:d8:9e:8a:cb:a8:07:90:2d:07:1c:ed:ac:d6:db:b7:
         8c:57:71:5b:93:20:1c:05:c6:75:50:9a:e1:fa:d4:01:fe:02:
         ad:98:92:73:6a:cf:76:26:a7:ca:f5:5c:a2:3c:5b:26:64:4f:
         e5:51:9c:81:0f:1f:09:9c:99:68:f9:3c:f9:7c:29:1b:e7:8d:
         41:37:f4:6d:cb:d9:a3:36:32:96:7d:98:38:e0:ba:f2:61:f0:
         6c:ad:5c:c9:e6:79:77:d7:33:1b:67:60:a4:56:e0:12:11:e2:
         8b:d4:95:3a:76:04:6b:85:0e:43:ae:59:9c:0f:34:75:cb:b6:
         59:4e:4c:1a:d1:46:27:b6:82:42:8e:7f:dc:c7:bd:b8:75:8a:
         4c:c8:2c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org