Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/998FKbiV2QNtgiYSdnX0unJAVzA.roa
File:                     998FKbiV2QNtgiYSdnX0unJAVzA.roa (raw, json)
Hash identifier:          cWgQrkJQZ6LzfTrvugf7xS3oUumwhjs/yIPe4gKC2qo=
Subject key identifier:   F7:DF:05:29:B8:95:D9:03:6D:82:26:12:76:75:F4:BA:72:40:57:30
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       C9
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/998FKbiV2QNtgiYSdnX0unJAVzA.roa
Signing time:             Tue 30 May 2023 16:10:17 +0000
ROA not before:           Tue 30 May 2023 16:10:17 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8d00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:17 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F7DF0529B895D9036D8226127675F4BA72405730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:c9:63:76:d3:2c:b7:40:be:62:08:9a:6e:
                    0c:a7:0b:7c:05:ad:85:bd:6f:b5:17:0c:96:d6:32:
                    6e:dd:12:7c:ed:2b:6f:b0:e7:64:20:ed:ba:e1:80:
                    e1:89:8c:cb:2c:9f:ae:c6:d7:93:9e:79:50:f3:50:
                    32:50:3f:f7:e7:37:ca:e7:c8:25:db:3a:1e:8b:37:
                    bb:c4:73:d3:c4:32:ed:50:5b:56:1f:ce:ea:4c:77:
                    d1:2a:2d:7d:9d:0f:23:95:c1:18:06:49:5d:06:5f:
                    7b:11:54:76:05:42:63:fc:a3:b6:bd:cc:66:3e:45:
                    07:06:80:a2:0d:b7:93:23:8c:25:0a:0e:d5:73:62:
                    c3:48:3c:0d:91:64:58:89:b5:25:36:90:cf:59:fb:
                    9e:dd:ae:89:3a:6a:ab:a7:dd:6a:dc:f1:86:4d:06:
                    6e:70:03:94:26:e9:32:1c:7d:f1:38:8c:3c:d6:b0:
                    90:73:fc:5f:e0:03:d8:f5:c2:c6:6b:2b:6b:72:e5:
                    28:1a:b6:bd:20:ec:cb:ba:69:10:93:96:6d:45:52:
                    ca:00:fa:50:f8:14:78:ab:e3:a3:df:d3:35:1b:1b:
                    aa:3f:49:45:ed:9d:4d:47:58:0d:2b:f8:32:6e:c7:
                    6a:41:d5:6e:17:f8:b7:d9:85:29:38:e9:b8:26:db:
                    92:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DF:05:29:B8:95:D9:03:6D:82:26:12:76:75:F4:BA:72:40:57:30
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/998FKbiV2QNtgiYSdnX0unJAVzA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:63:95:72:6c:97:09:4a:ee:9d:84:f7:94:09:0c:68:f6:04:
         52:a1:33:bf:76:a6:4c:15:e9:9b:85:36:53:1e:b4:08:d9:24:
         bc:dd:52:45:73:3f:ff:d5:61:90:64:e2:47:3e:05:34:cc:b3:
         59:41:44:28:45:03:39:c1:e1:4c:c7:d6:5c:89:29:d2:9c:f6:
         bd:d4:6a:f2:6b:72:9e:a6:86:2b:ed:a3:58:24:db:e6:2c:d8:
         a6:e9:8d:2f:18:9b:bc:91:32:21:4a:c4:f5:0c:93:16:1a:2c:
         ac:36:fb:aa:b8:d9:be:81:f5:2b:51:94:e2:42:8f:3e:0a:57:
         8b:2c:8b:0f:8f:cf:98:24:01:2c:db:27:f7:c3:0f:67:fc:2f:
         53:4f:7b:44:51:cc:4a:be:ba:9f:6f:d6:7b:db:88:08:d0:ff:
         59:c4:93:b2:ca:4c:4f:93:2f:37:39:5d:35:f8:6e:f8:72:c9:
         53:44:cc:25:25:31:4d:bf:c6:c2:27:84:1d:18:3b:e0:18:cf:
         17:36:c8:62:f7:13:dc:aa:d3:d9:f5:dc:93:8c:08:f6:2d:01:
         d4:8c:7e:cc:5f:ff:7b:87:33:7b:35:02:95:64:86:8e:83:74:
         b8:8d:8c:26:de:cd:87:41:bc:5b:6f:0f:31:9a:5a:41:8e:bd:
         04:fc:1f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org