Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9MY6hW8IcvAOMBWE_fB7L_h-6Xo.roa
File:                     9MY6hW8IcvAOMBWE_fB7L_h-6Xo.roa (raw, json)
Hash identifier:          MeQvtltqQtLj6MFMEds0D2XvhqbIO4otowc/C4uRqlE=
Subject key identifier:   F4:C6:3A:85:6F:08:72:F0:0E:30:15:84:FD:F0:7B:2F:F8:7E:E9:7A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       18
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9MY6hW8IcvAOMBWE_fB7L_h-6Xo.roa
Signing time:             Wed 22 Mar 2023 17:44:15 +0000
ROA not before:           Wed 22 Mar 2023 17:44:15 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:14:e90::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 22 17:44:15 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=F4C63A856F0872F00E301584FDF07B2FF87EE97A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:db:85:0a:db:74:04:eb:7c:c6:60:d8:91:64:
                    9a:40:09:43:1c:ec:d4:5f:09:81:f5:8d:ee:75:69:
                    5a:9c:7a:c5:47:da:9d:ed:9b:28:58:c7:45:10:cb:
                    ca:32:6e:87:b5:fd:bf:6c:01:9f:b5:27:75:a0:08:
                    72:12:63:92:96:66:9e:39:16:78:6e:1a:1e:4d:f1:
                    36:26:dc:c2:10:e2:1f:8b:61:79:97:c1:23:bb:68:
                    0b:fd:cd:16:e5:22:6f:8e:0d:a8:fa:b9:a8:c6:77:
                    f1:b6:c6:32:ca:68:b0:9b:b4:ba:37:96:5d:78:66:
                    3c:a8:f5:f4:82:c6:71:22:55:be:65:9c:da:95:b1:
                    2d:14:6b:71:c1:e3:a3:c4:6f:76:64:c5:ae:fc:3f:
                    70:e5:6a:7e:dd:74:61:ca:6f:69:6b:c8:d8:f3:d5:
                    63:e8:ec:7d:40:b8:e8:c3:8f:ff:6a:e5:ec:1c:e6:
                    39:d6:b6:de:bf:d0:12:5e:7b:c2:35:1b:dd:65:a5:
                    54:37:c0:66:b4:83:97:3a:bf:2f:43:31:ac:42:12:
                    ba:b1:9b:b9:cd:c4:12:f1:63:3c:97:3b:dc:dd:b5:
                    4c:69:2f:07:3d:f9:a3:97:89:ea:14:4c:d8:cf:db:
                    1c:da:1d:1c:0d:5c:54:fc:48:14:27:c5:cb:7d:60:
                    0c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C6:3A:85:6F:08:72:F0:0E:30:15:84:FD:F0:7B:2F:F8:7E:E9:7A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9MY6hW8IcvAOMBWE_fB7L_h-6Xo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:14:e90::/44

    Signature Algorithm: sha256WithRSAEncryption
         98:6c:52:a1:65:d5:c0:b8:0a:95:1d:2f:ff:c2:26:d1:c8:30:
         df:9e:29:83:44:ee:65:db:7c:0b:df:b8:bc:3f:ef:cc:f5:53:
         f9:28:2a:55:cc:aa:d6:eb:fe:a0:e5:9e:03:ba:93:85:ac:65:
         cd:96:59:b1:14:14:6f:26:46:1d:a9:c6:1f:c9:bf:16:62:d5:
         18:2f:09:56:39:60:c2:78:0a:2b:4d:34:f4:04:c6:40:3d:45:
         af:66:3e:c9:f5:85:11:64:ff:cf:63:ab:1b:08:9c:8a:1f:c0:
         b5:71:6a:54:16:fd:5c:26:2a:7e:04:b8:7d:7a:08:2a:38:39:
         48:9e:b3:72:02:c0:f2:af:d4:f2:de:3b:1b:e0:9d:dc:23:f9:
         f6:fe:b9:cd:28:9e:d0:f4:58:5e:40:2d:49:4b:4f:3f:f9:f8:
         d9:1c:d6:cc:8e:43:e0:1e:31:d3:4e:40:a3:5a:ff:cf:12:77:
         15:b3:71:34:5a:5e:c5:ca:57:35:82:5f:13:9d:2f:33:83:ca:
         6a:fa:af:e6:bc:f3:91:37:71:59:3e:10:3b:25:61:5b:e5:cd:
         1b:f1:52:b9:4c:ce:0c:81:af:03:92:5b:6a:67:7d:87:89:89:
         a8:ee:a9:56:9f:01:c6:a3:d8:58:d0:11:62:cb:53:ea:28:b4:
         b6:ca:39:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org