Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9wYqmfTV_t0Ku2_MxBa_Lpha2iE.roa
File:                     9wYqmfTV_t0Ku2_MxBa_Lpha2iE.roa (raw, json)
Hash identifier:          laFU5glriBKgNnj0Irw/xV+A+OUlV2Vn0fU8xMK1Z9k=
Subject key identifier:   F7:06:2A:99:F4:D5:FE:DD:0A:BB:6F:CC:C4:16:BF:2E:98:5A:DA:21
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       017B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9wYqmfTV_t0Ku2_MxBa_Lpha2iE.roa
Signing time:             Tue 30 May 2023 17:34:22 +0000
ROA not before:           Tue 30 May 2023 17:34:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1600::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F7062A99F4D5FEDD0ABB6FCCC416BF2E985ADA21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:58:b0:de:14:79:88:11:a3:88:9a:8e:aa:
                    5c:62:6d:e6:46:7d:a0:1b:33:9a:19:31:9b:8c:e7:
                    8b:f6:40:3c:72:99:4d:16:0d:77:0b:31:1a:d0:dd:
                    af:1f:1e:77:d9:59:c1:fc:eb:4c:12:4e:7f:69:cb:
                    ef:84:28:54:77:a5:28:3b:65:1f:91:f3:14:5a:e0:
                    f7:3f:55:bc:6b:9a:47:02:39:9c:44:72:70:cc:36:
                    1c:2c:65:be:ea:7b:2c:64:20:9b:36:68:74:98:e8:
                    9f:76:38:0a:61:50:bb:05:80:de:0f:4e:a1:55:46:
                    a3:88:61:f2:de:1b:48:f6:43:52:77:5e:68:e3:2f:
                    5b:14:02:5f:2e:e2:c9:1d:d9:63:f1:6d:0e:38:f2:
                    31:30:84:81:58:b1:11:44:09:e0:91:66:43:0c:09:
                    b3:86:3c:07:13:54:06:68:60:aa:e4:3a:4c:c2:ab:
                    3c:82:29:52:f7:ee:74:e0:36:64:28:c2:c9:b2:27:
                    ab:aa:11:37:01:02:ed:54:e4:9b:85:c9:24:5a:8e:
                    20:a3:dd:b0:fe:0b:74:a9:f9:b0:ac:a4:7c:5a:fb:
                    2b:4c:56:97:b7:5d:4b:78:63:e7:ba:26:6a:ae:44:
                    d3:75:f1:f6:a7:3b:15:88:bd:71:b6:1b:b1:12:78:
                    66:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:06:2A:99:F4:D5:FE:DD:0A:BB:6F:CC:C4:16:BF:2E:98:5A:DA:21
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9wYqmfTV_t0Ku2_MxBa_Lpha2iE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:bf:4f:ab:25:44:fa:cb:5e:d2:68:2c:32:77:4e:7c:76:98:
         26:42:a7:07:0e:62:c6:f4:01:1f:50:05:19:20:a7:3e:74:93:
         df:06:d8:86:f3:d9:1f:3a:b9:2f:dd:0a:46:e9:6b:58:09:fa:
         97:cb:8c:0b:8b:36:e5:8c:3f:4c:92:de:42:c9:80:d8:cd:43:
         5c:1d:ad:39:b3:b9:ce:e9:7b:00:fa:22:07:dd:26:4f:98:dc:
         25:4b:b5:a3:04:ec:e2:f1:73:7c:3d:23:0f:5c:fc:fb:f5:64:
         f8:71:72:a1:9c:ab:02:f4:1f:27:38:0b:0f:2a:d8:29:15:86:
         8b:de:b4:69:44:b6:76:50:6e:0a:a7:80:e2:c0:76:d2:88:7d:
         53:ca:1f:f6:19:76:60:99:1c:94:5a:33:fe:80:35:2e:09:c1:
         0e:b8:c5:59:ac:7a:90:8e:6e:b0:14:08:41:8c:d5:01:8c:07:
         59:e2:20:be:18:7b:f8:d7:ab:ff:cc:9b:22:5f:d5:8f:64:04:
         82:9f:99:e9:bc:19:89:0b:cb:15:1c:9c:e3:2b:c4:1f:e3:64:
         ce:46:c7:ca:3c:67:70:28:c7:06:a3:1b:f7:88:e9:b6:96:a1:
         d9:7d:be:85:08:79:18:49:ac:7a:dc:53:9a:b3:97:dc:b1:85:
         5a:64:ae:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org