Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Abfx2gUW8asoyjUx2_wqPYtZFX4.roa
File:                     Abfx2gUW8asoyjUx2_wqPYtZFX4.roa (raw, json)
Hash identifier:          QnI7qbVSiXDfhXp2i/S9sTml9y3aEDfpc/7DSVkKyqA=
Subject key identifier:   01:B7:F1:DA:05:16:F1:AB:28:CA:35:31:DB:FC:2A:3D:8B:59:15:7E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       71
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Abfx2gUW8asoyjUx2_wqPYtZFX4.roa
Signing time:             Tue 30 May 2023 16:06:20 +0000
ROA not before:           Tue 30 May 2023 16:06:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:700::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=01B7F1DA0516F1AB28CA3531DBFC2A3D8B59157E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dc:4c:f3:84:e8:f2:99:92:8c:43:98:e9:01:
                    b7:da:27:69:1f:02:98:9b:d3:d1:3a:04:27:e3:40:
                    31:be:c0:64:e1:99:1e:06:d4:ec:e3:e0:25:ec:b1:
                    55:53:7e:7f:1d:ed:1f:de:e6:82:33:b6:98:84:87:
                    05:27:7a:41:8f:30:93:df:f8:6b:18:9e:d5:62:a0:
                    71:4c:2f:da:7e:b0:5b:f5:89:a1:92:8f:e8:1a:62:
                    18:32:81:f8:9f:40:04:de:bc:1c:2e:a1:8e:f8:20:
                    08:68:db:b4:df:9f:52:ec:35:55:23:f4:de:70:78:
                    79:ab:fe:65:e9:79:ac:1f:12:f0:ba:0f:f0:d1:65:
                    0a:c2:ce:40:85:bc:2d:1c:e5:4b:d7:d5:39:70:97:
                    85:61:f5:ff:bb:b3:27:f6:d6:1c:fa:2f:4b:26:ec:
                    8e:37:9f:90:75:23:27:2e:70:52:49:07:02:e6:e8:
                    cb:ee:ac:85:ad:d0:e0:51:d6:57:83:e7:0a:1f:ab:
                    95:15:9f:89:d3:56:1c:fb:82:2a:3f:39:0a:a2:f3:
                    92:f9:45:c5:3b:09:4e:41:1f:94:49:a3:04:76:69:
                    c8:11:5d:da:a5:07:9d:73:9e:f4:57:97:81:6c:cd:
                    bc:3d:5a:20:29:29:87:1b:dc:d1:aa:89:59:67:33:
                    e3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B7:F1:DA:05:16:F1:AB:28:CA:35:31:DB:FC:2A:3D:8B:59:15:7E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Abfx2gUW8asoyjUx2_wqPYtZFX4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         c8:e3:77:52:d8:f2:8a:34:11:7e:3d:ee:ed:cc:cb:7d:d1:6f:
         d3:b5:02:cb:62:b2:e3:8d:a7:5c:62:49:af:ab:f5:40:60:e6:
         81:81:dc:22:e9:49:39:7e:e0:6e:6c:00:5a:c7:28:54:77:80:
         7b:75:b7:4b:aa:a6:b7:11:cf:af:7b:bf:15:50:ef:3e:40:94:
         5a:14:32:9d:02:14:a4:e3:56:0b:8b:e2:47:6a:d2:00:0b:ff:
         43:b8:55:db:88:1f:53:81:cb:12:cf:5a:1c:b3:15:d3:ef:77:
         86:03:d6:78:90:b0:d5:f3:7f:75:80:f2:84:29:31:d8:90:b1:
         24:ac:25:50:07:ef:30:5b:f8:0a:8e:73:31:7e:a0:aa:f5:cd:
         3f:55:c9:fe:65:62:ec:65:f4:10:ad:b8:af:c2:cc:ae:bd:42:
         dd:fb:d1:3c:90:ab:ac:42:af:62:10:35:07:a1:b2:bf:55:c5:
         dc:72:e0:42:5f:19:b3:a9:c5:38:e1:48:55:ca:bd:be:42:d1:
         09:b8:50:85:c1:56:71:c8:dd:72:0b:04:0d:af:db:5b:fc:b3:
         a3:d8:83:54:15:7f:a1:14:b1:a2:34:89:a0:a4:72:94:18:d0:
         e8:a4:7b:0d:90:9d:f9:14:90:08:b1:b9:da:f4:db:4f:98:f8:
         f7:0d:89:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org