Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ApjiNGmlBh6we48N1DClaeVdXaw.roa
File:                     ApjiNGmlBh6we48N1DClaeVdXaw.roa (raw, json)
Hash identifier:          AW9gjvlRW7N/LJuVwbeyjHqYIX3Bith22urKemxavO4=
Subject key identifier:   02:98:E2:34:69:A5:06:1E:B0:7B:8F:0D:D4:30:A5:69:E5:5D:5D:AC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       024D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ApjiNGmlBh6we48N1DClaeVdXaw.roa
Signing time:             Tue 06 Jun 2023 16:29:17 +0000
ROA not before:           Tue 06 Jun 2023 16:29:17 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61::/37 maxlen: 37

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 589 (0x24d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun  6 16:29:17 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=0298E23469A5061EB07B8F0DD430A569E55D5DAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:27:20:54:00:0b:02:94:24:8c:3a:32:57:8e:
                    36:e6:14:0e:5d:53:4d:db:f0:44:e5:ca:1e:e3:73:
                    e1:c7:1d:1b:e4:bc:60:02:a6:cf:f8:60:8d:ae:a7:
                    f5:69:ab:8e:90:c9:b0:bd:bc:79:71:c7:66:e0:34:
                    d6:b3:18:7c:51:8e:12:c3:6e:5e:5a:02:a2:4b:80:
                    da:2a:ea:93:9d:32:b6:77:91:16:83:2b:82:ab:86:
                    93:2e:aa:aa:d1:a4:41:4a:d3:9b:a9:c1:b0:76:a3:
                    e2:32:a3:e7:bb:4d:1b:6a:8a:9d:f9:f6:3d:91:f6:
                    a1:d1:61:c5:60:54:0e:1d:50:10:93:46:c0:ed:be:
                    ba:1a:5f:7d:85:e4:b2:d2:a7:02:9d:e6:0e:5f:44:
                    07:bf:c4:00:54:68:a3:56:5b:7a:ec:c2:84:62:30:
                    05:59:8d:44:cb:3b:41:76:db:2c:21:37:5e:1b:e1:
                    f7:db:3f:34:80:62:2c:b8:86:12:7f:ad:a3:bc:c7:
                    23:6d:92:1d:e0:45:2f:93:9f:49:d7:0e:11:5d:9e:
                    5e:f0:dc:ff:ca:f1:4c:c2:5e:38:ed:6d:83:31:97:
                    15:26:02:29:0b:ae:05:49:5e:e7:6e:87:96:0b:d6:
                    77:ac:79:7c:3f:d8:c4:4f:d7:c5:63:61:76:92:bc:
                    04:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:98:E2:34:69:A5:06:1E:B0:7B:8F:0D:D4:30:A5:69:E5:5D:5D:AC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ApjiNGmlBh6we48N1DClaeVdXaw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61::/37

    Signature Algorithm: sha256WithRSAEncryption
         13:fa:39:cc:29:1b:1e:e9:f4:9e:d8:af:22:7b:6f:fd:88:4e:
         25:f6:5b:5e:c4:94:8c:2e:ff:ed:03:9b:a4:14:a1:4f:d3:fb:
         63:44:2a:11:17:5e:7c:47:3a:c9:46:ff:9a:af:50:0e:03:63:
         3d:60:6b:88:8c:2e:84:ac:a8:f0:0a:d1:e5:b3:50:20:ee:e4:
         ba:67:cb:ea:3a:77:41:79:44:06:67:2d:c9:8c:e7:2f:64:42:
         4f:e7:ba:a1:c1:7f:31:65:52:b5:3b:68:91:94:00:74:d8:ae:
         03:5f:a4:bc:8e:c3:7a:b5:57:d9:b8:8e:9a:ea:75:22:76:58:
         62:74:7a:69:d4:78:8b:35:f4:90:be:9c:23:b6:cd:40:40:9c:
         d9:dd:a6:92:65:ff:7f:f7:96:92:df:0a:6b:60:34:ef:de:2f:
         25:cc:eb:59:aa:e0:bf:3e:60:5c:8f:c4:b0:c9:d3:a5:15:a9:
         46:95:2c:1e:c4:d0:77:f3:8c:08:d3:22:ed:36:3e:f5:e8:17:
         5c:74:9a:03:15:a5:23:34:1f:87:e6:28:9b:61:3d:5c:2f:51:
         6f:32:e3:21:c0:e6:31:1d:43:71:c9:27:6e:b0:b8:21:5f:f4:
         d1:2a:ef:a9:ec:be:70:53:2a:70:2b:f1:5e:45:50:01:32:8d:
         6a:1f:99:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org