Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/BIHz6OrajkHlRrZ03xJJFYmSbio.roa
File:                     BIHz6OrajkHlRrZ03xJJFYmSbio.roa (raw, json)
Hash identifier:          XkP2+8Wfw/YCDALOgjd3cVqa/2AYlJEP2dUR6rEorvU=
Subject key identifier:   04:81:F3:E8:EA:DA:8E:41:E5:46:B6:74:DF:12:49:15:89:92:6E:2A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01D2
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/BIHz6OrajkHlRrZ03xJJFYmSbio.roa
Signing time:             Tue 30 May 2023 17:38:25 +0000
ROA not before:           Tue 30 May 2023 17:38:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=0481F3E8EADA8E41E546B674DF12491589926E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3f:4c:16:b0:48:29:b6:7b:dd:69:a5:da:bd:
                    4d:6c:fe:28:4b:a6:ec:65:07:1b:65:13:d7:df:60:
                    65:ac:73:7c:14:33:3d:82:d9:c7:83:da:7c:cd:c7:
                    21:0d:b4:66:29:11:cb:2a:69:80:07:15:ce:85:af:
                    bf:e5:28:bf:87:a7:06:fa:19:a0:b3:6e:78:ce:65:
                    1e:b9:48:b8:0c:78:52:5a:1e:0b:37:a3:25:3d:9e:
                    f2:ce:65:4a:5e:d5:7b:02:9c:87:41:4b:73:26:80:
                    09:2b:0e:18:8b:0a:c6:be:ad:97:87:63:10:05:11:
                    59:69:d8:c9:e3:59:93:2c:e1:3e:ae:f0:ed:61:e7:
                    35:f9:35:43:d0:f1:8e:8a:3b:6f:cb:9e:a5:d2:12:
                    b9:13:48:c6:94:85:ef:69:48:02:9f:1b:00:e6:59:
                    36:2b:60:fc:1a:ea:82:a5:c8:b1:21:06:1f:fc:8a:
                    e6:f3:f7:7c:2a:17:3a:da:cb:7e:90:04:79:b6:90:
                    ae:b2:c4:d1:09:f8:0a:97:7b:c3:bf:64:c7:e6:8e:
                    76:8e:ae:34:8d:0f:14:42:e1:b9:81:2d:47:ba:e2:
                    f2:d8:4d:bd:1d:f8:34:af:e2:d9:97:02:ea:39:73:
                    75:64:5e:c2:ce:a1:bb:bc:c2:37:e4:e6:1e:1c:47:
                    7e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:81:F3:E8:EA:DA:8E:41:E5:46:B6:74:DF:12:49:15:89:92:6E:2A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/BIHz6OrajkHlRrZ03xJJFYmSbio.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2800::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:61:0a:d9:77:4e:93:59:49:30:0e:5f:bd:b4:c9:fe:63:93:
         af:7f:33:14:11:2c:dd:f5:20:17:83:63:57:1d:87:b7:db:df:
         e0:16:c2:82:02:2d:58:7a:cf:d8:a7:b1:d8:6b:e5:ae:d4:6f:
         02:3c:20:8d:88:78:2a:d3:fa:64:87:57:a2:76:9b:6c:ac:e6:
         e1:8e:bd:09:60:5e:e2:f9:b6:c3:0a:29:25:7d:8d:8d:85:73:
         7f:81:b2:c2:a3:60:5f:d1:c4:52:5e:04:17:dd:c8:6f:1e:6b:
         0b:34:98:51:ae:8b:65:9c:ee:78:5f:d4:7f:26:29:b3:cf:12:
         ab:25:85:30:26:52:83:34:e1:0d:83:75:f2:04:79:4b:1e:7a:
         60:2b:c8:c2:06:3b:e6:03:0d:36:aa:08:c9:5f:fb:a9:46:09:
         38:19:6f:52:89:7f:b5:9f:bb:ac:ae:26:b5:73:fa:86:84:82:
         e2:cd:73:8c:04:3a:f8:ee:bd:9c:86:74:82:49:bf:d1:e3:f4:
         4a:da:4f:3a:96:e0:75:c4:17:4e:ad:01:e7:18:81:1d:2d:5b:
         4b:f2:fc:98:28:fa:e3:55:d4:5c:64:41:62:31:ab:ed:60:7f:
         73:11:87:37:0b:6f:51:95:b8:6d:cc:de:74:b2:20:4a:8c:ee:
         9c:52:2f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org