Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Cxng2k0MCvIxFhSb45-Sk5XQp-4.roa
File:                     Cxng2k0MCvIxFhSb45-Sk5XQp-4.roa (raw, json)
Hash identifier:          j3voUvlHqGPxqF0XEL8RZNCzrs0n+Jf413ZNwmzlqys=
Subject key identifier:   0B:19:E0:DA:4D:0C:0A:F2:31:16:14:9B:E3:9F:92:93:95:D0:A7:EE
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       70
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Cxng2k0MCvIxFhSb45-Sk5XQp-4.roa
Signing time:             Tue 30 May 2023 16:06:20 +0000
ROA not before:           Tue 30 May 2023 16:06:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:bf00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=0B19E0DA4D0C0AF23116149BE39F929395D0A7EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1d:14:74:62:de:20:c7:fd:df:f9:63:0b:6f:
                    5e:01:95:dd:c7:d8:a2:30:58:73:3a:37:28:f8:70:
                    cb:0c:ae:87:c3:85:93:11:63:7d:c9:56:5b:10:75:
                    ed:f5:6d:00:e2:1e:eb:55:fe:15:2b:e2:fe:af:f4:
                    75:f8:4b:7a:7e:74:c5:51:be:ff:93:42:50:ed:31:
                    34:9c:c1:57:97:55:c2:ac:25:65:02:8c:cd:fd:85:
                    98:a9:72:de:19:8f:df:d5:00:02:8c:ea:59:06:21:
                    14:bf:a0:a4:ec:54:29:47:d3:4d:39:09:96:2b:89:
                    9e:aa:fe:3a:1c:93:94:ee:10:7d:f7:08:f9:56:1d:
                    30:0c:f7:be:a5:81:0b:43:67:18:c4:82:0d:44:46:
                    a4:80:6b:06:78:55:ce:a6:67:8c:fd:62:6c:ff:62:
                    69:71:07:d9:69:8f:da:4b:6d:a2:41:13:c8:3e:63:
                    ae:a4:28:46:27:c7:5b:7a:6b:45:2f:26:d2:ed:f4:
                    6d:74:b9:08:75:cd:8f:39:db:b6:fb:ae:ba:ce:a9:
                    19:06:e1:3b:b4:0e:05:25:9f:03:a7:47:e6:72:ca:
                    0c:3b:6d:ba:a8:f2:2d:bc:cb:a3:c7:be:c8:7c:07:
                    a2:32:cb:e8:0f:10:3e:1a:38:c4:e8:4e:c5:30:49:
                    d5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:19:E0:DA:4D:0C:0A:F2:31:16:14:9B:E3:9F:92:93:95:D0:A7:EE
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Cxng2k0MCvIxFhSb45-Sk5XQp-4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:bf00::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:b7:1a:45:c0:23:67:2c:e7:3c:e3:8e:dc:2f:73:36:44:b0:
         57:95:2c:43:6b:e8:23:d9:7f:b6:6c:dc:24:52:7d:51:1b:7b:
         ed:d1:1c:90:ea:41:d1:bd:10:98:3a:9e:92:23:f6:14:50:40:
         27:d7:f3:bf:1d:d4:f8:74:dd:1f:5a:d5:2d:12:61:7e:dd:0e:
         18:f2:16:69:4f:2f:7b:c6:b5:c1:3c:d0:96:64:77:e0:c6:96:
         06:c7:32:9a:4e:e7:95:c9:18:10:19:f5:00:21:98:17:09:85:
         e8:f5:91:1d:99:d9:01:c9:ad:4a:f5:d8:21:fb:ac:15:c9:fd:
         d2:41:9f:64:6f:60:ba:23:ab:a5:cd:aa:2d:c9:c3:e5:d0:c9:
         a9:f1:87:16:ec:71:49:5d:ba:ea:94:2a:7d:17:61:48:f3:b5:
         d2:6f:25:a7:f1:29:4d:8d:24:f5:4a:77:e4:54:be:22:43:c3:
         c0:d4:bf:2c:81:2a:26:33:a5:db:8b:60:b2:65:e2:b9:e8:25:
         98:66:92:67:9c:c4:91:5d:9e:71:a9:01:2c:e7:18:d3:52:f3:
         ca:35:0d:81:56:c8:14:48:06:53:32:2e:26:04:1a:27:23:eb:
         e4:33:c0:53:76:dd:9b:04:08:05:ae:5c:0c:d1:05:1c:c8:2e:
         b8:4b:dc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org