Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/EbHlaqqB-s0bgM9Hjm-nAwAQLsc.roa
File:                     EbHlaqqB-s0bgM9Hjm-nAwAQLsc.roa (raw, json)
Hash identifier:          NdTPZb8wlVdBVOHK8lLzOkpUT9cPCgQVw2jtP0+kVNU=
Subject key identifier:   11:B1:E5:6A:AA:81:FA:CD:1B:80:CF:47:8E:6F:A7:03:00:10:2E:C7
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       011A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/EbHlaqqB-s0bgM9Hjm-nAwAQLsc.roa
Signing time:             Tue 30 May 2023 16:14:19 +0000
ROA not before:           Tue 30 May 2023 16:14:19 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:fc00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:14:19 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=11B1E56AAA81FACD1B80CF478E6FA70300102EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a9:41:45:d3:39:2a:77:ba:9d:d8:fe:05:fc:
                    07:02:b3:54:8c:94:3d:cc:2a:ad:31:8f:a5:5b:eb:
                    e7:bf:61:fb:36:f5:32:eb:5c:e5:97:fd:ba:50:72:
                    b8:c5:67:47:ff:2f:b1:c1:a7:90:31:fd:38:47:0d:
                    8b:bb:c9:69:ff:c2:82:e2:3d:01:bc:f0:dd:36:b2:
                    66:ff:f9:0e:bf:40:ef:16:23:93:06:92:47:34:9d:
                    b2:b8:99:29:1b:fb:bc:98:6d:89:81:c3:5b:bc:b1:
                    a2:4e:13:f9:c8:cc:24:53:0f:15:43:55:d1:8b:9c:
                    69:51:4f:2c:14:4e:bb:18:51:64:fe:4b:b0:f0:d3:
                    e5:ff:72:a7:b2:5a:94:b5:83:d2:7c:ed:b9:2a:b1:
                    29:64:3f:e8:90:68:57:d0:84:14:cf:cb:82:16:15:
                    84:8d:a8:d6:69:57:b5:ab:9c:22:ca:f2:f8:01:e2:
                    8d:56:ac:ce:59:71:a2:cf:b8:ac:fe:e5:3e:d9:85:
                    24:d8:33:1c:62:2f:a9:3c:b2:ed:b5:13:a7:ed:be:
                    05:cc:e5:a4:42:3f:80:76:97:93:a6:cc:55:57:df:
                    7e:36:11:66:e6:42:1c:0e:3b:90:f7:45:f9:61:f5:
                    3f:96:15:0f:5b:db:bc:ab:a1:09:24:bc:ba:b1:90:
                    ea:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B1:E5:6A:AA:81:FA:CD:1B:80:CF:47:8E:6F:A7:03:00:10:2E:C7
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/EbHlaqqB-s0bgM9Hjm-nAwAQLsc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:fc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5d:63:d4:6e:9b:aa:2e:fd:05:1f:49:2a:4d:8e:a3:8b:ad:0e:
         58:64:36:69:67:cf:4b:3d:07:c5:73:fe:c8:8b:b0:81:c2:0a:
         d7:f0:a3:7a:20:f6:54:27:0d:b9:13:78:f2:ee:a8:b3:21:ee:
         82:30:47:72:b7:85:86:89:2b:34:18:dd:13:34:ad:0d:5f:97:
         f6:7e:31:d4:c2:5d:fb:36:5c:03:3b:3e:d8:7d:fe:4c:ce:bf:
         90:81:83:79:b3:67:ca:7e:3e:aa:cd:62:37:ec:9a:8a:ab:a0:
         77:26:96:fc:80:ce:54:1d:9c:dc:5f:8a:ee:61:3d:14:c5:2b:
         bf:74:e1:92:c8:35:95:05:1b:cc:27:97:88:5a:86:19:da:9d:
         80:29:69:60:be:e9:f7:0f:83:96:4a:40:00:5a:e8:20:32:0d:
         33:61:8f:c4:e5:81:dd:ef:37:cf:90:f9:9a:30:d4:1d:f1:bd:
         e9:2f:50:f7:25:88:c6:1b:5b:98:5e:41:38:99:4b:85:37:de:
         59:a8:88:7a:26:c0:1c:0c:9d:e7:17:2f:91:7b:c0:87:c9:e2:
         69:22:c9:4a:cc:62:a5:06:3d:df:ae:7d:68:6b:c1:0b:fd:c7:
         5e:bd:8f:de:91:b1:d2:02:a5:57:c0:9a:a5:b1:e6:75:a5:0b:
         6f:89:bc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org