Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FRbtPW-Z2FdbnRBbx5Gx3SNZ4eg.roa
File:                     FRbtPW-Z2FdbnRBbx5Gx3SNZ4eg.roa (raw, json)
Hash identifier:          e/j/KMwq6tHBwhtV7VUJDvoTQD6/+QrRX+wzGv++34I=
Subject key identifier:   15:16:ED:3D:6F:99:D8:57:5B:9D:10:5B:C7:91:B1:DD:23:59:E1:E8
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0107
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FRbtPW-Z2FdbnRBbx5Gx3SNZ4eg.roa
Signing time:             Tue 30 May 2023 16:12:33 +0000
ROA not before:           Tue 30 May 2023 16:12:33 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7500::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:33 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=1516ED3D6F99D8575B9D105BC791B1DD2359E1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8f:53:2a:1b:c3:39:61:68:df:97:43:49:2d:
                    f2:0b:df:2a:9c:38:90:4b:11:a7:19:d2:a2:94:4a:
                    92:8f:35:bd:66:6d:6d:77:1a:f4:19:f9:94:0d:a1:
                    2f:6d:41:fc:a8:f8:4f:34:a1:b0:22:1e:2c:57:c0:
                    a9:63:15:f1:41:0d:39:4e:e0:3a:a0:0a:a7:41:df:
                    ac:fa:98:32:10:b2:f2:7e:01:81:8f:01:c2:22:76:
                    73:b9:1c:14:0d:db:9d:80:49:5b:84:45:e7:db:c4:
                    2b:dc:75:13:6d:52:e0:4a:65:f6:83:a7:4d:fc:45:
                    fd:87:2a:d0:6f:68:02:92:f5:f1:9a:57:6a:ff:b3:
                    33:25:01:80:63:fb:10:66:f0:c3:cc:33:4e:3e:18:
                    e9:ef:0e:c6:e3:79:96:0a:57:a4:af:8c:59:b9:7d:
                    45:e8:2f:00:16:51:5f:6f:47:14:3b:13:69:21:09:
                    f2:0a:ef:06:f9:f1:63:9d:65:de:c9:11:90:d7:a7:
                    6c:f4:d2:11:8f:b7:8d:94:2e:22:64:32:e9:02:e4:
                    75:db:96:a5:bc:c4:a7:67:69:c8:72:49:51:91:0e:
                    bd:29:28:15:45:83:4f:4c:48:0c:59:70:58:76:78:
                    56:ca:57:01:c9:90:f1:9d:ea:e0:05:6a:eb:32:11:
                    86:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:16:ED:3D:6F:99:D8:57:5B:9D:10:5B:C7:91:B1:DD:23:59:E1:E8
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FRbtPW-Z2FdbnRBbx5Gx3SNZ4eg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7500::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:73:05:64:5a:34:97:b7:82:ca:8c:15:0d:b7:e9:e2:09:75:
         2a:86:64:d3:08:45:66:94:bf:d2:6d:16:a6:37:f3:41:83:60:
         50:32:77:41:4d:ba:15:5e:4f:76:c1:74:a4:41:ea:ed:ef:1d:
         b8:a2:89:c1:04:a5:aa:c4:a3:2a:25:7f:e7:7a:d9:7a:71:ba:
         f5:70:19:49:62:56:26:43:59:b0:e0:c9:25:47:a2:71:65:5c:
         d0:33:e8:3a:00:56:69:ce:f7:e6:f3:b2:de:66:7b:bf:c8:e9:
         a5:61:5b:ce:b7:5b:d1:c4:e5:f0:3d:0a:92:3f:4c:d8:95:82:
         9a:27:4e:9e:4f:92:c8:1b:fe:c9:5e:22:7d:51:66:38:d3:0f:
         40:30:cf:95:40:41:49:dc:98:19:f1:b6:e8:8f:9a:51:ad:b9:
         ab:0b:fb:a4:1d:c6:42:3c:8c:81:2b:58:66:44:fa:78:8b:16:
         d7:db:a7:0d:bc:00:de:63:6a:d9:61:59:92:c6:ec:95:8b:2b:
         5c:b4:22:58:1e:56:13:ff:fa:56:08:34:d0:3e:ce:dc:b5:07:
         ce:d9:cf:1d:ff:e9:22:9f:27:4a:c9:57:0e:20:e1:33:fd:30:
         b1:a8:16:5e:15:31:8d:e0:1b:62:50:54:32:e9:ac:b1:8d:3c:
         82:8d:8b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org