Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/GWjqPVZAkjrY-ay96UrUgOgdV14.roa
File:                     GWjqPVZAkjrY-ay96UrUgOgdV14.roa (raw, json)
Hash identifier:          zpyzzdpi8M/ULPz558MsNxK8FXB5hqggK+Y3uBTv7OI=
Subject key identifier:   19:68:EA:3D:56:40:92:3A:D8:F9:AC:BD:E9:4A:D4:80:E8:1D:57:5E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       52
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/GWjqPVZAkjrY-ay96UrUgOgdV14.roa
Signing time:             Tue 30 May 2023 16:04:21 +0000
ROA not before:           Tue 30 May 2023 16:04:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:dc00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=1968EA3D5640923AD8F9ACBDE94AD480E81D575E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c1:5f:5c:d7:dd:07:33:99:ed:13:87:ec:67:
                    ba:0c:cd:81:d0:1b:19:b4:ac:40:c8:34:65:cb:60:
                    4f:d4:49:14:af:1f:11:9f:b8:42:20:c1:ac:05:17:
                    ce:d1:43:90:19:2d:44:b7:a9:ca:1a:b5:eb:97:94:
                    d5:d9:73:1b:6c:c4:b2:f2:aa:b1:36:c9:58:29:2e:
                    45:09:65:9c:c8:31:8c:2a:ad:0b:f3:95:b3:e3:0e:
                    0e:dc:a9:7a:40:b0:23:c1:43:20:fb:94:76:8f:df:
                    49:a9:79:57:6f:a9:e1:9c:cc:13:cb:f2:82:12:a1:
                    75:22:ef:39:12:1a:87:93:67:06:0c:0a:21:c7:1b:
                    ed:e7:f4:5f:cc:29:52:79:c9:ff:14:4b:94:43:61:
                    07:a5:46:c4:3c:29:ef:66:9c:ef:60:f3:35:40:a1:
                    5c:ae:48:6b:9f:96:23:a8:a1:f1:aa:6f:5a:21:e6:
                    71:f3:1a:9a:02:fe:22:0e:ce:ea:2c:34:66:7f:c4:
                    d4:c8:d8:26:ca:ce:45:82:55:75:95:89:e5:96:a1:
                    b4:ef:0f:19:a9:81:4d:08:45:56:f2:76:52:20:34:
                    d6:66:0f:c0:59:08:93:53:fd:5d:01:3f:1c:e2:32:
                    0e:e9:34:27:d3:21:cb:60:40:79:87:00:0d:92:a5:
                    aa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:68:EA:3D:56:40:92:3A:D8:F9:AC:BD:E9:4A:D4:80:E8:1D:57:5E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/GWjqPVZAkjrY-ay96UrUgOgdV14.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:dc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:69:99:45:99:03:72:82:92:d3:df:cf:8f:4a:40:6c:7e:49:
         79:fb:87:fa:d3:84:8b:4b:f3:0a:21:2c:be:9f:d5:17:5a:23:
         4f:93:5f:1f:ac:9f:5f:4b:34:17:48:5a:ad:c1:d5:ac:ae:29:
         a3:8c:d1:c0:82:b8:a5:41:27:c7:62:44:97:bb:c8:e8:42:e3:
         e6:b5:04:d8:50:5f:73:f7:76:73:82:4d:4f:ab:c6:fb:fa:ee:
         a5:e7:3c:bc:b5:39:65:f9:85:06:84:e2:f2:a1:1f:ef:5a:fc:
         50:dc:38:f0:fc:6d:5a:91:13:61:fb:a9:d8:b2:4f:71:f4:4a:
         dd:4b:f7:1b:8d:6d:04:ec:8e:b8:05:c5:a2:1a:e9:a0:d1:dd:
         c2:a1:85:c9:b5:ee:8b:0f:d5:3f:9c:0e:dc:78:e8:39:d8:6b:
         24:61:14:e5:e6:03:07:fc:d3:00:0f:8b:f3:14:42:79:91:17:
         e7:ea:1f:72:c6:56:af:ae:5f:d0:cf:6d:b2:45:1a:79:52:7f:
         4a:24:dc:93:b6:a1:3a:2c:b2:3e:65:dc:48:f1:e7:d6:95:52:
         d4:b3:dc:be:f4:22:c6:45:c6:92:5a:c5:af:6b:c6:bb:37:a2:
         19:ca:39:8e:cf:6f:41:b9:76:c5:05:56:f1:87:82:11:e3:82:
         9e:c8:7a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org