Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HdAJQoaD7nn9-DdKTTPhSXXEKNM.roa
File:                     HdAJQoaD7nn9-DdKTTPhSXXEKNM.roa (raw, json)
Hash identifier:          MIAPyMr96vS7VuLCCcCQW3Ku9WlyHL8fGROHY6PjUlw=
Subject key identifier:   1D:D0:09:42:86:83:EE:79:FD:F8:37:4A:4D:33:E1:49:75:C4:28:D3
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       FE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HdAJQoaD7nn9-DdKTTPhSXXEKNM.roa
Signing time:             Tue 30 May 2023 16:12:30 +0000
ROA not before:           Tue 30 May 2023 16:12:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:cb00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=1DD009428683EE79FDF8374A4D33E14975C428D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:64:d2:43:ec:f7:59:3d:ed:51:95:33:f1:
                    59:c4:de:01:ce:f7:5b:9f:bd:05:43:4d:05:16:0d:
                    2f:2d:43:fe:d2:df:98:f5:fd:ff:3d:94:b2:8a:7b:
                    f2:8d:c3:95:ba:e6:cd:dc:27:28:fd:18:98:0c:37:
                    e3:a1:a1:c1:a4:a6:91:32:0d:6e:d7:31:6e:69:5c:
                    2b:4c:c3:40:6a:dc:f6:e5:82:5e:a5:3d:e4:77:49:
                    31:32:20:16:09:25:e9:29:cc:c7:0f:b4:f1:d2:e1:
                    d1:6a:58:df:72:8d:35:bc:79:fb:bd:52:3f:39:7a:
                    25:d0:58:5c:dd:8d:db:b7:58:44:0d:c4:cb:ba:8d:
                    c5:65:c6:fd:75:57:dd:45:62:eb:c4:8d:18:00:bf:
                    0a:24:fb:43:be:6b:7a:2a:9b:b8:ac:04:1c:67:d5:
                    51:27:16:3f:bf:8e:c3:a1:bf:de:00:60:28:94:38:
                    cc:04:89:5a:83:5d:fd:9a:df:26:8a:69:9c:36:cb:
                    89:1c:84:a2:71:ed:8a:25:40:1a:a3:65:45:30:65:
                    bb:f1:cd:72:82:3e:0a:4d:99:ba:4d:e3:f6:b5:6c:
                    0b:f7:e8:91:a9:cc:c5:a3:c6:56:a0:e9:da:38:68:
                    02:e2:f5:c1:16:dc:be:0a:98:69:bc:01:ac:92:cf:
                    89:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D0:09:42:86:83:EE:79:FD:F8:37:4A:4D:33:E1:49:75:C4:28:D3
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HdAJQoaD7nn9-DdKTTPhSXXEKNM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:cb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:b3:55:ce:2c:2e:cb:4a:41:f6:dc:ff:ae:e2:cb:b0:04:1a:
         25:b3:19:40:44:76:80:d4:ea:58:5a:f7:72:8c:9b:c3:52:18:
         ae:9c:fe:a3:80:d6:d3:85:ad:72:6a:86:38:f1:8a:57:19:db:
         a1:ee:1a:12:cd:b2:6f:a3:3f:48:52:de:a4:b1:b3:8f:7a:7a:
         12:93:0a:00:cc:43:f5:54:9a:4d:6d:e6:6e:11:fd:20:75:ad:
         b6:33:fc:85:3e:36:4f:53:99:e8:5c:74:0a:1f:52:6c:4d:ee:
         b9:bb:6c:0c:75:48:d7:cd:1c:a6:f7:80:d9:66:36:eb:05:18:
         7c:32:d8:c8:8b:07:0d:98:dd:c1:42:93:3a:4d:1d:57:3d:0b:
         f0:f9:3a:54:65:68:e8:61:24:28:6c:22:e7:bd:b7:22:cb:d9:
         96:0b:05:97:e6:09:c6:24:f4:ad:41:fc:d7:1d:43:6c:4e:e3:
         4b:e2:d8:b8:73:f4:a0:dd:8b:e4:96:56:40:69:49:00:91:d7:
         0e:9e:b4:2f:4f:b2:ef:84:94:74:b8:96:2e:18:2e:b7:7a:e7:
         b8:ae:cb:8a:81:0a:7f:eb:28:46:03:4d:b5:cc:7b:45:9c:fe:
         00:5e:55:80:6e:5f:e4:e1:91:17:f5:35:8b:cd:78:f6:84:a4:
         2a:06:3f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org