Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HhNcSydMW0XoATwbOSDv7RBvxpA.roa
File:                     HhNcSydMW0XoATwbOSDv7RBvxpA.roa (raw, json)
Hash identifier:          ZgUqFuNRGGPJn0r1QX365Yt+v+JT7jSoZNP7K/NpkOY=
Subject key identifier:   1E:13:5C:4B:27:4C:5B:45:E8:01:3C:1B:39:20:EF:ED:10:6F:C6:90
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       A2
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HhNcSydMW0XoATwbOSDv7RBvxpA.roa
Signing time:             Tue 30 May 2023 16:08:20 +0000
ROA not before:           Tue 30 May 2023 16:08:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6c00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=1E135C4B274C5B45E8013C1B3920EFED106FC690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:d9:bb:8b:64:ce:da:79:77:03:05:e8:a0:
                    f1:59:9c:94:f0:f6:1b:df:c0:95:1c:8c:88:40:0f:
                    ff:46:fd:dd:bf:1c:98:18:66:eb:93:dd:a9:df:a4:
                    6e:44:e4:49:28:92:53:02:88:04:68:da:21:dc:a9:
                    ed:8a:00:5b:6b:8d:c4:0c:bc:8c:1b:29:03:46:9b:
                    89:c2:a6:64:09:30:50:a4:0a:c3:8f:1d:2c:19:f3:
                    c7:f9:d0:26:9e:e4:d5:c2:e2:0f:28:01:3d:39:b5:
                    2b:b9:1b:45:24:7d:8c:a1:fc:f6:e7:16:34:cf:f4:
                    ef:4d:3a:e5:0a:30:b8:30:12:5a:4b:31:3e:e2:09:
                    82:ec:38:bf:2b:db:79:9b:b3:aa:f4:73:ba:5d:a9:
                    30:67:69:14:c4:4d:63:42:68:6f:80:bb:ba:60:ca:
                    be:b4:16:10:77:e4:b9:d2:87:e8:c4:24:3b:35:dc:
                    2e:f9:dd:60:f2:2f:f9:54:62:bc:55:2f:7d:e1:b2:
                    36:50:e4:9d:0a:dd:35:7f:2a:42:e0:a6:1b:f9:af:
                    ca:e5:8d:9b:bc:37:f4:95:7d:c4:4b:31:2b:aa:a0:
                    ba:21:db:40:ad:3a:0e:38:5a:72:de:ad:de:1c:8b:
                    d8:f8:76:6f:22:0d:30:4b:62:3e:d6:66:47:60:ad:
                    ce:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:13:5C:4B:27:4C:5B:45:E8:01:3C:1B:39:20:EF:ED:10:6F:C6:90
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HhNcSydMW0XoATwbOSDv7RBvxpA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ab:ae:d1:0b:4b:c5:e8:39:6a:4e:1c:f4:27:ba:db:06:38:f1:
         76:47:63:08:72:d5:14:03:16:1f:84:79:05:9d:e3:2c:52:74:
         a1:70:18:9f:e9:cd:2e:65:6b:d0:d0:a5:7b:74:28:11:ef:66:
         16:38:e3:d5:a5:2a:80:95:18:86:3a:62:1c:41:45:81:d7:e9:
         80:08:24:e6:d9:48:80:b6:40:08:c2:9c:b2:01:58:d1:51:0d:
         39:d7:a0:6a:4d:60:fa:05:51:72:e5:2e:de:19:df:f1:64:62:
         08:d4:33:f1:f4:c1:d7:8f:70:b1:73:28:77:d5:55:41:c5:e6:
         c4:bf:da:ad:85:c0:14:d3:63:ae:10:10:8f:78:16:d2:2c:b2:
         53:37:dd:7a:32:53:31:b3:3e:62:b8:79:9a:f0:ca:e6:20:81:
         36:2c:7a:8f:8f:48:1a:e9:92:95:9f:fa:33:fb:ff:8a:f6:12:
         92:44:a3:f1:a5:73:da:b3:f9:01:a8:7e:78:f5:12:82:3d:e7:
         4f:de:84:5a:11:3e:14:a0:91:49:10:d0:51:a6:66:5e:f8:8b:
         c5:96:48:8e:bf:2c:f1:86:49:88:3b:7b:06:0f:d3:2b:aa:71:
         40:cb:14:94:b7:54:3a:a5:9d:df:94:40:0a:9b:da:8a:28:3c:
         d5:1b:12:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org