Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/I37lO0c-Vejr7HYf9D2IehPbwME.roa
File:                     I37lO0c-Vejr7HYf9D2IehPbwME.roa (raw, json)
Hash identifier:          F7ISCPe/6PfOr/J1JVWolY84cULMgC9qaKvxYVT/gyI=
Subject key identifier:   23:7E:E5:3B:47:3E:55:E8:EB:EC:76:1F:F4:3D:88:7A:13:DB:C0:C1
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01F7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/I37lO0c-Vejr7HYf9D2IehPbwME.roa
Signing time:             Tue 30 May 2023 17:40:18 +0000
ROA not before:           Tue 30 May 2023 17:40:18 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:18 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=237EE53B473E55E8EBEC761FF43D887A13DBC0C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:21:a5:9a:fa:98:36:9c:b9:7c:6f:c7:bd:52:
                    56:99:f5:e9:2c:0c:43:9c:c8:b7:80:f2:43:19:04:
                    93:d1:9d:dc:30:91:f0:6e:71:a8:f0:51:9b:06:06:
                    8f:d8:5a:30:1b:cc:2b:09:09:03:15:ad:a4:3d:78:
                    fa:44:c8:0c:79:2b:88:54:4c:ec:12:de:9d:9b:91:
                    d2:fa:91:f1:06:dc:da:17:82:b9:1d:07:43:6a:24:
                    ea:3c:04:14:fe:df:8c:f5:42:a3:18:3e:86:64:90:
                    a3:97:8f:e3:04:da:1a:4d:d9:8b:a9:83:f1:bb:9e:
                    2a:13:51:45:d7:85:7f:b2:7e:c5:4b:b7:ce:a4:5f:
                    52:bc:78:f0:05:8b:73:fb:06:32:0e:42:63:de:14:
                    62:9e:cb:9f:62:95:70:2e:e2:f2:d4:72:d0:f3:18:
                    25:d0:54:13:fb:8d:f3:59:84:3d:41:4e:3c:04:fb:
                    a0:9e:cf:b3:9a:02:be:f2:11:3f:14:3b:ee:db:52:
                    d1:00:3c:53:97:c8:32:6d:b1:50:36:16:4e:13:e8:
                    b1:fe:c3:1f:e4:fb:8d:1e:7b:e4:85:86:ea:6f:9c:
                    61:38:0f:fb:67:da:c7:93:c6:68:18:e7:89:bc:79:
                    50:28:41:40:72:5e:d0:04:04:f0:df:8b:c4:e2:13:
                    7d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:7E:E5:3B:47:3E:55:E8:EB:EC:76:1F:F4:3D:88:7A:13:DB:C0:C1
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/I37lO0c-Vejr7HYf9D2IehPbwME.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b800::/40

    Signature Algorithm: sha256WithRSAEncryption
         b7:ee:84:74:66:2e:56:ef:d5:31:c5:05:8f:bd:86:7c:7c:db:
         ab:70:45:35:16:53:9d:3c:f7:d5:ad:05:f5:31:c5:12:f8:ae:
         a3:34:72:03:bd:62:f5:72:65:2f:9a:d8:c6:45:22:7a:1a:90:
         5b:48:4e:b5:78:c2:0c:31:02:3b:c4:83:2b:53:df:f9:a2:00:
         33:8d:6a:62:27:2b:a3:f9:87:67:80:64:3f:d2:ab:65:be:76:
         0b:82:e7:2f:e7:51:61:33:6d:77:99:a6:03:8d:2a:ed:32:b4:
         3f:8f:90:da:17:55:27:77:41:bc:4b:1b:23:61:ed:7b:48:17:
         cd:85:b1:c2:59:b8:5c:71:17:c4:95:5f:c1:8e:ff:6c:43:7c:
         24:e3:c4:55:38:25:aa:02:1c:3f:35:e4:13:00:4e:df:49:6b:
         06:7d:de:73:c5:00:d4:f8:f6:19:1a:d1:97:da:36:6c:ff:bc:
         b4:ab:27:c8:83:96:23:dd:d5:b7:d1:9e:43:23:05:ba:36:e6:
         46:6c:d6:cf:07:51:5d:d8:fa:9f:a3:97:77:45:1d:e7:9d:8f:
         f8:0d:d2:ac:58:db:9e:3f:4d:7f:87:34:83:ed:a0:7f:f1:05:
         5f:c9:77:85:b2:11:13:7e:d9:f4:bc:1c:e4:8e:98:e0:a9:c8:
         91:92:80:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org