Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/I8WBTP0o22_7nH--6-FzkFzN4IE.roa
File:                     I8WBTP0o22_7nH--6-FzkFzN4IE.roa (raw, json)
Hash identifier:          hNr+Xmg+HmzIO4P0bcsTXCPdaN7i7kdUwwXfz+geA5k=
Subject key identifier:   23:C5:81:4C:FD:28:DB:6F:FB:9C:7F:BE:EB:E1:73:90:5C:CD:E0:81
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0206
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/I8WBTP0o22_7nH--6-FzkFzN4IE.roa
Signing time:             Tue 30 May 2023 17:40:24 +0000
ROA not before:           Tue 30 May 2023 17:40:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9a00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=23C5814CFD28DB6FFB9C7FBEEBE173905CCDE081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a5:6b:e4:7b:eb:24:6f:fb:e7:1d:9a:aa:ef:
                    33:ab:2a:60:f6:4d:2c:2b:73:e0:5d:98:d8:9e:ef:
                    69:e3:ca:0c:27:ac:aa:85:88:a0:b3:e4:58:61:b8:
                    c3:cd:ae:ac:97:6a:2c:25:84:82:bd:2b:bf:dc:b9:
                    f7:59:34:18:2e:6c:c6:67:20:f1:fd:7d:46:70:f6:
                    b3:93:ce:00:df:80:93:8d:d7:bd:63:95:7f:d5:ef:
                    72:b2:ce:5c:bd:97:38:4b:e5:d8:cc:15:d9:6e:99:
                    e7:83:b7:0e:5d:c7:03:54:81:93:81:08:d0:f7:37:
                    d3:76:30:e3:57:05:87:0c:cd:b4:e6:4c:9e:50:a3:
                    10:99:a2:56:3a:43:4f:7b:60:dc:6c:ea:02:fc:b2:
                    bf:8b:e0:3b:19:68:7e:c4:48:df:fd:fd:58:5f:d0:
                    19:08:0f:66:3e:94:07:79:11:82:f1:a6:cc:eb:ac:
                    a6:0d:52:5c:6e:15:ad:2b:f0:e0:f4:a2:bc:d2:55:
                    68:00:27:fc:ea:3d:c6:d4:7a:73:25:db:38:9c:97:
                    2a:3e:5a:8d:ba:c1:06:a1:5a:b4:9c:df:e8:3f:e8:
                    30:76:ae:f4:e1:a1:0d:c7:40:6f:1f:bf:00:82:63:
                    30:5a:67:f6:96:24:2a:71:c2:aa:9b:1f:df:0e:72:
                    7f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C5:81:4C:FD:28:DB:6F:FB:9C:7F:BE:EB:E1:73:90:5C:CD:E0:81
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/I8WBTP0o22_7nH--6-FzkFzN4IE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         aa:db:cb:4d:ef:13:f5:b2:d0:f6:81:3d:59:f1:3b:c0:c3:e1:
         0e:45:8f:cf:d9:a0:cd:3d:11:01:34:7f:b4:f8:5d:44:37:10:
         57:9a:e4:06:55:25:00:ff:50:2c:27:2b:c5:55:cf:c3:34:60:
         a2:de:74:d8:57:a3:7e:b9:af:8f:50:00:58:58:35:cc:b9:73:
         cb:2a:11:22:75:5c:b6:3b:fd:1b:14:9a:ca:24:b6:ea:6e:e4:
         c2:01:b0:93:90:fe:73:58:a8:2e:28:70:29:6a:cb:15:76:58:
         95:eb:f6:98:95:0f:31:84:75:8e:70:5d:5f:9e:aa:96:11:48:
         bf:1a:92:b6:c2:e5:db:cb:99:9c:c8:36:ea:4b:3b:54:71:43:
         77:0c:89:8d:f9:b8:e6:ac:c4:37:36:49:e1:b4:a1:f1:dd:ec:
         5c:d7:cc:d5:72:43:5d:7c:fe:db:84:78:d5:91:05:f7:7f:e4:
         ae:0a:79:e7:90:d3:17:f4:f6:a4:d6:37:b6:51:d0:b0:d2:cd:
         60:5b:79:11:ed:18:a6:7b:ec:f1:63:f6:2d:27:93:c0:5c:e2:
         33:49:0c:31:af:49:5b:99:23:f8:bb:86:69:99:b1:50:c9:2d:
         2e:0c:bb:2d:57:75:3b:62:ec:b1:76:d4:23:31:cb:dc:22:82:
         c2:2b:90:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org