Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/J1JU95n95nVJpVzWUezGjfvamOg.roa
File:                     J1JU95n95nVJpVzWUezGjfvamOg.roa (raw, json)
Hash identifier:          QEBsNzG4Upeoas6xt0y1Ud72Vc0maLOf5qszwEiLFtc=
Subject key identifier:   27:52:54:F7:99:FD:E6:75:49:A5:5C:D6:51:EC:C6:8D:FB:DA:98:E8
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       DC
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/J1JU95n95nVJpVzWUezGjfvamOg.roa
Signing time:             Tue 30 May 2023 16:10:24 +0000
ROA not before:           Tue 30 May 2023 16:10:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3500::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=275254F799FDE67549A55CD651ECC68DFBDA98E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:01:95:09:67:ba:2b:e6:fe:0d:00:84:2a:
                    81:5c:78:46:7c:08:19:c8:1f:d3:0a:5d:25:d8:fd:
                    6f:da:0c:ea:8f:65:a9:45:7c:98:0c:aa:31:34:e8:
                    c2:86:54:ae:5f:61:40:08:43:67:e3:b6:b5:8a:d7:
                    e5:26:e8:3f:36:a3:20:93:fd:65:84:cd:6c:c2:71:
                    7c:59:71:00:68:c4:f7:ad:7f:c2:b5:77:1b:73:e0:
                    08:03:f5:18:ea:13:22:cc:78:cd:b4:c6:09:6f:e4:
                    f8:32:f4:43:18:98:e1:d9:57:1f:8c:59:df:9f:1f:
                    19:ac:56:d8:86:7f:af:8a:bf:65:ff:e5:e3:c9:de:
                    0a:05:69:53:29:ee:60:df:29:bb:d6:ce:65:42:d0:
                    16:68:0c:79:a9:4d:bc:0c:b8:ba:d3:cb:11:fe:e0:
                    80:71:83:ee:1c:b4:8f:fa:91:3f:dc:ae:5e:26:c4:
                    53:98:7e:02:c0:e9:6b:5b:23:0d:b3:eb:a2:2a:45:
                    ca:8f:26:2e:fd:75:22:13:4d:bc:b2:45:e9:f6:40:
                    87:14:f9:8c:3d:35:4f:c6:05:9b:a6:ed:9c:35:68:
                    0e:40:56:63:67:8c:1d:f2:eb:bf:81:47:e1:86:d9:
                    2e:08:2a:51:e1:9b:98:30:32:e9:55:a8:fb:b3:c2:
                    2d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:52:54:F7:99:FD:E6:75:49:A5:5C:D6:51:EC:C6:8D:FB:DA:98:E8
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/J1JU95n95nVJpVzWUezGjfvamOg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3500::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:d2:ab:5b:e9:c7:85:13:ac:3a:a3:45:d7:54:e8:a2:63:4b:
         77:8c:cd:f2:10:94:b2:ab:f5:d0:01:d2:58:c1:47:d3:7f:df:
         2f:15:13:f5:72:5d:78:00:f5:0a:70:09:5c:65:93:a8:49:64:
         45:c2:bb:a6:e0:6a:a9:06:70:5a:da:50:c9:d2:5a:7d:bb:07:
         7c:ec:7d:11:6b:d3:98:1c:65:5d:07:2b:f0:0e:ab:d3:ab:29:
         0b:fd:1a:1a:9d:34:60:5f:61:bb:9a:07:ad:d8:b4:d6:ed:7f:
         12:a1:08:28:d7:b4:2f:75:49:07:11:cf:45:a5:c4:a5:88:ab:
         4e:d0:3d:51:d9:c5:78:0d:2d:db:a4:c0:ec:73:9e:6e:be:2b:
         c6:9d:ab:c1:af:c5:50:99:bc:d9:e2:74:26:47:47:ed:5a:d1:
         fa:a1:93:07:61:eb:5b:86:4f:82:04:ea:c1:27:77:13:48:73:
         89:ad:50:da:cc:0f:7a:19:8e:b5:26:c4:aa:a4:ea:83:4f:58:
         ec:6c:5b:06:3d:45:71:9d:9f:d5:9a:20:1b:ee:75:85:2a:55:
         0d:19:26:6f:61:28:ae:32:12:21:c4:18:c5:27:7e:8b:b5:af:
         69:9e:de:9b:d1:ab:be:f3:c5:ac:b0:9d:c1:9a:58:d9:ca:ea:
         22:c5:09:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org