Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LkRiKaee5ZpsyQUAYOiZWghzRWo.roa
File:                     LkRiKaee5ZpsyQUAYOiZWghzRWo.roa (raw, json)
Hash identifier:          S2weOB6z32BlfwNxV11NE+lBpBeceOlFFJXBZVCLyyQ=
Subject key identifier:   2E:44:62:29:A7:9E:E5:9A:6C:C9:05:00:60:E8:99:5A:08:73:45:6A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01A1
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LkRiKaee5ZpsyQUAYOiZWghzRWo.roa
Signing time:             Tue 30 May 2023 17:36:21 +0000
ROA not before:           Tue 30 May 2023 17:36:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4c00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=2E446229A79EE59A6CC9050060E8995A0873456A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:71:24:b0:78:df:b0:a5:6e:f8:39:15:cc:55:
                    13:e2:9d:8e:28:7e:9f:1d:8f:0f:2e:31:48:53:dd:
                    a1:ac:ae:18:cd:14:88:b5:9c:90:f8:db:ef:dd:e7:
                    24:34:bf:60:78:36:94:cb:99:39:cc:1f:54:0f:14:
                    cf:39:ba:68:82:bd:39:54:c0:60:6d:d0:60:d2:c0:
                    4b:c2:da:e0:2e:30:1b:aa:38:0d:10:e4:36:f0:35:
                    9e:78:5a:4a:0d:5d:03:5b:39:e1:3f:9a:28:4a:fa:
                    06:f1:bd:32:4e:7f:71:5b:ca:a2:22:3c:46:7e:dc:
                    fe:9c:57:69:c0:11:45:e2:ee:09:dc:5d:cf:38:9d:
                    25:65:8f:0c:c3:e6:e5:13:6c:49:86:04:68:89:9e:
                    1d:9f:1e:22:ad:48:e7:e0:e2:ee:9a:fa:29:a7:43:
                    16:70:21:25:5b:eb:ed:b3:dc:b6:e3:30:e0:78:4b:
                    87:2a:f6:3b:7f:4d:fa:b7:cd:76:aa:d2:b3:73:30:
                    ac:c9:55:a2:00:bf:ba:33:09:b3:32:a0:04:18:5d:
                    d2:8e:84:6b:3c:15:f9:7e:4e:1c:93:28:7d:8f:ce:
                    d9:0b:8a:f4:51:32:05:f4:c2:ed:1b:b5:9d:ee:98:
                    9b:14:23:b0:c5:94:55:f1:57:9b:d2:2f:3b:bc:1f:
                    f6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:44:62:29:A7:9E:E5:9A:6C:C9:05:00:60:E8:99:5A:08:73:45:6A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LkRiKaee5ZpsyQUAYOiZWghzRWo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         53:b8:f0:ee:a3:7c:f6:f3:6f:7b:2b:be:d7:a1:36:c1:85:1a:
         60:0d:00:24:39:f1:59:3a:92:ab:c8:bb:cd:f2:0a:35:3c:40:
         72:7f:f9:13:a3:6b:05:7d:da:72:0e:3a:bf:e2:e2:f8:94:8f:
         1c:70:7b:73:eb:6d:70:2c:93:a6:0c:59:27:f8:aa:f5:11:95:
         ef:9b:4c:e4:7d:98:13:24:12:45:1f:c4:0f:10:63:7d:05:3f:
         e1:1c:d5:4c:f4:19:49:9f:ec:93:f7:3b:5c:f3:5b:8c:00:b7:
         b3:3c:f6:72:28:bd:f9:a8:84:51:02:9e:ea:2f:cd:0c:d4:80:
         ba:d0:b2:f2:9f:86:3f:43:ff:d1:b3:32:0d:88:8b:fb:93:82:
         d9:c3:81:f2:89:4d:c2:26:85:92:a9:b6:10:df:32:a5:5f:13:
         0a:d7:9f:29:76:35:2a:ac:51:d5:56:cb:d0:d6:6e:47:b0:5a:
         b7:3e:94:38:d7:fd:6b:54:88:15:c1:cb:a4:3b:cd:66:81:8d:
         fb:c3:35:27:34:dd:18:92:68:f8:11:50:8e:b1:e7:88:b9:bd:
         e8:50:cb:d8:fc:2a:0a:8f:a3:fd:26:93:b6:5e:ec:be:70:db:
         07:e8:75:4c:08:72:4b:af:0a:96:d8:73:c3:66:14:b1:7e:be:
         e4:03:27:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org