Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NLpUoeaGslJaUeYxE6aD_KEb1sg.roa
File:                     NLpUoeaGslJaUeYxE6aD_KEb1sg.roa (raw, json)
Hash identifier:          NVufPnxGfN7Gpi9BpKXBgPw0SviEOvEwKCNfwzkVAZU=
Subject key identifier:   34:BA:54:A1:E6:86:B2:52:5A:51:E6:31:13:A6:83:FC:A1:1B:D6:C8
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       019B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NLpUoeaGslJaUeYxE6aD_KEb1sg.roa
Signing time:             Tue 30 May 2023 17:34:33 +0000
ROA not before:           Tue 30 May 2023 17:34:33 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7200::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:33 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=34BA54A1E686B2525A51E63113A683FCA11BD6C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:80:ec:b1:be:e2:a6:11:ad:30:db:88:d1:dd:
                    c7:89:42:51:72:17:5f:3d:c4:8b:e9:b6:aa:ad:aa:
                    6d:81:ee:41:66:05:9d:d4:6e:88:b6:2b:25:f5:48:
                    78:59:38:e8:b0:28:c0:a3:b5:37:5c:ff:42:8e:87:
                    23:40:5b:92:3d:a3:54:9c:3b:46:91:ef:d0:34:14:
                    c0:07:2f:d4:07:4b:f7:d1:31:01:13:4f:cb:20:f2:
                    b9:01:a6:8a:f7:9e:3e:3e:a4:28:09:cb:27:ee:28:
                    27:72:9e:6c:82:5b:73:ff:28:39:30:bc:b5:8a:c1:
                    79:2a:04:6b:12:3b:ac:81:16:6d:f3:13:24:1a:f1:
                    52:b8:1f:ec:20:f2:e0:09:85:0d:65:99:7e:b8:fa:
                    1e:a1:9f:5d:f9:3e:2c:1e:2b:02:2e:77:40:5b:84:
                    08:75:80:07:84:e7:cf:09:c6:65:8b:6d:8c:92:65:
                    3e:f5:8e:15:44:60:11:8a:4e:ec:eb:fe:33:ff:f2:
                    0b:21:cf:f1:35:8d:56:83:05:2e:3e:c8:a7:6a:78:
                    18:cc:b5:d5:1d:47:d3:3d:7b:23:a1:2e:04:2f:b9:
                    ff:03:f4:54:12:31:ea:2e:21:5d:44:77:44:13:4d:
                    7a:d7:00:66:83:98:fe:f4:4c:1e:8d:1a:c5:ca:32:
                    71:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BA:54:A1:E6:86:B2:52:5A:51:E6:31:13:A6:83:FC:A1:1B:D6:C8
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NLpUoeaGslJaUeYxE6aD_KEb1sg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7200::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:1e:43:9c:42:db:e4:07:b3:f5:11:ac:31:08:fa:70:27:bd:
         86:ba:23:7b:ec:55:5d:d8:45:ef:6d:b1:54:3b:cd:64:94:78:
         26:b1:25:8e:fa:85:b9:d1:91:22:d1:cf:d2:8c:8d:b8:6f:f4:
         d1:d1:25:11:6c:98:6e:03:71:f4:ef:c8:e4:ee:57:03:d5:2a:
         aa:7e:b1:3c:43:ae:1b:00:c0:7b:2d:07:c0:2c:98:6b:dd:58:
         84:d7:25:66:b0:33:47:13:dd:56:11:9f:b5:cc:72:15:aa:f8:
         d9:8e:84:e8:88:02:50:eb:fc:29:ae:c9:20:05:cb:f0:9c:f4:
         d2:f8:6d:02:ba:c6:f6:ef:23:8d:01:79:9d:4d:8b:0c:1b:b6:
         24:c7:c6:e7:91:eb:a8:e2:e2:4d:50:17:f2:09:2e:5f:f1:a7:
         29:6a:22:4a:1f:83:dc:44:21:8b:5d:9e:b8:ac:1d:e7:3b:5a:
         00:fa:21:03:0a:31:13:bd:ee:a2:04:b9:1b:d5:38:c9:fc:9f:
         95:78:2c:cb:d6:e5:b2:08:69:5d:b1:d0:17:50:3c:ad:ac:91:
         9b:70:55:91:59:ce:61:3c:fd:c1:40:3a:c2:97:9a:6e:ce:ec:
         7d:68:40:d4:36:d1:17:c1:ba:a9:46:73:69:63:bb:95:ae:c9:
         32:0f:95:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org