Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Oh6_2IIWZw0fZdvbYKPsbIhFcy4.roa
File:                     Oh6_2IIWZw0fZdvbYKPsbIhFcy4.roa (raw, json)
Hash identifier:          +RGHt71Q5WrqhYohpbbNVpyEWX8P8EoKP2Or87CVjs8=
Subject key identifier:   3A:1E:BF:D8:82:16:67:0D:1F:65:DB:DB:60:A3:EC:6C:88:45:73:2E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       76
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Oh6_2IIWZw0fZdvbYKPsbIhFcy4.roa
Signing time:             Tue 30 May 2023 16:06:22 +0000
ROA not before:           Tue 30 May 2023 16:06:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:de00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=3A1EBFD88216670D1F65DBDB60A3EC6C8845732E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:86:4d:10:d9:c4:a1:10:c3:bd:36:db:1d:d9:
                    1d:2d:3e:2d:ec:e2:fa:6d:da:08:f1:f9:53:42:41:
                    c7:22:bc:5d:18:a2:2d:f1:6b:5b:1f:cc:6a:c5:92:
                    11:7d:41:09:18:26:c2:18:f9:11:2e:9a:8c:98:8b:
                    22:d3:0e:ce:a7:a1:ab:1e:14:00:2f:33:27:25:41:
                    72:6b:9b:5f:82:93:ea:d5:b4:e8:2f:66:86:d7:6f:
                    98:3c:72:94:d5:7f:14:7c:42:7a:df:05:40:c2:47:
                    87:cc:cd:d4:41:32:32:22:cc:26:06:5e:05:25:bf:
                    d7:51:5e:75:c2:62:28:b9:2d:7c:ea:d8:c1:80:b0:
                    fc:cc:d7:aa:a2:ee:9a:df:14:27:b1:10:0f:1d:c9:
                    6b:d2:73:03:de:7f:d9:5b:1c:86:58:88:be:d6:c9:
                    d2:50:b2:2e:a3:ff:d4:8c:53:b5:f2:89:32:7b:82:
                    80:48:71:16:24:ef:5f:3c:e0:42:b9:2e:a5:27:c6:
                    44:58:d3:d0:1c:98:82:67:14:bf:3a:66:78:6b:98:
                    3e:0b:57:d5:67:e7:a3:f0:32:c6:35:c1:ee:25:6d:
                    c2:61:7b:3e:b8:25:1c:aa:ae:7a:9c:02:de:2d:34:
                    46:e1:79:29:1d:52:18:25:e4:6f:61:3b:07:bb:e5:
                    eb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1E:BF:D8:82:16:67:0D:1F:65:DB:DB:60:A3:EC:6C:88:45:73:2E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Oh6_2IIWZw0fZdvbYKPsbIhFcy4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:de00::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:e4:35:db:61:21:4e:fd:72:3e:17:1e:f4:2e:41:a4:ff:b5:
         1a:d9:5a:ae:71:af:7b:fb:70:c5:06:b7:71:6a:0f:54:ae:01:
         0b:d8:4d:56:37:7e:3b:76:af:72:9e:c9:36:18:1e:96:a8:55:
         0e:0d:16:53:0d:ad:26:99:9c:c5:4a:ed:75:de:e4:99:76:71:
         cd:9b:be:33:a9:c3:7f:d8:f2:7f:f1:b9:cf:03:38:c6:56:8d:
         e4:be:4b:9d:c6:d5:15:96:79:d8:ec:2b:00:ee:c1:5d:0e:30:
         dd:8b:4c:0f:67:8a:bf:b4:3f:11:66:cc:94:b2:cd:4e:7a:23:
         c3:cd:fa:05:40:1f:9f:66:55:74:d7:cd:8e:d1:73:c7:e6:a4:
         5c:7c:1a:ef:2e:9a:35:04:6d:61:5b:f6:88:5c:40:6c:d6:a6:
         8e:63:54:f7:1a:32:29:3d:a0:50:b7:60:ad:9a:62:f0:1f:1e:
         0c:68:72:e5:29:c9:f3:f8:3d:10:b8:e6:e1:bb:72:9e:0f:2f:
         e3:52:ef:58:a2:22:5a:1b:11:24:95:76:5d:b1:d1:a8:64:10:
         2d:af:89:10:73:99:39:1b:12:6d:24:e9:5e:86:9c:2f:a7:23:
         16:d4:d0:07:8c:44:32:1f:be:b3:14:1e:87:cd:7d:4b:a1:7f:
         07:dc:bd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org