Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QLXTvs_sJUwlE5aJISWx22ErFsc.roa
File:                     QLXTvs_sJUwlE5aJISWx22ErFsc.roa (raw, json)
Hash identifier:          wXlwDJWPluZTpf4GZ89TCQjxGhs6Pz0PzSItftwuTLY=
Subject key identifier:   40:B5:D3:BE:CF:EC:25:4C:25:13:96:89:21:25:B1:DB:61:2B:16:C7
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       022F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QLXTvs_sJUwlE5aJISWx22ErFsc.roa
Signing time:             Tue 30 May 2023 17:42:24 +0000
ROA not before:           Tue 30 May 2023 17:42:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559 (0x22f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=40B5D3BECFEC254C251396892125B1DB612B16C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:96:69:12:15:79:8b:08:9a:66:ff:81:84:df:
                    22:f7:de:cd:35:fa:c5:d5:46:02:2c:36:87:cf:95:
                    d0:ee:b3:a9:04:3f:d2:f2:39:72:06:40:fd:79:73:
                    be:4f:74:d7:52:27:82:64:86:7f:b3:0b:a5:4b:a1:
                    54:d7:ae:f2:27:30:3e:55:c9:1f:fa:0f:9b:69:8d:
                    73:17:3f:09:24:5a:66:56:cb:52:40:3a:69:f7:6e:
                    ee:eb:93:b4:54:df:5d:c2:48:a2:d2:69:b7:36:72:
                    37:cb:02:fe:3c:aa:8a:3f:0c:07:00:73:c0:a8:b3:
                    29:e4:20:9a:f7:29:db:53:18:2c:9a:29:7b:34:bd:
                    14:60:e7:c5:d9:43:0a:53:ca:47:a6:0d:90:5b:c1:
                    5a:41:ec:b6:5e:86:8b:9e:4d:c0:9b:e2:1d:21:44:
                    14:ce:cf:09:90:be:ca:4e:b4:41:65:3f:54:7e:9e:
                    8e:56:bb:48:36:50:db:0a:f4:4a:d1:37:f8:78:0b:
                    89:6b:ea:b8:df:3c:ac:1c:54:9b:46:8f:ef:2b:f1:
                    12:6d:6d:b2:85:c0:4c:f5:1c:65:b9:91:10:d4:6c:
                    f2:0b:1f:b5:d6:6f:42:9a:10:89:fc:4d:03:20:22:
                    f2:6b:53:78:af:29:9f:f8:3b:42:cf:f2:26:90:51:
                    9f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B5:D3:BE:CF:EC:25:4C:25:13:96:89:21:25:B1:DB:61:2B:16:C7
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QLXTvs_sJUwlE5aJISWx22ErFsc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:d0:8e:6a:10:f4:8f:59:f3:2b:fb:3a:85:1d:67:98:19:2d:
         28:c7:89:20:ac:b3:6f:47:7e:66:bc:9e:be:65:f7:32:87:12:
         38:b4:46:00:ee:5c:be:ce:df:9d:aa:68:83:cc:22:bc:70:26:
         ee:54:fb:68:8d:09:66:ed:95:35:92:9b:c3:87:8c:8f:70:b6:
         7a:b5:9c:ad:c0:9b:c7:3c:e3:fd:81:e9:57:de:a2:19:08:ce:
         b4:2e:1c:fc:f7:4f:ef:4f:e1:87:54:03:22:26:c1:24:d1:88:
         2c:ec:b3:e0:f4:93:6c:26:ce:5d:ae:e3:1e:8c:62:68:9c:29:
         8a:6d:f5:b3:88:fb:f2:43:a0:fd:21:a2:50:5b:43:25:18:54:
         b9:70:66:51:4b:d7:58:a8:38:9c:5b:f4:bc:c6:83:1f:f9:0c:
         08:2c:8f:5f:bf:2c:da:39:5d:ca:71:76:6b:30:23:c4:ce:71:
         8f:7d:27:00:c9:25:76:e3:ce:f7:5f:96:85:db:9b:cc:41:18:
         53:06:be:fc:71:9b:57:74:3e:f9:fb:ca:76:d9:32:07:ac:5f:
         de:87:56:15:f1:e4:a0:f9:3c:e1:d6:ad:40:b0:52:6d:37:98:
         45:be:16:81:ba:48:96:4d:09:3e:ca:56:0b:ff:7a:d7:f8:3c:
         ac:bb:45:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org