Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RV0ia-CQ7gKE0sP08ZyH_7kEY5I.roa
File:                     RV0ia-CQ7gKE0sP08ZyH_7kEY5I.roa (raw, json)
Hash identifier:          OvKzCGDsxw3aOnNPjShfFftCuO8AhPuGZkZ6XYod1rs=
Subject key identifier:   45:5D:22:6B:E0:90:EE:02:84:D2:C3:F4:F1:9C:87:FF:B9:04:63:92
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       3B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RV0ia-CQ7gKE0sP08ZyH_7kEY5I.roa
Signing time:             Tue 30 May 2023 16:04:13 +0000
ROA not before:           Tue 30 May 2023 16:04:13 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:13 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=455D226BE090EE0284D2C3F4F19C87FFB9046392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:79:64:33:40:f6:a4:26:70:d8:28:4c:97:ef:
                    0b:fc:b3:d7:f2:80:1d:33:bb:99:1c:ec:a0:fa:e9:
                    20:d7:c2:49:d4:67:99:d5:bc:17:5b:6f:bd:99:f4:
                    48:ed:33:dc:cc:f8:9d:a8:b9:10:90:a2:12:1c:8b:
                    6a:7a:ab:30:5f:ac:83:dd:f1:49:ed:49:05:ac:e4:
                    b3:48:78:8a:2b:f6:c5:67:9a:0f:42:db:37:0c:f4:
                    f6:76:42:61:97:bf:97:71:0e:d4:0d:c2:71:54:28:
                    7f:ae:13:32:cf:82:78:b9:b0:f2:4c:a5:8d:72:4f:
                    3d:2f:2e:e5:63:99:fc:bc:79:6a:d4:8e:cd:35:f4:
                    d5:71:5f:d8:e8:da:f4:b2:b0:5a:0b:a9:19:dd:33:
                    90:76:27:68:14:c5:f8:1c:fd:51:73:ba:78:5a:e2:
                    7b:bd:ea:1a:1c:eb:3b:c1:fe:a5:9d:bf:1f:4b:f9:
                    65:09:96:5b:d1:35:e2:76:3c:ff:bd:9d:c4:90:6e:
                    4c:7e:f6:ae:4c:23:a1:a7:e7:ec:44:af:88:7a:db:
                    b1:b7:3b:ae:f3:2b:e0:2b:b9:a4:3d:40:53:e5:85:
                    84:26:eb:bd:a9:56:63:89:1d:ea:9e:69:eb:01:51:
                    aa:dc:72:84:a3:f4:74:ab:28:7b:b5:99:d5:76:c5:
                    bb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5D:22:6B:E0:90:EE:02:84:D2:C3:F4:F1:9C:87:FF:B9:04:63:92
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RV0ia-CQ7gKE0sP08ZyH_7kEY5I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e400::/40

    Signature Algorithm: sha256WithRSAEncryption
         52:26:da:6b:34:fd:dc:58:1c:b9:e6:56:15:eb:05:9d:bd:84:
         77:c8:2c:ea:19:2d:80:1a:42:46:a4:46:2c:bc:9f:b4:61:aa:
         89:ae:8e:1b:f9:8a:a2:97:a6:91:d7:8e:9f:39:55:99:8e:2c:
         18:50:98:59:a2:8b:b0:60:ca:a3:3c:74:8d:c7:eb:df:6e:e8:
         4c:fc:93:e3:49:08:6a:da:af:b4:19:d0:5e:70:0e:14:58:a5:
         2d:84:2d:26:48:dd:c8:cc:fa:d9:21:0e:4c:5a:57:1b:eb:b2:
         ba:8f:ae:61:c0:82:19:0a:bf:07:f8:40:31:91:fd:72:c8:71:
         0c:fc:62:0d:26:0d:ae:88:4f:4f:93:3b:41:7e:a4:85:07:2c:
         ef:84:2f:a7:c3:d6:a7:7e:76:46:ea:00:74:d7:f9:70:e8:7a:
         3a:cd:41:4a:92:f4:8c:60:e0:04:4e:6a:f8:37:fc:bb:fe:ac:
         f9:f5:03:48:c8:0f:4e:01:3b:23:a3:59:7c:3c:25:f4:47:cd:
         de:a2:3d:eb:d6:65:34:7e:07:9c:b5:f5:b3:b8:3a:c6:06:25:
         ad:43:fe:e9:1c:6b:50:cf:90:68:23:01:49:63:fe:a3:21:8c:
         19:7b:b4:11:42:0f:ae:28:97:e3:ce:3a:64:39:4e:d0:67:ef:
         95:9f:10:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org