Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SXTbRbPPicEC1eqEzTai1Rdt0Q0.roa
File:                     SXTbRbPPicEC1eqEzTai1Rdt0Q0.roa (raw, json)
Hash identifier:          515PMOATHu+M4WYoIWF9RD0oWGJplfKNmV7fMDX3HTM=
Subject key identifier:   49:74:DB:45:B3:CF:89:C1:02:D5:EA:84:CD:36:A2:D5:17:6D:D1:0D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0149
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SXTbRbPPicEC1eqEzTai1Rdt0Q0.roa
Signing time:             Tue 30 May 2023 17:32:23 +0000
ROA not before:           Tue 30 May 2023 17:32:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f600::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=4974DB45B3CF89C102D5EA84CD36A2D5176DD10D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c8:55:ca:b6:c4:07:e2:42:e1:66:80:7b:80:
                    5e:f8:01:11:6e:7b:c3:17:54:bc:af:5f:4e:ec:49:
                    96:ad:1e:9f:bc:0c:23:98:51:79:89:44:e2:da:90:
                    88:a5:77:3b:bf:73:61:a8:3b:88:1a:c8:ef:40:e5:
                    de:6a:4b:c8:a7:01:8a:b4:94:d0:91:8e:07:c2:e7:
                    e6:e8:3c:16:51:cf:9a:e4:48:ff:e0:57:bb:86:ea:
                    0f:30:1d:92:34:17:0d:79:10:19:88:ea:c0:a5:53:
                    0e:98:ea:7c:2a:fe:92:f2:e4:84:c9:47:c3:50:d0:
                    52:b3:69:4a:2a:2f:9c:c9:4e:fc:50:76:09:f8:72:
                    5c:d1:07:e4:b4:b5:66:12:df:5e:46:c1:7e:76:a4:
                    fe:ad:e3:b3:68:93:64:ac:f6:cd:22:ba:76:f9:3c:
                    69:9f:a0:c1:cb:04:51:5d:f2:8b:1b:7d:e9:83:9c:
                    5d:d4:76:0f:fc:a3:6c:2f:2a:06:c5:84:30:eb:03:
                    78:ed:b6:77:26:6f:d0:10:0a:3e:81:ca:95:28:90:
                    b7:0a:9e:66:c9:81:0e:44:bf:34:15:5f:28:9a:f9:
                    05:88:db:b5:4c:69:f8:6a:17:78:ac:64:d4:71:29:
                    ae:5b:b1:cc:51:bd:94:19:a7:31:4c:ef:b9:4f:b9:
                    40:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:74:DB:45:B3:CF:89:C1:02:D5:EA:84:CD:36:A2:D5:17:6D:D1:0D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SXTbRbPPicEC1eqEzTai1Rdt0Q0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f600::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:4d:a8:a3:12:69:97:f7:42:4b:26:d1:06:71:12:21:02:89:
         60:0a:90:73:23:2e:d2:85:9b:42:34:1d:ed:66:c5:c0:67:d4:
         02:ca:ff:fa:62:08:c0:73:10:7e:8a:f4:aa:f3:4d:ef:42:6f:
         fe:59:9d:cd:ed:c7:fe:dd:15:49:95:9b:86:69:0e:3c:40:e2:
         a5:fd:fe:a0:92:85:cb:6d:4b:47:d0:16:0d:72:38:14:95:4e:
         02:8c:f0:43:43:77:93:87:cb:53:dd:88:8a:72:69:cd:06:57:
         21:5b:65:ce:02:a6:39:a3:f2:54:f4:a2:b9:a9:07:63:90:8d:
         18:7f:fc:a2:70:d5:f0:1d:7c:50:d3:c9:1f:aa:1f:7f:c1:6e:
         6d:9e:15:b7:30:3d:58:82:ff:88:17:26:b1:a3:ed:e0:18:af:
         35:ef:c9:90:94:9b:e3:42:6a:32:12:4d:ad:53:84:1c:ca:0e:
         ce:e7:f8:8f:a0:3d:76:59:2e:08:49:d6:8e:60:a8:1e:eb:aa:
         be:b6:b1:61:31:9c:70:a1:a3:bd:63:84:74:af:9b:e5:bd:d7:
         f0:4d:2f:79:6a:89:f9:27:13:5c:33:f2:f1:5b:14:42:23:23:
         b5:e0:bf:83:b3:ab:b7:1c:00:1e:a5:f1:c2:f7:63:86:da:c5:
         35:3a:68:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org