Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SuGYNnTPFPOqHlbid57mxjQJG4I.roa
File:                     SuGYNnTPFPOqHlbid57mxjQJG4I.roa (raw, json)
Hash identifier:          5vnyevi5TcbdrDELmJL+gaKNvBKwF0HN+JuZDs8ThH4=
Subject key identifier:   4A:E1:98:36:74:CF:14:F3:AA:1E:56:E2:77:9E:E6:C6:34:09:1B:82
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       7F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SuGYNnTPFPOqHlbid57mxjQJG4I.roa
Signing time:             Tue 30 May 2023 16:06:25 +0000
ROA not before:           Tue 30 May 2023 16:06:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:1e00::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=4AE1983674CF14F3AA1E56E2779EE6C634091B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e6:c1:c3:67:c4:61:84:02:c7:a7:34:0e:7e:
                    f2:27:2e:7d:ea:9c:68:35:75:ba:c0:0c:ae:aa:7a:
                    2f:5d:c4:1d:6c:7e:8f:10:d4:81:d5:39:9c:cb:c3:
                    7d:2e:d6:a3:1a:4e:13:4a:4e:90:05:2d:14:4d:65:
                    7c:6e:77:aa:04:d7:15:f2:c8:6f:2b:53:8a:63:39:
                    a7:f9:86:52:e4:a7:d4:cb:82:ae:d1:e1:0a:24:9b:
                    1a:16:d6:5b:10:cc:60:7b:57:71:70:d8:fd:c4:c0:
                    e5:72:d4:8a:24:94:5d:78:67:86:ad:4a:7d:b5:82:
                    10:33:93:8c:98:10:59:4d:45:2b:15:4b:f1:ac:51:
                    05:f9:66:92:7c:03:f2:50:9f:9f:8b:21:d9:8f:44:
                    88:f0:a7:43:ab:a3:9c:c6:ee:56:ba:44:52:1c:6e:
                    95:1a:16:31:13:7f:25:09:c2:c6:e5:cd:93:95:73:
                    2a:86:51:61:01:4c:d3:58:6f:a7:81:42:16:f5:4e:
                    7e:e6:28:bd:53:db:6e:7e:cc:b3:51:85:6f:3c:07:
                    d5:88:1d:da:b9:a9:2f:4f:61:83:74:2f:bf:46:93:
                    46:68:2a:91:65:a3:5b:20:69:39:8b:d3:da:ee:2a:
                    51:b7:8c:2e:48:07:13:12:b1:60:6f:ac:1f:5f:d2:
                    0a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E1:98:36:74:CF:14:F3:AA:1E:56:E2:77:9E:E6:C6:34:09:1B:82
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SuGYNnTPFPOqHlbid57mxjQJG4I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:1e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:b2:11:fb:28:bd:9a:79:ab:e7:66:4d:5e:46:1c:22:17:a1:
         fe:24:b5:1a:0f:5e:8c:5a:72:c4:a9:fe:51:67:ac:4b:c0:63:
         f7:8d:3d:06:af:69:9a:9a:9d:3b:fc:87:94:03:a8:c9:12:f0:
         c3:be:59:6d:9f:47:6e:9a:a0:57:ff:09:2a:ea:5e:b9:f1:b5:
         df:d5:2a:f8:5c:78:55:f1:58:db:21:c5:33:ba:8f:2b:76:31:
         6c:71:d4:65:a6:e2:e6:88:1a:32:26:b4:67:29:e9:8a:69:7f:
         9a:2f:c3:8d:2c:2a:de:10:39:c4:01:c8:42:1f:5c:3d:04:07:
         98:3d:6c:2f:8e:41:96:29:3a:ac:ce:a4:81:55:67:c9:af:af:
         ab:26:c0:72:27:c3:98:4a:c8:ff:e8:80:17:5f:69:5b:4b:6a:
         a1:3b:db:d9:6a:e3:e7:5b:d1:7c:12:34:79:b8:84:35:ea:45:
         9d:ee:bd:d8:ee:29:c4:e6:08:08:96:c3:3f:18:33:f4:f2:28:
         91:be:bc:46:41:8e:61:bf:13:59:65:8d:d4:fb:42:15:94:1c:
         9c:11:00:18:c3:a3:ea:7d:6a:29:b4:95:18:82:5b:48:1f:ab:
         a5:86:63:c9:57:88:2a:35:6f:0f:fa:d3:df:bf:52:e7:3a:97:
         5d:1f:5e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org