Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TPWx3YuaG5ccja5FdqA0s81UTxQ.roa
File:                     TPWx3YuaG5ccja5FdqA0s81UTxQ.roa (raw, json)
Hash identifier:          WwQiM2JUtXINy4JA1IOshZc5gO7w8fkgfcgE6i0T7Tk=
Subject key identifier:   4C:F5:B1:DD:8B:9A:1B:97:1C:8D:AE:45:76:A0:34:B3:CD:54:4F:14
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       021F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TPWx3YuaG5ccja5FdqA0s81UTxQ.roa
Signing time:             Tue 30 May 2023 17:42:18 +0000
ROA not before:           Tue 30 May 2023 17:42:18 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7a00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:18 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=4CF5B1DD8B9A1B971C8DAE4576A034B3CD544F14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b9:ec:5d:a9:d9:5c:a4:94:bf:83:bb:0b:6c:
                    44:bf:b2:2d:98:62:d9:5b:09:99:ba:02:38:79:0a:
                    19:2f:af:fe:11:b9:8e:1b:15:33:cf:9c:d6:83:d8:
                    c4:53:3a:02:0c:e8:1c:ed:73:0e:48:8e:57:34:40:
                    c3:bb:53:98:b1:3a:c5:9d:01:0b:bd:ce:a2:14:82:
                    7d:a9:08:28:ab:31:67:ff:bb:ea:cd:64:5b:89:d8:
                    08:44:3f:59:ad:99:3e:7c:2b:ff:d9:39:71:30:8a:
                    0d:d4:16:63:c5:de:81:88:be:90:0c:7b:44:e3:d2:
                    85:fe:bb:08:c6:ce:4d:3c:47:0f:29:13:91:44:cb:
                    1f:0d:14:49:2f:5d:86:68:c6:79:a9:00:c7:29:9a:
                    93:85:66:1f:6b:55:5e:29:20:63:d9:ed:52:bf:68:
                    78:4c:92:25:ff:94:50:9e:a7:88:26:3a:43:48:f6:
                    c0:2e:91:0a:07:bd:0d:46:7b:a2:d8:99:45:12:b8:
                    1f:b3:09:93:55:85:d8:e3:65:4a:ba:49:ec:99:51:
                    0f:bf:52:b0:b2:28:17:58:3a:49:3f:4f:32:59:a8:
                    76:5c:f8:05:40:bf:20:90:87:83:20:19:c5:01:82:
                    a9:a6:04:80:90:1a:4e:63:15:93:35:25:7e:ab:26:
                    15:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F5:B1:DD:8B:9A:1B:97:1C:8D:AE:45:76:A0:34:B3:CD:54:4F:14
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TPWx3YuaG5ccja5FdqA0s81UTxQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:a9:fe:d4:c7:41:87:6e:f2:f6:ba:3e:ec:76:15:f8:8b:2d:
         9a:9a:24:c1:cc:5e:8b:71:80:6d:f9:98:a8:08:83:cd:12:ad:
         8b:05:16:f8:14:72:6d:56:8c:e9:87:16:37:ab:b4:18:6e:48:
         aa:f2:78:2c:ea:a5:f3:e3:65:cb:b4:f2:7f:dd:e6:72:ce:47:
         ca:d8:3f:44:96:4a:63:73:4e:52:b0:97:5e:b2:88:4b:7f:e6:
         e8:79:40:a6:0f:e8:3a:3c:c1:5c:13:d5:86:a5:b9:3a:a1:9e:
         8f:a7:07:d4:66:d9:e5:2f:4c:6c:88:5a:d1:16:39:e7:3b:69:
         20:a9:35:84:59:b2:e9:ed:91:ec:f0:4a:e3:d0:25:19:fa:47:
         8b:04:1a:17:f2:d7:8a:2d:30:43:b8:e1:14:14:10:7e:a3:35:
         84:9d:0e:4e:cf:19:3c:82:6d:ae:3f:92:8a:39:50:2d:c8:9e:
         8d:80:eb:df:8f:57:47:d4:38:79:f8:e3:b5:94:f2:55:59:1f:
         7e:a6:c1:bb:99:bc:6b:bf:81:36:81:3f:ad:be:11:a9:aa:be:
         2e:7c:16:01:cb:2f:7b:16:88:88:8c:5e:7d:ae:23:34:36:97:
         81:a8:d1:34:11:ad:d9:42:08:07:a1:a5:dd:e1:30:8d:a7:85:
         85:a6:65:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org