Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TnFjJmRlB7ZIkLml9Ml2k909byo.roa
File:                     TnFjJmRlB7ZIkLml9Ml2k909byo.roa (raw, json)
Hash identifier:          uAzvx1ztX84qA1JoLrGiwC8aVpbTHYNd5glRJizcynA=
Subject key identifier:   4E:71:63:26:64:65:07:B6:48:90:B9:A5:F4:C9:76:93:DD:3D:6F:2A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0243
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TnFjJmRlB7ZIkLml9Ml2k909byo.roa
Signing time:             Tue 30 May 2023 17:44:16 +0000
ROA not before:           Tue 30 May 2023 17:44:16 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:bd00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:44:16 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=4E716326646507B64890B9A5F4C97693DD3D6F2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:10:66:a7:de:d0:17:93:f1:cd:3a:c7:20:b1:
                    49:8f:a8:c8:36:3d:62:70:f6:47:65:59:0c:6b:18:
                    57:e6:7e:3b:63:7e:2a:e7:6d:99:93:cb:1a:8f:d6:
                    df:b4:2f:fe:ad:4c:5e:57:30:bd:1f:88:34:cc:00:
                    ca:8a:a5:a7:1f:c4:65:95:f1:cf:3b:65:67:c4:fb:
                    32:f1:c0:06:9b:d5:8f:e1:52:18:a8:06:af:cc:72:
                    62:7a:7f:88:ec:32:fe:81:87:3d:90:24:37:19:ef:
                    3e:12:d3:a2:e0:c1:e4:34:fe:29:ec:58:f1:dc:0d:
                    bc:b3:95:da:71:3d:b8:72:5a:4e:f4:5c:4a:a4:ae:
                    f3:1e:85:83:3b:8c:f7:05:28:72:19:dc:74:14:47:
                    ff:85:cd:a0:ea:fd:48:9e:2f:ad:73:de:d4:59:9b:
                    a0:f1:42:5c:c0:94:98:08:f7:92:33:94:41:ba:f2:
                    01:6c:0a:8d:1b:09:69:5d:53:b1:df:1b:dd:21:43:
                    9b:4e:cb:ef:15:74:4e:a4:0b:b9:94:a2:5c:5d:58:
                    64:c7:58:3b:38:b6:30:99:f8:22:f3:fd:15:fd:49:
                    fa:a7:26:02:8a:f9:e1:0e:19:bf:82:68:9f:69:04:
                    c6:32:13:6c:c4:15:24:57:f3:cf:5f:d7:44:a5:d2:
                    7e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:71:63:26:64:65:07:B6:48:90:B9:A5:F4:C9:76:93:DD:3D:6F:2A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TnFjJmRlB7ZIkLml9Ml2k909byo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:bd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ab:c2:c1:30:42:ad:da:aa:5c:ba:5d:e9:bc:9d:1a:ec:33:c5:
         92:bc:4b:86:1b:83:8c:bc:d1:1e:a6:51:7f:69:92:d2:14:7b:
         12:d6:90:c1:df:61:40:9e:51:7c:6f:5d:17:4f:dd:87:58:38:
         39:06:cb:df:0f:6d:ee:4a:24:12:c7:e5:86:15:e0:5f:e3:88:
         63:05:bb:bc:be:10:7a:ee:b3:69:31:bd:c9:d6:a0:c5:69:b5:
         1f:f4:b6:6e:50:b7:d0:4b:f1:ec:46:60:10:9d:a7:fc:8f:a6:
         0c:9c:08:ee:ac:e4:f9:54:63:83:db:0f:b9:78:46:19:75:81:
         cc:47:a7:6b:ac:20:b4:e9:41:a8:0d:77:27:ea:fa:c9:9b:c5:
         b7:e9:35:71:86:b2:4d:a4:85:6e:a9:4a:c5:95:6a:d0:b9:20:
         12:03:8a:76:02:01:92:14:38:5a:97:47:0b:78:29:1a:c3:df:
         01:dd:36:33:7c:fd:9f:44:2a:1f:fb:9c:06:04:72:fd:40:42:
         d0:f5:c1:2e:b7:59:80:50:7d:5d:d6:1c:72:79:27:54:7b:0e:
         d9:be:6f:dd:f6:03:3a:b3:d0:ce:fd:9f:8a:9a:4d:c6:68:db:
         a2:c9:3f:a2:9f:29:5d:5b:92:1f:99:b2:7c:51:7d:b1:37:bc:
         f5:f5:1b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org