Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TyqWj_DyvmnAl_5CvO2_SrlCKlw.roa
File:                     TyqWj_DyvmnAl_5CvO2_SrlCKlw.roa (raw, json)
Hash identifier:          JQkNL0I+9dv++o4Ef6l7Pwwh7p+UoObmrDuxPhl1RDA=
Subject key identifier:   4F:2A:96:8F:F0:F2:BE:69:C0:97:FE:42:BC:ED:BF:4A:B9:42:2A:5C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       07
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TyqWj_DyvmnAl_5CvO2_SrlCKlw.roa
Signing time:             Wed 15 Mar 2023 03:20:18 +0000
ROA not before:           Wed 15 Mar 2023 03:20:18 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:70:9::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 15 03:20:18 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=4F2A968FF0F2BE69C097FE42BCEDBF4AB9422A5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8b:e5:3f:72:b8:96:31:fc:05:94:98:37:d9:
                    8a:ef:ab:87:63:c9:92:27:2f:1c:19:bf:d1:e7:c6:
                    62:b6:e8:c0:22:4c:b3:16:90:50:fa:1d:8e:61:a6:
                    0c:a0:35:0d:d5:a5:57:2a:47:23:35:94:68:34:5e:
                    a7:3b:09:7d:22:33:15:f2:1e:5c:09:9d:8c:f6:89:
                    7e:b7:ce:28:fe:57:dd:c4:5f:b7:14:d1:29:9f:cc:
                    b1:3a:e8:50:70:ed:92:8d:2b:77:cf:f6:37:21:72:
                    80:50:45:9e:6c:71:78:11:54:cf:7a:84:43:78:7b:
                    9e:b0:f4:f4:fc:c6:1c:57:cd:3f:85:fb:7e:04:b0:
                    aa:4d:98:27:e4:18:6e:ba:9c:67:d7:42:14:47:24:
                    05:39:93:2a:da:3f:2c:25:3a:9b:c8:8d:0e:c3:64:
                    8c:03:58:d5:fd:9a:b2:b7:fd:80:56:a4:00:3d:0c:
                    e0:9f:d0:f8:d3:42:73:80:e4:55:86:07:a0:83:47:
                    dd:78:bf:a3:43:99:8f:e4:ab:4e:69:71:83:32:98:
                    54:1d:28:b2:47:5b:08:93:98:36:94:7b:6e:90:48:
                    d6:a9:46:6e:cb:37:c8:e2:07:58:0b:b4:30:c2:fe:
                    eb:71:2c:a3:3a:4f:24:07:62:bd:61:ee:f1:22:bd:
                    83:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2A:96:8F:F0:F2:BE:69:C0:97:FE:42:BC:ED:BF:4A:B9:42:2A:5C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TyqWj_DyvmnAl_5CvO2_SrlCKlw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:70:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:e7:88:8c:24:fa:75:64:7c:a2:ec:06:c5:ef:93:e8:99:bd:
         0d:fc:52:37:20:7a:94:dc:b4:11:93:56:96:cd:6c:82:fb:a4:
         06:e9:7f:ae:6c:df:8d:ba:bc:81:7e:14:45:1e:b4:53:02:51:
         e2:04:a2:b8:26:90:b9:1e:11:4c:e6:d0:c3:13:2c:db:94:b4:
         83:a3:24:da:28:82:68:41:00:23:dd:9a:83:4d:16:0c:1f:54:
         5f:4f:e6:b5:dc:4b:18:67:6b:2e:3d:92:ff:56:ac:c5:99:0f:
         16:1c:70:b8:9d:18:ea:8b:ae:33:ea:7d:17:88:a0:a6:20:36:
         0c:82:df:7a:8c:2e:eb:71:ef:58:d8:2b:b8:ca:49:53:6b:8b:
         a5:55:9d:6b:47:ae:ab:74:fd:33:71:a3:7c:ac:bf:2e:e0:92:
         9d:83:15:1d:4e:43:86:04:72:b3:41:bf:c8:44:5a:73:7b:ae:
         c8:b4:52:6d:c5:5b:94:84:b3:06:13:a7:2a:43:10:d5:d8:79:
         d7:66:6e:b4:3f:8f:8e:d0:66:1f:b2:4e:52:8f:4e:4c:54:f6:
         87:95:d0:e0:65:2e:65:72:de:c1:eb:2d:df:05:0b:46:75:00:
         35:80:11:a0:05:41:30:cc:ad:1d:a1:50:02:27:8e:a8:4b:20:
         d6:03:a5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org