Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ukhag9SHOZ1Vp2qNHU1v6_SllVM.roa
File:                     Ukhag9SHOZ1Vp2qNHU1v6_SllVM.roa (raw, json)
Hash identifier:          eMz49Yely4BSU0zeKmtcBLOXC72aLBTeLFmrfCx4HqI=
Subject key identifier:   52:48:5A:83:D4:87:39:9D:55:A7:6A:8D:1D:4D:6F:EB:F4:A5:95:53
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       C5
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ukhag9SHOZ1Vp2qNHU1v6_SllVM.roa
Signing time:             Tue 30 May 2023 16:10:15 +0000
ROA not before:           Tue 30 May 2023 16:10:15 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:be00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:15 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=52485A83D487399D55A76A8D1D4D6FEBF4A59553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9e:d2:ef:f0:a6:d3:35:e1:c0:48:04:71:38:
                    3e:b0:1f:d4:3b:d3:3b:e4:4a:de:90:e5:78:98:fb:
                    85:6d:2a:43:3f:cf:7b:6b:d1:69:ed:3e:76:72:69:
                    7c:c4:bb:9d:a8:c2:0e:7e:ca:0b:60:5b:b2:a4:bf:
                    3b:a3:99:2d:fc:1d:a2:d9:30:58:f4:34:a7:7d:ed:
                    e4:1d:28:2b:d6:49:a0:01:1b:c9:21:3f:f9:30:2e:
                    b6:a6:4e:ad:76:32:f1:c9:90:cf:78:80:a8:cd:22:
                    ee:90:1b:32:e2:7c:d5:19:04:02:ad:e4:ab:54:c7:
                    c1:65:f9:27:9d:6f:d5:90:20:4f:2b:8d:d1:96:70:
                    42:f7:3b:b7:bc:5f:e0:4a:9f:b2:f5:f9:2a:42:5a:
                    3f:1a:1d:d3:50:1c:5c:a7:c7:35:b4:f5:80:a7:2d:
                    de:a1:d6:e9:ce:a5:56:3e:f7:3d:2f:ee:5d:c1:47:
                    82:b8:45:1f:97:1f:4e:7c:e2:44:dc:ae:77:25:cf:
                    7b:43:dc:23:fd:7a:19:7a:9e:18:2f:c4:1f:a6:71:
                    ac:8e:59:54:3d:f7:17:2a:c6:a0:22:39:a5:13:70:
                    4f:98:50:19:b7:82:67:1e:6e:55:8f:d9:b1:94:0b:
                    e1:1b:54:19:c1:85:42:4d:58:70:df:86:27:ca:f1:
                    58:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:48:5A:83:D4:87:39:9D:55:A7:6A:8D:1D:4D:6F:EB:F4:A5:95:53
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ukhag9SHOZ1Vp2qNHU1v6_SllVM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:be00::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:37:7d:c5:93:2b:39:14:ad:01:b8:32:3f:e2:0b:00:5c:79:
         4c:5f:c1:74:09:3b:7c:cc:2c:df:80:e3:bd:98:56:24:7a:ba:
         25:ea:e3:8b:b2:52:a4:c8:86:63:61:b8:79:05:d2:a9:8a:71:
         09:e4:52:49:bc:3a:74:55:13:0f:27:5a:28:eb:e6:9d:14:4f:
         cf:b3:7a:d4:82:c9:e7:87:27:ab:f7:19:1d:17:97:92:e7:d0:
         6d:88:6d:91:b2:cc:46:1a:75:31:28:87:82:33:d6:a1:1a:67:
         34:3b:63:0c:65:7c:1d:1c:58:f7:5a:2e:d2:26:28:26:40:7d:
         aa:a5:7a:d9:7c:08:68:f0:f9:b8:55:3c:f8:83:fc:56:f9:16:
         22:8e:97:a4:0b:be:95:9a:e1:c5:75:95:62:d0:34:e4:14:34:
         6d:35:01:f9:ca:84:5b:44:c4:55:bc:2c:ee:e6:36:61:9e:7f:
         b9:ea:f9:ae:c7:28:c1:5e:27:83:c9:78:d0:a2:9b:7d:3a:45:
         0f:fd:9a:d6:8d:24:ef:91:8f:ed:59:9a:9e:df:7f:82:bc:8e:
         0f:d7:0c:48:c8:39:45:c2:97:24:94:4f:5b:65:3a:ab:c0:c7:
         02:1c:21:31:c8:fa:44:95:8b:f8:09:be:af:9f:39:f1:3f:df:
         75:64:0f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org