Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UqZnTCwyuHiIaM_WX0u0HG_F9P0.roa
File:                     UqZnTCwyuHiIaM_WX0u0HG_F9P0.roa (raw, json)
Hash identifier:          f2kQBYjg8KLFibFXHWv0f2F++/UcIhwWBwko2E50ras=
Subject key identifier:   52:A6:67:4C:2C:32:B8:78:88:68:CF:D6:5F:4B:B4:1C:6F:C5:F4:FD
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0138
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UqZnTCwyuHiIaM_WX0u0HG_F9P0.roa
Signing time:             Tue 30 May 2023 17:30:03 +0000
ROA not before:           Tue 30 May 2023 17:30:03 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5a00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:30:03 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=52A6674C2C32B8788868CFD65F4BB41C6FC5F4FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:ac:d1:99:e2:33:a1:50:99:8c:b5:de:cb:
                    c9:29:89:74:6a:54:de:ed:8c:58:b0:c0:ab:d8:31:
                    bc:c3:2b:f4:9b:3b:de:e1:ab:56:ab:d5:06:f1:76:
                    2f:c4:f8:fe:10:ea:fc:8f:74:fa:36:3d:6c:56:c2:
                    f0:a1:96:df:e1:37:b0:6f:1d:3d:3f:87:5b:51:fe:
                    71:18:44:9b:e5:6f:05:f9:94:17:6a:1d:ab:56:bb:
                    f5:6f:a2:3f:54:45:5f:14:72:8f:f2:40:a3:08:10:
                    66:b0:1b:1c:12:59:d8:8b:30:d0:2f:63:e7:98:2a:
                    ce:05:ea:91:51:da:2e:40:58:b5:81:74:aa:1f:44:
                    1c:0e:9d:91:aa:4c:97:d1:3c:ba:63:e9:a4:fc:9a:
                    e0:58:ea:e9:29:eb:10:9b:a6:cc:64:55:4a:57:d0:
                    b8:3e:c5:c3:38:68:dc:4e:1a:50:ea:0c:05:be:39:
                    61:da:be:b7:06:dc:e2:7b:2d:e1:c4:15:ef:e9:f2:
                    d4:fd:b8:14:b9:01:9d:27:41:4d:e6:28:a3:c1:c3:
                    83:a6:8b:36:8c:ba:3a:13:3d:0e:01:c3:79:45:68:
                    bf:43:0c:ae:b3:1a:f7:a5:9f:c9:99:fd:64:ef:2f:
                    ac:2a:42:a2:2a:f8:45:8b:be:3f:96:6e:98:0a:e2:
                    25:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A6:67:4C:2C:32:B8:78:88:68:CF:D6:5F:4B:B4:1C:6F:C5:F4:FD
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UqZnTCwyuHiIaM_WX0u0HG_F9P0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:08:c2:1c:51:17:9e:7a:5e:66:fb:70:ba:c4:d5:f5:9b:ad:
         2b:9a:ca:6b:83:9b:48:fc:e1:0c:8a:aa:2a:1d:26:24:6a:26:
         da:bb:8d:d1:22:56:a7:2c:b3:cc:26:6d:72:b2:dc:d3:15:35:
         0b:2c:8b:f0:08:00:02:5f:2a:e7:38:49:83:b9:45:32:43:46:
         9b:5a:2a:6b:52:66:16:13:a3:db:ea:de:67:76:47:cb:3b:b8:
         9a:63:e0:4f:ce:ac:f9:13:ba:17:85:2b:da:ff:59:e3:75:fd:
         7c:b0:20:11:f7:14:62:3a:34:33:a4:13:86:57:07:8d:10:65:
         1a:99:e8:08:73:ff:f6:ac:27:cf:e6:be:b8:89:52:0a:89:73:
         6f:c8:f6:01:04:8d:88:5e:ef:78:69:8d:b5:37:0b:c6:bd:a2:
         cb:b3:16:3c:fd:e1:d7:c1:0b:f3:72:1a:75:e6:92:4c:69:f3:
         77:42:b7:65:73:a4:a5:80:4c:45:3b:20:15:0e:0b:7d:02:0f:
         ce:75:e3:67:f3:2a:2d:3b:21:86:09:b4:de:37:47:1d:f0:e5:
         88:ee:94:89:fc:d3:5f:bd:4c:bf:d4:7d:6c:c8:af:9d:0b:7f:
         40:13:2a:a0:84:9c:dd:1c:70:95:dd:92:53:48:e0:9a:a9:36:
         24:a9:ba:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org