Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/VW9MajAWFPxJoz6wbR2Dnw61SeY.roa
File:                     VW9MajAWFPxJoz6wbR2Dnw61SeY.roa (raw, json)
Hash identifier:          gckNkxHCKSVFk/gJMu4g4IU9xoZKAg1NdTTkCpfGjSw=
Subject key identifier:   55:6F:4C:6A:30:16:14:FC:49:A3:3E:B0:6D:1D:83:9F:0E:B5:49:E6
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       022B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/VW9MajAWFPxJoz6wbR2Dnw61SeY.roa
Signing time:             Tue 30 May 2023 17:42:23 +0000
ROA not before:           Tue 30 May 2023 17:42:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1c00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=556F4C6A301614FC49A33EB06D1D839F0EB549E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ed:e3:da:c2:d2:e6:d8:88:52:32:bc:85:fb:
                    68:05:89:80:89:c8:2d:11:69:87:62:7e:01:72:16:
                    1d:81:8e:7a:c7:a0:95:11:33:42:92:9f:d2:7c:5c:
                    f3:b1:da:72:47:c6:4c:61:26:28:81:d1:0c:ad:80:
                    ad:b4:ce:99:35:45:eb:48:42:61:62:7b:b7:dc:34:
                    16:10:7b:2a:e6:92:99:00:95:33:b9:2f:fd:c8:16:
                    83:aa:81:e0:36:48:4f:19:a8:a8:4c:09:60:6e:d2:
                    fb:6e:cf:e5:2f:24:f0:cb:88:95:e2:bc:23:d2:56:
                    a1:33:91:8c:be:f0:cc:1f:af:c5:60:86:d8:c1:7e:
                    da:e2:a9:05:4f:09:0f:64:88:f0:85:e6:bd:3e:53:
                    8e:36:28:76:32:6c:50:9b:0b:dc:5a:c9:9b:44:20:
                    15:cd:45:74:e6:fa:e6:80:2c:66:f6:2b:b8:4f:f2:
                    e7:22:a0:d5:b7:11:aa:c3:aa:49:63:ca:c0:86:f8:
                    15:54:99:b1:31:73:87:d7:45:03:77:33:a4:19:b3:
                    ab:99:0f:b6:8f:56:26:d4:69:e6:7d:bb:1a:75:46:
                    6d:41:fb:cb:f3:d5:7f:a8:e4:b1:be:33:af:79:ee:
                    e0:24:43:c7:05:7e:07:08:15:4f:59:1f:01:90:27:
                    f3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6F:4C:6A:30:16:14:FC:49:A3:3E:B0:6D:1D:83:9F:0E:B5:49:E6
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/VW9MajAWFPxJoz6wbR2Dnw61SeY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:16:5c:78:f5:74:71:72:27:65:d4:09:42:c3:e9:8f:76:b8:
         69:bc:f6:3b:1c:ed:70:17:1b:b3:86:06:cc:04:d8:a0:eb:03:
         7c:b8:1e:43:bc:49:14:df:7a:c9:bb:b1:75:dc:38:8b:67:69:
         9d:3d:35:0d:16:38:d1:04:16:5d:ef:06:5d:a6:2c:ac:08:81:
         02:90:9b:6e:5d:d9:85:7c:dc:d2:16:98:52:9b:0a:d0:3b:b9:
         76:0c:77:13:fd:9e:fd:e4:95:b0:44:4d:4a:ba:5b:09:f5:9e:
         83:1b:83:36:fd:c8:80:96:8e:cb:80:34:a9:fd:60:d1:6f:c1:
         d7:ed:76:8a:90:7b:e8:1c:5b:1e:09:06:f2:86:9d:4f:82:dd:
         bb:55:a9:08:8e:af:97:83:30:92:cd:bc:46:46:09:d1:45:56:
         4b:5d:1c:21:b6:7d:4b:f5:6e:c8:80:a2:08:b6:bf:16:fc:e0:
         12:44:0d:0c:0b:91:93:41:1f:53:a1:da:d2:2a:06:8c:eb:4c:
         0e:83:af:84:19:d1:52:cb:5e:a3:05:0c:80:04:5e:a2:79:74:
         c5:b2:5c:dd:08:79:f9:11:38:7a:a0:19:f2:35:d1:8d:0b:4f:
         d8:02:09:7d:5c:b2:49:51:39:e5:84:21:56:8d:30:81:4a:a7:
         1b:3f:d9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org