Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/VxW7siILYV5NNWmZVf79br7jcz4.roa
File:                     VxW7siILYV5NNWmZVf79br7jcz4.roa (raw, json)
Hash identifier:          7UcjanKbZ/a0eeZ/06UeYDcIe8Za70XeErw9e0Q6NA8=
Subject key identifier:   57:15:BB:B2:22:0B:61:5E:4D:35:69:99:55:FE:FD:6E:BE:E3:73:3E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       016D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/VxW7siILYV5NNWmZVf79br7jcz4.roa
Signing time:             Tue 30 May 2023 17:32:36 +0000
ROA not before:           Tue 30 May 2023 17:32:36 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:1000::/37 maxlen: 37

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:36 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5715BBB2220B615E4D35699955FEFD6EBEE3733E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:71:cf:7b:73:6e:a1:01:ec:43:cd:56:c1:58:
                    47:92:23:bc:e2:8d:85:a1:25:33:c8:fc:35:a0:26:
                    5e:58:ea:01:22:1d:2a:ef:a5:f4:24:7f:c3:fb:68:
                    ec:65:9d:b7:d7:b6:20:08:5e:cd:52:c5:90:0e:0c:
                    a1:32:38:29:18:f6:5c:a9:b5:5f:08:8b:a5:82:38:
                    cf:1e:68:23:a5:da:ba:f5:28:f2:33:66:47:5d:40:
                    dc:3a:cd:90:5d:e3:7a:11:b5:a4:f6:b9:d9:3a:20:
                    e2:3c:7b:b3:49:9b:c6:70:3d:ef:58:d6:1f:09:99:
                    bf:69:73:b0:a9:e7:00:2f:06:60:25:1a:8e:5b:3e:
                    51:65:e3:17:64:a0:ae:e8:6a:80:80:de:a0:9b:36:
                    fe:18:72:6e:3e:5a:69:75:d2:6d:1f:82:0e:19:e2:
                    5b:61:4f:dd:8d:d0:ca:f4:35:42:c5:3c:87:a9:98:
                    5a:8d:95:11:65:80:78:0d:d5:4e:d5:dd:fd:d4:3c:
                    d7:1f:08:1b:66:b7:95:9d:10:71:27:1a:dd:58:b0:
                    e2:1e:cd:13:3a:35:fa:e3:9d:59:d1:5f:01:49:31:
                    90:12:06:ac:bb:09:7b:45:45:fc:92:21:ce:eb:bf:
                    d2:5b:48:ec:5b:cd:f1:74:50:c3:4e:c6:9d:d4:ae:
                    62:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:15:BB:B2:22:0B:61:5E:4D:35:69:99:55:FE:FD:6E:BE:E3:73:3E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/VxW7siILYV5NNWmZVf79br7jcz4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:1000::/37

    Signature Algorithm: sha256WithRSAEncryption
         99:59:8c:32:54:5f:a3:af:39:10:93:30:8e:32:cd:a1:1e:19:
         3e:04:3b:da:8a:ae:3e:a1:44:d1:b3:4e:c2:57:95:a0:1b:5c:
         9f:7f:ee:57:cc:76:2a:ef:4f:e4:fc:50:61:aa:36:e4:33:d9:
         47:83:6c:ef:aa:df:e3:c2:8a:fd:54:5b:a0:77:3e:bf:53:8e:
         f9:d6:fc:19:ef:4d:ae:15:ce:9b:96:2f:62:55:05:d2:2d:7c:
         0a:75:0c:06:44:06:ee:a1:b6:c7:6f:9b:29:42:5f:b0:2c:ce:
         d1:90:80:fd:fa:b6:97:a6:6b:bd:af:48:24:1a:e1:e5:e5:b8:
         a8:98:f0:34:d3:fb:9d:0b:85:a1:b9:cb:de:ef:3f:4f:a2:4c:
         dc:3b:bb:66:b1:67:27:8f:bb:c7:55:57:9b:f7:20:f2:0a:86:
         b7:24:fa:e0:66:b5:da:1b:23:a5:cf:72:a4:ec:80:4f:20:3d:
         1a:86:9e:48:e5:f7:56:8a:72:24:c2:22:3c:bd:66:66:a5:a6:
         c6:fc:66:96:01:3d:f5:3c:e1:4a:27:51:e1:c7:f0:03:10:d2:
         34:18:5e:b1:0d:91:34:9e:66:2c:9a:52:8a:69:45:fd:b6:8b:
         9c:73:d9:e7:86:2d:2a:98:c8:73:76:8a:7f:39:c8:98:1b:f1:
         21:37:3e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org