Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XqV-6Ei-YwX2leDaf91F4Bha1Ow.roa
File:                     XqV-6Ei-YwX2leDaf91F4Bha1Ow.roa (raw, json)
Hash identifier:          Twzia6eTOZQq/Vvum+ICLxanGTS8xSG1r8HJcRXCusM=
Subject key identifier:   5E:A5:7E:E8:48:BE:63:05:F6:95:E0:DA:7F:DD:45:E0:18:5A:D4:EC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01AC
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XqV-6Ei-YwX2leDaf91F4Bha1Ow.roa
Signing time:             Tue 30 May 2023 17:36:26 +0000
ROA not before:           Tue 30 May 2023 17:36:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:3800::/38 maxlen: 38

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5EA57EE848BE6305F695E0DA7FDD45E0185AD4EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:3f:7f:e2:33:8e:d2:78:02:54:c0:17:f3:
                    d7:79:c5:71:0f:a2:72:8b:a5:e0:03:76:f1:e2:fc:
                    d1:a8:f6:3a:f4:76:a1:6e:66:67:1f:61:33:70:8f:
                    35:ab:f5:34:5f:a9:2b:8a:34:55:f7:a2:b1:39:be:
                    5c:16:16:84:7f:d0:39:27:cf:1a:a4:01:63:1b:f9:
                    ca:00:15:1b:ac:53:f6:d3:e8:cd:c3:a6:5e:31:2c:
                    0c:33:64:e9:fb:bd:cb:d4:d0:e6:07:af:c3:ab:1b:
                    e1:eb:6c:e0:ae:bf:c7:00:6e:7a:bc:79:1a:8d:51:
                    f0:e2:89:c2:4f:97:f9:e9:ec:40:74:1e:f6:39:f3:
                    34:1f:ba:13:4d:b5:66:9d:ed:19:94:cf:2e:83:24:
                    c7:3c:41:8e:f0:1f:fa:55:48:d6:bd:19:b3:65:06:
                    5b:d9:87:73:b3:4a:fc:31:22:3a:2f:67:b9:c3:85:
                    59:dc:4d:72:fb:aa:e4:73:8d:11:2b:f4:5d:4b:94:
                    75:f5:60:5d:b4:e3:53:04:5a:30:77:4e:02:f0:1d:
                    f9:e5:32:e0:53:77:97:29:ed:53:4a:4a:02:b3:13:
                    e3:eb:09:67:e5:ca:99:05:e5:c6:cf:f0:87:aa:8b:
                    98:10:b1:2f:d4:0a:2d:b0:a4:bd:a9:6a:7b:c1:a1:
                    ca:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A5:7E:E8:48:BE:63:05:F6:95:E0:DA:7F:DD:45:E0:18:5A:D4:EC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XqV-6Ei-YwX2leDaf91F4Bha1Ow.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:3800::/38

    Signature Algorithm: sha256WithRSAEncryption
         11:ce:1b:bb:1c:8b:3e:29:65:5a:92:7e:73:34:c3:22:9b:c2:
         d4:28:aa:1d:5b:c3:93:ed:7c:79:1c:65:cf:e3:a0:ff:23:fc:
         2d:29:e0:11:df:ea:dd:46:ac:a7:7c:ac:ba:3f:37:c1:42:0b:
         ec:e6:99:72:bb:61:2f:6e:cb:0b:34:e8:89:b2:64:86:6c:e7:
         12:eb:74:71:12:8c:cf:b9:65:1d:d3:ca:9c:c2:2c:42:4b:12:
         db:88:80:02:57:e3:4d:bf:2a:ce:98:45:2a:6b:4b:bd:4c:29:
         c4:14:20:a5:e8:cd:7b:ea:f4:ad:d3:e1:f8:24:2d:5a:b7:87:
         1c:02:33:dd:1b:2b:4e:d6:23:62:b1:e7:73:77:7f:8f:ee:e7:
         52:92:67:29:50:57:a3:15:60:5c:4e:a8:ac:ef:5e:ac:cc:41:
         38:b5:08:e2:e7:32:cb:1b:9f:78:04:87:49:a8:01:00:01:51:
         7e:dd:1b:38:f5:b9:5b:38:6b:93:a2:d3:8e:ed:62:b5:cc:80:
         6d:43:d0:00:9a:86:57:d6:a1:29:e6:07:3a:14:ed:69:cf:f2:
         da:75:67:1a:af:55:9b:47:11:b6:ae:ec:09:26:90:27:fe:fb:
         fe:81:b4:16:5d:ec:b7:e9:3d:4d:de:8c:0b:5c:54:d5:88:92:
         6a:8d:4c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org