Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_UniW3jRRqyvxaA3f0X6ECTn34w.roa
File:                     _UniW3jRRqyvxaA3f0X6ECTn34w.roa (raw, json)
Hash identifier:          LJAsJsT2sXS5X7CSVqgV6YvxxWulxFzYgmoBfQWGV2k=
Subject key identifier:   FD:49:E2:5B:78:D1:46:AC:AF:C5:A0:37:7F:45:FA:10:24:E7:DF:8C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       2E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_UniW3jRRqyvxaA3f0X6ECTn34w.roa
Signing time:             Tue 30 May 2023 16:02:08 +0000
ROA not before:           Tue 30 May 2023 16:02:08 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ea00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:02:08 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=FD49E25B78D146ACAFC5A0377F45FA1024E7DF8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:3a:83:12:33:41:c3:2e:09:65:93:03:dd:
                    a5:d2:0a:3c:a0:ef:92:94:c7:f5:5b:34:00:87:30:
                    f1:ef:84:df:0d:39:fd:38:d1:53:af:38:08:22:99:
                    d1:a4:30:19:cd:e1:be:f4:11:f0:da:fd:e5:46:65:
                    b4:2f:7f:0a:7c:4d:0a:60:63:68:7d:e6:57:59:5a:
                    3b:12:d1:3d:86:98:10:0c:4d:27:b1:c4:5e:a7:5a:
                    57:9c:21:04:3f:66:56:62:06:68:20:9a:06:1d:54:
                    ca:f1:82:3b:fe:8f:9e:1c:c3:5d:ff:2e:4d:7a:24:
                    64:d1:1c:c9:b2:d0:80:5e:9b:b8:d2:f1:5f:82:1a:
                    f2:3e:e1:2c:20:b9:8c:a2:58:dc:47:2f:85:f1:d7:
                    0f:0f:49:c1:33:1f:0f:37:ad:31:6b:13:55:ca:78:
                    9a:d6:ba:af:db:04:bd:d7:5b:7d:71:f9:0d:72:22:
                    d0:81:75:b4:c6:2a:f1:85:7c:a2:60:31:88:d8:1b:
                    3b:6a:6c:a5:40:a7:b5:60:d8:6e:db:48:51:d8:ac:
                    07:23:7d:9a:79:f0:4c:2d:f0:04:6a:64:3c:2d:f9:
                    13:2b:5a:d1:66:b5:b2:c1:50:02:a5:29:db:5f:a5:
                    be:a3:02:34:6a:29:35:cc:76:12:67:f7:9b:8f:78:
                    b4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:49:E2:5B:78:D1:46:AC:AF:C5:A0:37:7F:45:FA:10:24:E7:DF:8C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_UniW3jRRqyvxaA3f0X6ECTn34w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ea00::/40

    Signature Algorithm: sha256WithRSAEncryption
         24:13:91:31:2a:eb:f4:3b:c0:cc:59:40:b7:c4:27:1f:9d:07:
         7e:ca:94:42:b1:29:70:90:6c:af:fc:fc:28:87:32:eb:e8:83:
         38:97:ed:a5:be:28:78:44:aa:9a:a3:8c:a6:5f:53:da:14:50:
         bb:49:f9:08:cb:8e:c6:a8:b8:93:55:5d:a2:9a:3a:16:57:86:
         cc:bf:4a:61:4f:ef:06:7e:4d:97:cf:07:59:60:95:e4:d7:67:
         92:d8:a9:b2:4d:67:a0:76:6d:73:f6:74:48:b4:21:aa:d8:19:
         ae:09:56:b4:44:2a:78:80:95:0c:25:36:2b:12:6e:7e:fa:17:
         89:7b:9e:5f:78:d9:91:f6:e3:6a:57:79:df:c5:1e:01:cd:8b:
         43:b6:91:e8:7a:7c:b4:cd:05:3b:06:b0:da:ec:61:46:1c:b6:
         7d:b3:d0:84:73:70:a2:e0:e5:4c:6a:52:36:7c:1f:c1:a7:45:
         4a:c9:57:0e:bd:cd:32:bd:40:e6:6b:27:16:bf:04:6a:d1:44:
         7f:67:cb:a5:7f:64:2c:a8:ee:78:75:6a:70:77:53:f3:b1:a4:
         18:3c:f4:2d:76:a3:18:3c:45:c0:45:f5:6c:3e:fa:a4:d8:b3:
         5e:5a:45:68:ab:1f:0e:81:4c:fc:5e:65:dc:61:5c:38:b0:3a:
         71:a1:32:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org