Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/baU8LKuNyxYr5Ttg385QybPB6WI.roa
File:                     baU8LKuNyxYr5Ttg385QybPB6WI.roa (raw, json)
Hash identifier:          sIjYO4AN32gG5bFNLA4PtzpP+yY8ZtEMWrRCLvv7ml0=
Subject key identifier:   6D:A5:3C:2C:AB:8D:CB:16:2B:E5:3B:60:DF:CE:50:C9:B3:C1:E9:62
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0109
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/baU8LKuNyxYr5Ttg385QybPB6WI.roa
Signing time:             Tue 30 May 2023 16:12:34 +0000
ROA not before:           Tue 30 May 2023 16:12:34 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9200::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:34 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=6DA53C2CAB8DCB162BE53B60DFCE50C9B3C1E962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ab:62:9d:6c:6d:65:7d:2e:a5:b9:7d:3f:a6:
                    14:62:42:21:bb:47:91:bf:cb:3b:ab:25:ce:30:a8:
                    06:e5:7f:cb:a5:d3:fb:41:4f:46:5d:39:41:23:0e:
                    f1:2e:43:10:1a:a5:86:48:1b:ab:f2:86:00:36:21:
                    30:07:42:01:bf:8d:59:8d:80:47:b4:9c:c1:d0:06:
                    c0:6a:d7:a0:33:4d:cf:49:e5:04:0d:d4:ef:51:53:
                    ba:57:9e:4d:4a:0a:c8:06:76:03:d6:60:a4:26:66:
                    3e:29:49:8a:c3:29:af:dc:bf:44:7d:29:04:70:69:
                    0f:9f:df:c4:35:ae:83:60:48:51:79:7a:02:32:35:
                    39:dc:a4:6f:5b:c4:7a:1f:71:b2:37:3e:f9:5f:48:
                    92:ea:6f:a5:71:18:3a:fc:f7:08:d3:52:6a:14:73:
                    e0:9a:c8:93:27:46:80:db:59:94:e4:58:98:31:2c:
                    de:d3:e9:70:e8:e5:1e:38:87:10:cf:b1:90:03:22:
                    db:24:a6:0b:f4:69:23:18:6e:c0:f4:d7:25:bb:5e:
                    ba:12:88:5f:9b:bf:42:2e:ad:f2:ab:ea:91:d0:86:
                    52:bd:05:90:16:c9:9f:62:d4:74:14:a8:d8:d5:3a:
                    76:39:7c:a0:68:c3:5f:d9:72:46:31:57:45:d6:80:
                    b2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A5:3C:2C:AB:8D:CB:16:2B:E5:3B:60:DF:CE:50:C9:B3:C1:E9:62
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/baU8LKuNyxYr5Ttg385QybPB6WI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9200::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:49:d8:81:0f:20:9c:b7:d6:60:95:a8:39:a0:0e:22:ff:78:
         01:ce:7e:2d:56:a3:4a:cc:4f:b8:07:ac:52:74:90:39:ff:19:
         e3:c0:f9:99:06:bc:39:a0:28:80:db:c6:56:41:a7:66:90:e5:
         40:61:69:9a:9d:52:95:e5:87:1e:95:e9:a9:1f:1d:75:c3:e9:
         e0:03:94:a4:1b:0c:7e:d9:72:fc:2b:6a:44:e0:ae:de:d1:90:
         d4:a2:cd:17:a6:0e:cf:f3:56:48:80:b6:ab:25:a0:41:d1:df:
         64:e9:46:5f:d3:12:a3:7e:15:ff:72:ae:d3:ed:60:dd:ab:4c:
         4d:99:0c:49:c8:68:9c:b0:ff:9d:0f:69:91:bf:d5:2f:8b:ec:
         ef:f6:c2:1d:de:ec:a5:ec:79:e9:f4:7e:68:bb:3f:c4:86:0a:
         2e:4c:e1:94:2e:23:b9:82:83:0b:ca:08:b6:69:5e:50:a2:96:
         07:37:2d:63:7e:91:ec:f2:ea:58:0e:c9:3a:79:54:af:c9:e9:
         53:88:6d:05:ca:9e:a1:8a:e1:b9:d0:58:d5:e1:0c:67:d5:2e:
         be:dc:8d:77:42:18:95:45:0b:df:be:58:d1:f6:d0:b0:81:0f:
         8a:d0:c6:21:48:b4:01:d4:c5:cc:f9:66:85:40:c5:da:65:96:
         7d:c4:60:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org