Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bq7zw1AY3AkRnzEJe8x232v_y9U.roa
File:                     bq7zw1AY3AkRnzEJe8x232v_y9U.roa (raw, json)
Hash identifier:          ie35oLCDeRrq7oPv1wkcmQPocaY1Qz5i+2j/2jjs3Hc=
Subject key identifier:   6E:AE:F3:C3:50:18:DC:09:11:9F:31:09:7B:CC:76:DF:6B:FF:CB:D5
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       D9
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bq7zw1AY3AkRnzEJe8x232v_y9U.roa
Signing time:             Tue 30 May 2023 16:10:23 +0000
ROA not before:           Tue 30 May 2023 16:10:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9d00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=6EAEF3C35018DC09119F31097BCC76DF6BFFCBD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:de:8e:6a:b8:16:4c:c9:99:dd:30:59:73:e2:
                    7b:32:59:6a:38:4e:f4:1b:f9:af:e9:14:56:65:47:
                    3f:a5:c3:e2:64:f7:4f:72:61:e8:9e:75:bd:b3:34:
                    81:57:14:1b:21:84:eb:3e:65:03:f8:4b:3f:1d:a3:
                    c7:f8:e0:57:55:0c:43:6b:48:20:cd:a0:73:38:54:
                    e9:77:51:ff:e6:37:bf:34:cd:a6:11:d6:b2:cc:9b:
                    a7:34:c9:be:e4:e6:9f:35:22:05:7d:b1:c9:8a:ed:
                    cd:6b:44:8d:22:db:00:43:fa:3d:29:49:df:17:b5:
                    33:c0:ff:22:ae:0a:d7:76:77:2b:b5:d2:e4:56:78:
                    8f:66:3b:72:f2:08:91:5e:df:d8:dd:bd:90:b1:6e:
                    e0:c4:c5:71:2e:f4:f0:3e:5e:a0:95:12:71:d8:30:
                    61:e1:58:11:15:f7:f1:b2:36:6d:1e:8a:5f:f7:6f:
                    a9:3f:46:76:97:54:33:f5:c0:b4:2e:ab:b7:db:85:
                    96:71:89:49:5b:2d:bf:8d:9b:f5:29:0e:f5:35:fd:
                    0f:5f:4d:7f:d6:54:ea:0a:f4:62:03:39:51:b8:7f:
                    47:42:df:b1:8e:a7:96:76:ca:11:db:62:08:41:05:
                    bd:4a:7d:61:5f:79:66:49:ad:c1:19:c8:31:f3:1e:
                    f2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AE:F3:C3:50:18:DC:09:11:9F:31:09:7B:CC:76:DF:6B:FF:CB:D5
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bq7zw1AY3AkRnzEJe8x232v_y9U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:0f:59:54:0d:15:78:e4:8e:64:85:7f:51:bf:c7:dd:86:e0:
         4c:95:6b:99:97:08:71:4e:c1:92:30:f6:c5:a7:e3:91:75:f7:
         29:32:0a:c6:19:87:0f:e3:b5:3a:56:34:94:16:0c:e9:0a:61:
         a0:0e:23:c6:8b:be:57:31:e5:d6:35:8c:7f:6c:48:59:a6:f5:
         b8:e8:f9:01:be:42:12:ed:ee:49:3a:0f:bc:6f:7b:0f:a5:30:
         f2:e1:7b:3b:94:80:41:97:b0:28:00:9a:19:80:ff:7b:13:1b:
         98:64:71:09:e0:7f:db:d2:17:e3:6f:59:71:49:2e:d5:d2:c4:
         58:36:7a:7e:57:9c:26:99:f5:da:74:e2:4c:ba:66:e5:03:da:
         37:cb:06:aa:9c:1c:6f:b6:33:ad:bb:12:ba:d6:e3:66:d9:e8:
         80:3c:37:13:ef:1e:bb:34:0f:4c:b2:fb:c8:8e:59:9b:4b:3a:
         e5:ba:eb:b1:de:76:87:b0:c6:15:d7:98:31:d7:09:96:6e:6b:
         37:88:51:68:d9:39:51:ec:43:b3:08:e9:10:86:49:61:0d:84:
         6b:3a:bc:71:bf:48:32:d9:20:26:9d:22:7e:6e:53:ed:7d:bf:
         92:da:5c:fb:66:70:0e:e8:93:c6:5a:da:cf:1f:6c:97:41:be:
         3e:ca:fe:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org