Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cq4IpqeSdA6Z2Zx0Cuzyhl1dEoc.roa
File:                     cq4IpqeSdA6Z2Zx0Cuzyhl1dEoc.roa (raw, json)
Hash identifier:          jmlk2R6i0MfiiA98/f3sJQw3F92eYhGnHzrI7115PqU=
Subject key identifier:   72:AE:08:A6:A7:92:74:0E:99:D9:9C:74:0A:EC:F2:86:5D:5D:12:87
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01F1
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cq4IpqeSdA6Z2Zx0Cuzyhl1dEoc.roa
Signing time:             Tue 30 May 2023 17:38:33 +0000
ROA not before:           Tue 30 May 2023 17:38:33 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7300::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:33 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=72AE08A6A792740E99D99C740AECF2865D5D1287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:10:2b:81:81:ac:09:cd:27:cf:ba:95:b5:c5:
                    1d:09:5e:6d:65:11:ff:0b:5f:83:67:a7:94:51:56:
                    ac:4e:b1:39:65:3c:1f:4c:24:04:e3:36:0f:56:c7:
                    32:dd:27:03:1d:cb:02:b4:ea:7e:45:d9:d1:16:2b:
                    47:c6:52:e8:34:51:a0:73:58:b8:0b:17:c6:8a:5b:
                    a2:af:ce:57:51:c4:fb:38:bb:ee:b7:54:7d:ce:75:
                    00:03:b4:02:e5:5d:04:cc:fe:22:d3:72:ab:73:0e:
                    af:9c:13:31:b2:df:fb:2e:7c:f2:48:a7:e3:19:46:
                    cc:9b:0a:bf:ac:4f:2c:c0:a5:3b:e1:f5:db:03:fa:
                    33:fc:f9:ac:89:d9:d2:2f:4d:0d:7a:52:19:74:c8:
                    74:81:0a:9e:32:8c:22:df:69:ba:7c:20:fa:27:34:
                    13:e3:96:30:b1:61:d5:2a:5a:c7:52:67:a0:2e:1c:
                    c9:04:b9:29:94:29:94:ef:78:37:5f:63:94:40:d1:
                    f7:a1:8e:61:8c:8d:fb:6a:8a:7e:d0:ec:5f:75:e9:
                    12:94:69:f3:d2:8f:a6:c1:88:ba:ed:6e:5a:dc:d2:
                    76:d3:c6:db:4c:8c:9d:30:ce:de:d0:52:26:27:d9:
                    39:93:f0:a8:6a:29:6a:c0:26:0d:35:8c:e6:5f:8a:
                    60:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AE:08:A6:A7:92:74:0E:99:D9:9C:74:0A:EC:F2:86:5D:5D:12:87
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cq4IpqeSdA6Z2Zx0Cuzyhl1dEoc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7300::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:c4:3d:7e:4f:e9:86:73:9b:97:f4:d0:56:ad:30:0c:56:0c:
         2a:38:11:5e:43:12:f1:05:97:34:a2:62:2e:b9:ef:8e:bb:c0:
         fb:32:95:62:ab:68:45:29:4f:eb:bf:a1:25:b1:a3:36:87:de:
         70:87:0e:3f:e3:86:c4:62:3f:da:08:52:4f:5d:aa:0d:ce:1b:
         0c:9a:bc:2d:84:f7:32:d5:e7:45:84:d4:b1:99:f0:ff:bf:11:
         d3:d7:6a:42:b6:50:e7:bd:f7:10:c1:79:06:46:25:b9:d1:de:
         28:3a:2d:11:ac:fe:42:1e:b5:7e:a0:42:03:44:b7:2f:71:5e:
         41:5c:ba:f3:a3:23:d7:f3:ef:97:fd:2a:2b:5b:f0:29:5b:0c:
         83:26:ee:74:ef:19:25:71:ad:9b:f7:ff:d7:b2:b2:fd:cb:11:
         2a:dc:29:37:a3:14:09:bc:03:17:0e:b4:65:dc:fc:2b:8e:14:
         96:77:d9:53:6e:35:16:de:62:cf:d9:93:f0:b5:7e:67:db:47:
         5f:09:ef:de:0b:ff:4e:e9:35:cb:69:40:31:21:ca:07:91:21:
         ef:a3:34:f0:6d:14:82:73:aa:31:69:24:5c:90:ab:57:0e:c5:
         58:d1:04:68:00:cb:3c:2b:ab:1b:35:ec:04:62:6d:39:bd:6c:
         ba:54:5e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org