Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/dHJC7weil5tbFLV1dpbfgcwIDE0.roa
File:                     dHJC7weil5tbFLV1dpbfgcwIDE0.roa (raw, json)
Hash identifier:          9N+kY45Fx+y9LD3E7fD0rjdfbQI94Yfef+ScNPp4xEo=
Subject key identifier:   74:72:42:EF:07:A2:97:9B:5B:14:B5:75:76:96:DF:81:CC:08:0C:4D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       BC
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/dHJC7weil5tbFLV1dpbfgcwIDE0.roa
Signing time:             Tue 30 May 2023 16:10:12 +0000
ROA not before:           Tue 30 May 2023 16:10:12 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f900::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:12 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=747242EF07A2979B5B14B5757696DF81CC080C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:f1:fb:2b:f8:c9:1d:28:79:da:b6:25:b2:
                    7f:23:81:61:a1:ea:85:a3:87:83:82:64:1d:39:6a:
                    8e:fa:22:c6:30:62:a3:ac:74:96:6d:c9:92:88:71:
                    c0:fd:be:11:fb:49:e2:07:f7:f9:c6:2f:55:01:49:
                    02:c0:ed:de:76:35:55:66:85:6b:f8:e6:61:4a:ff:
                    0d:ef:a7:32:94:14:78:fb:d0:fc:d2:ac:45:8c:9a:
                    5c:54:a9:32:58:d2:e7:62:4d:d5:55:48:22:75:10:
                    fe:a9:0e:8a:18:06:29:4e:69:bd:d3:40:cf:e8:ef:
                    f6:53:fd:7a:ba:90:cc:d5:18:ab:73:ad:15:27:92:
                    21:bb:5f:67:29:9b:4b:5b:d9:14:fe:8a:25:2f:ab:
                    39:56:93:25:61:03:e6:91:cb:20:66:4d:a6:dd:78:
                    78:a7:31:8f:9e:53:a6:1d:97:a0:01:fe:cc:88:ce:
                    7d:71:d5:72:5b:1f:dc:ed:86:93:da:9e:fd:2d:99:
                    bf:1f:70:e8:3b:c2:98:2b:a0:a2:d5:04:6d:7d:6d:
                    7c:08:fa:2b:70:31:73:0d:98:d2:d1:01:48:d0:0c:
                    66:c9:27:d9:ba:1e:c3:04:64:5d:a9:7e:46:cf:5a:
                    77:5c:5f:e8:5c:7f:35:f2:3a:ad:b6:05:69:09:06:
                    d9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:72:42:EF:07:A2:97:9B:5B:14:B5:75:76:96:DF:81:CC:08:0C:4D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/dHJC7weil5tbFLV1dpbfgcwIDE0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f900::/40

    Signature Algorithm: sha256WithRSAEncryption
         b1:f1:33:7a:8c:e8:20:45:12:ad:20:d4:4f:3d:97:b1:05:46:
         74:5e:75:51:cc:e5:72:98:48:f2:f7:b4:e0:1f:40:76:be:d1:
         f1:29:5c:81:42:01:3b:65:fa:73:c9:2f:37:aa:2e:a8:5c:38:
         91:11:9b:21:af:17:df:d7:62:79:9b:dd:38:ea:8a:04:3d:2e:
         05:31:5a:da:c6:5f:1a:84:56:74:a4:b9:03:62:54:2c:95:ea:
         ee:73:7a:9a:36:8f:c8:bb:6c:64:e2:ce:5b:66:1d:40:84:20:
         c8:da:d1:21:57:3c:7b:35:73:06:12:42:ff:3a:12:df:ac:64:
         73:d9:42:33:da:a6:ff:ff:0d:44:84:27:1a:10:bf:1b:42:12:
         f7:61:ff:ca:29:10:11:84:c6:48:8a:e6:be:53:4a:c2:0c:48:
         14:bc:c5:84:fc:39:b1:f4:97:83:fa:64:df:94:9c:22:b2:be:
         06:78:4b:46:ce:19:f0:eb:66:d6:90:21:eb:f8:3b:0a:e2:4f:
         12:45:db:7e:0d:8b:2c:bf:c6:c3:26:89:50:92:46:88:a4:1b:
         d1:2f:9d:bb:f1:45:9c:14:ab:4a:dc:e4:bd:91:66:dc:38:48:
         b8:19:7f:f9:3a:3b:4b:35:27:c0:f5:a5:9a:1c:39:e9:9e:f6:
         9c:28:a7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org