Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ejZudPIkLk71OILPVy9IGYmCfIo.roa
File:                     ejZudPIkLk71OILPVy9IGYmCfIo.roa (raw, json)
Hash identifier:          dv6UpQP0yGFV7O9iOFeucUrKY+p1+9eW0TDxCRu9I60=
Subject key identifier:   7A:36:6E:74:F2:24:2E:4E:F5:38:82:CF:57:2F:48:19:89:82:7C:8A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       019F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ejZudPIkLk71OILPVy9IGYmCfIo.roa
Signing time:             Tue 30 May 2023 17:36:20 +0000
ROA not before:           Tue 30 May 2023 17:36:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9500::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=7A366E74F2242E4EF53882CF572F481989827C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:72:e2:a0:f8:eb:dc:88:de:52:dc:9b:f2:35:
                    24:d5:6b:b1:ce:d2:d5:2b:c5:e3:23:7c:f8:82:e5:
                    29:30:62:b9:f4:a7:8e:de:58:34:ee:8f:3e:4a:3e:
                    a0:4a:e1:49:65:9d:4b:1b:51:af:94:c0:47:69:08:
                    86:94:c3:67:03:72:23:51:01:14:52:78:a6:fc:7f:
                    cc:dd:73:75:82:48:6b:7e:9a:7f:b7:bf:2f:16:83:
                    2d:92:dc:64:5a:21:91:16:05:84:4d:35:5d:57:3a:
                    b7:98:38:68:e0:2e:49:97:0d:c5:9e:89:61:cf:1d:
                    05:71:5d:21:70:7a:45:16:c3:2c:c2:41:59:e6:e9:
                    00:d8:ab:0c:e5:27:e2:bd:aa:ba:13:cc:a3:74:38:
                    5b:fe:47:9b:b5:3d:51:76:64:af:da:bc:2f:24:19:
                    3e:54:5e:9c:86:87:ff:d9:1a:c7:d8:d1:c4:8f:14:
                    d5:c4:69:52:51:99:ad:ec:01:66:43:4a:89:8e:b2:
                    be:a4:82:e1:d6:4d:db:46:7c:45:94:c9:9f:cb:75:
                    e0:8b:20:2d:91:2e:1a:e0:00:9a:e3:84:08:4d:86:
                    35:e0:29:70:a2:4f:15:bc:b8:24:9a:c7:6f:9f:d8:
                    e8:73:80:49:8f:66:62:6e:83:ad:48:86:d6:81:6e:
                    7d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:36:6E:74:F2:24:2E:4E:F5:38:82:CF:57:2F:48:19:89:82:7C:8A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ejZudPIkLk71OILPVy9IGYmCfIo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9500::/40

    Signature Algorithm: sha256WithRSAEncryption
         ba:64:ac:59:fc:d8:81:55:12:2f:33:2a:0c:9d:47:f4:30:c1:
         77:e7:77:9a:24:dd:4f:a1:3e:8f:cf:20:89:0d:51:9d:8a:1a:
         9a:4d:d4:44:ae:61:ae:f1:5d:0a:8b:eb:96:2e:51:71:df:1e:
         49:f5:15:58:f4:cf:6f:c7:11:04:ce:f4:39:ad:71:5d:b5:3d:
         b0:a9:8b:16:c4:89:5c:e4:e5:0a:60:b7:3c:0c:07:dc:47:6a:
         fb:8f:90:9d:62:23:08:36:e0:e6:19:bc:e4:9d:94:01:22:16:
         ee:14:ac:7a:d5:d9:fa:d0:1c:9d:ec:da:9c:a1:0c:9e:05:e4:
         ab:e3:d0:98:15:1b:22:97:7c:2a:a3:6a:0c:a2:fe:72:7c:50:
         b0:5b:fc:80:d4:f1:02:c9:df:32:0c:01:96:4c:d5:d8:a7:69:
         76:fc:08:33:95:06:bf:ad:97:7a:c5:4f:91:03:c4:a6:37:cf:
         25:f4:93:a9:72:d5:2d:40:4f:b5:5f:9e:28:79:ee:0c:39:e9:
         60:c8:3c:c9:67:b4:ae:08:59:d0:e3:72:44:71:7a:44:bf:59:
         8b:62:72:30:24:36:bf:79:b3:ab:cb:91:10:5b:f8:8c:20:ed:
         0a:81:7c:e0:0e:db:49:68:40:ce:41:1f:f7:fc:8d:f8:bb:71:
         af:ef:e8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org