Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/gqbKQ6yR8Wl1A4mUS73VoU5WxMg.roa
File:                     gqbKQ6yR8Wl1A4mUS73VoU5WxMg.roa (raw, json)
Hash identifier:          Mo/G+DWtvmpGkD6IrctyvvmyDzs96HERtJ/DngRw/NQ=
Subject key identifier:   82:A6:CA:43:AC:91:F1:69:75:03:89:94:4B:BD:D5:A1:4E:56:C4:C8
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       8E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/gqbKQ6yR8Wl1A4mUS73VoU5WxMg.roa
Signing time:             Tue 30 May 2023 16:06:29 +0000
ROA not before:           Tue 30 May 2023 16:06:29 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4100::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:29 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=82A6CA43AC91F169750389944BBDD5A14E56C4C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d4:f9:37:3c:72:fb:88:02:62:a9:e6:80:1d:
                    64:5d:ee:e9:d8:de:55:f0:ad:7b:fc:a9:22:c0:1d:
                    4d:4a:0d:a6:69:56:b6:5c:a3:dc:96:a0:fd:44:e3:
                    f2:26:f9:2a:fd:aa:1e:63:01:48:09:e8:aa:b4:0d:
                    be:5c:a0:3e:a7:89:ca:23:95:1b:d3:66:e2:6b:ed:
                    74:5e:fb:e3:cd:fb:9c:90:35:8a:de:7e:64:9a:83:
                    d7:f0:63:a3:06:dc:e2:7f:a2:93:8e:66:d4:f2:37:
                    ab:f0:a5:e0:aa:03:5c:9a:f9:37:23:60:91:cb:4f:
                    b7:7a:d3:61:be:81:bb:4e:26:12:63:2e:29:d8:79:
                    a6:92:b3:c4:47:6b:48:05:b9:75:09:4d:54:e1:1d:
                    a5:3c:ff:25:1d:f6:f4:4d:01:30:b0:6c:db:77:8b:
                    8a:17:9b:63:66:2f:d2:83:9b:f8:4f:ef:96:50:88:
                    ba:d3:e4:5f:7c:0a:4c:f7:46:49:eb:f6:39:6d:f0:
                    d1:62:93:48:38:8e:1f:45:4c:cc:c8:53:79:44:6a:
                    2c:9f:e2:61:b9:e9:af:57:02:34:ae:00:f7:8f:2a:
                    ec:b4:80:41:66:75:65:28:51:2f:39:2f:d9:d7:e9:
                    b1:a0:8e:3e:9d:aa:82:ff:17:3a:c8:bf:cd:57:e7:
                    c4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A6:CA:43:AC:91:F1:69:75:03:89:94:4B:BD:D5:A1:4E:56:C4:C8
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/gqbKQ6yR8Wl1A4mUS73VoU5WxMg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:88:18:69:cf:38:0e:c9:78:d0:e1:41:0c:78:2f:97:ff:9c:
         75:a7:2b:6c:38:8f:22:68:a4:71:2c:92:c7:06:d3:ed:db:04:
         cd:a4:2e:bb:ca:30:d1:a7:a9:5e:6b:50:df:1c:32:1f:76:9a:
         69:f2:7e:d1:e2:35:83:06:38:cc:60:a4:e2:28:1c:fb:63:5c:
         e2:0e:d2:55:fb:46:76:96:c6:2d:dd:4a:da:ef:ef:c6:cc:fe:
         6c:2d:e0:96:78:d0:e8:b8:11:7c:a4:c8:e3:23:c1:44:60:c4:
         77:d5:ca:be:f6:0c:32:ed:10:bd:1c:21:73:b8:68:68:3e:4d:
         81:ac:f6:01:0f:0b:84:80:8f:93:fc:ab:b8:de:a5:61:9a:5f:
         11:cc:11:34:66:63:ff:02:bb:a8:78:32:d5:26:c8:c9:29:75:
         53:c7:37:14:7e:c4:77:0d:92:01:d4:5f:3f:eb:bc:0f:f1:40:
         84:2a:a0:de:ec:73:ed:5c:1e:6d:8d:a8:4e:2d:50:e2:e9:d4:
         56:99:ee:ce:b4:1e:49:48:44:4c:01:43:2b:1d:6f:62:3e:8e:
         cf:ec:db:4b:99:b5:20:84:15:c1:f4:f1:fd:2b:65:79:7f:2b:
         cc:dc:4e:15:c3:1c:83:9f:05:01:9e:af:26:62:d8:97:4b:66:
         8c:2f:9b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org