Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jtOM-19omkcW-uynhzD2RYFtnJg.roa
File:                     jtOM-19omkcW-uynhzD2RYFtnJg.roa (raw, json)
Hash identifier:          3vyf6yqe8LVSwTxGg7tXP3E3z0fqeVGH6VqzmrsdknQ=
Subject key identifier:   8E:D3:8C:FB:5F:68:9A:47:16:FA:EC:A7:87:30:F6:45:81:6D:9C:98
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       29
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jtOM-19omkcW-uynhzD2RYFtnJg.roa
Signing time:             Tue 30 May 2023 16:02:07 +0000
ROA not before:           Tue 30 May 2023 16:02:07 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f000::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:02:07 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8ED38CFB5F689A4716FAECA78730F645816D9C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:e7:aa:24:4b:c9:e1:75:80:f4:b8:0f:fd:
                    d8:4a:0d:b2:3d:c5:4d:26:08:e7:6c:ef:66:95:07:
                    d1:7f:90:83:22:22:45:fb:4d:90:eb:32:ea:97:ba:
                    50:13:51:ae:0d:53:e9:f9:ca:fb:d0:d9:c5:62:f7:
                    49:47:69:88:2c:90:c5:e2:03:ad:d1:01:57:ba:bb:
                    07:fc:07:2e:d1:75:39:09:3e:81:98:c5:a0:44:fe:
                    90:e2:90:be:29:51:cd:29:17:11:a0:1b:69:24:8a:
                    de:89:d7:ec:ce:c7:5e:b6:b8:d5:ef:9a:4a:79:f3:
                    49:60:34:3c:ee:36:ba:64:a7:8d:70:8f:0a:c2:76:
                    d7:7d:bb:8b:6f:78:d1:30:47:33:c0:83:a1:98:cd:
                    67:b1:cc:7c:27:d2:f1:fa:44:d4:24:f8:3a:bd:ae:
                    9e:2b:30:cc:c1:e5:05:3a:77:3c:4d:04:66:16:8a:
                    53:a1:5e:63:dc:1e:ed:42:10:fb:e3:8d:3c:13:b7:
                    48:5c:23:30:9b:31:09:7a:c0:b6:28:ba:35:a6:bc:
                    f5:80:b0:9d:a8:bd:6d:1e:71:61:f6:1c:dc:f0:0f:
                    2f:7d:3f:4d:1f:c3:14:6e:8e:24:54:ab:71:e8:bb:
                    77:38:d0:18:83:80:03:49:d3:94:d4:de:7b:26:66:
                    08:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D3:8C:FB:5F:68:9A:47:16:FA:EC:A7:87:30:F6:45:81:6D:9C:98
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jtOM-19omkcW-uynhzD2RYFtnJg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:ec:22:57:26:dd:2d:59:37:39:46:b2:16:02:58:95:99:17:
         82:da:a1:d5:ec:c8:2d:1f:a9:fc:44:b3:33:79:1f:39:9e:26:
         df:13:c3:38:07:a8:60:60:c2:35:df:21:d3:80:11:ec:df:76:
         af:4d:36:21:26:6e:71:43:83:04:8a:03:ef:f2:22:3e:06:67:
         c4:ca:f1:79:a0:2e:12:8b:ba:23:78:ea:6c:5a:2e:49:94:c8:
         3c:42:45:a7:92:84:f0:7c:12:13:44:2f:cf:15:0b:b3:90:24:
         87:20:7a:b1:d7:d8:a8:08:df:0f:37:b7:08:e0:46:3e:65:8c:
         4d:42:c6:6f:b5:df:a8:ce:d2:74:c0:42:ef:53:ef:14:8e:d7:
         24:c8:f2:1d:d8:87:b8:ed:21:d7:d5:64:f3:42:f6:67:ef:a8:
         ca:28:c8:cf:b2:a9:cd:38:24:cf:bc:42:b7:55:2c:fa:58:ab:
         b2:76:dc:51:48:ea:7b:90:30:6d:7b:34:e3:f0:cb:71:34:6a:
         17:fc:7f:c8:39:3f:d3:79:ea:7f:ec:d6:d7:49:c9:7f:2e:3d:
         48:ba:a4:67:28:b5:f5:84:6b:43:ab:72:b8:a0:47:9a:97:99:
         71:a0:c9:08:69:e1:5a:9d:01:d5:bf:8a:b7:f5:6f:e9:e0:a6:
         8a:af:a0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org