Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lOicUOIfwNowXL3rT-KOmX67tO0.roa
File:                     lOicUOIfwNowXL3rT-KOmX67tO0.roa (raw, json)
Hash identifier:          wicURI4JbyP/Z1Uqd9ot+fQqpg7fBDZhbMuTcZdWJ1E=
Subject key identifier:   94:E8:9C:50:E2:1F:C0:DA:30:5C:BD:EB:4F:E2:8E:99:7E:BB:B4:ED
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       019D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lOicUOIfwNowXL3rT-KOmX67tO0.roa
Signing time:             Tue 30 May 2023 17:36:20 +0000
ROA not before:           Tue 30 May 2023 17:36:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:fd00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=94E89C50E21FC0DA305CBDEB4FE28E997EBBB4ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:12:26:cb:fa:2e:78:e7:4c:b1:96:d5:96:14:
                    4a:e2:58:2c:77:8c:80:ce:15:a3:f9:5f:d3:c5:7a:
                    dc:13:6e:b6:2b:17:40:be:69:64:2e:e9:04:86:ed:
                    af:d7:22:54:7d:8f:84:f0:09:ec:20:56:f3:a4:be:
                    61:4a:f5:a3:86:c8:24:0c:49:ac:a1:e4:21:36:fe:
                    69:f9:5b:d1:20:fe:a7:80:94:46:82:c1:e6:a2:e6:
                    ee:1f:ec:bf:71:97:fe:5e:c0:f1:e6:b9:d5:14:a7:
                    93:e0:97:45:7c:28:e9:d3:73:f3:73:ef:d6:e4:6b:
                    fd:32:91:e8:07:00:c1:1a:05:36:70:c1:79:8d:06:
                    ea:89:65:56:f8:50:70:04:2b:30:f4:8f:f6:9c:4a:
                    c7:83:bf:2b:40:99:d5:57:24:40:9c:69:b1:0b:14:
                    6e:06:a8:dd:a9:fe:51:ea:4c:72:c2:e2:22:82:3d:
                    db:a3:a0:93:60:e2:42:c8:eb:2c:46:44:9f:01:8b:
                    3c:35:ec:36:6c:0d:f3:70:8f:0b:25:46:4a:10:39:
                    47:09:01:45:6e:9d:b6:54:aa:16:ca:79:15:70:45:
                    a1:e9:8b:f9:8b:50:1a:ac:89:77:1b:53:d2:92:93:
                    27:3a:15:30:7d:8c:af:8a:35:8b:67:32:86:d3:80:
                    4a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E8:9C:50:E2:1F:C0:DA:30:5C:BD:EB:4F:E2:8E:99:7E:BB:B4:ED
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lOicUOIfwNowXL3rT-KOmX67tO0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:fd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b8:ac:01:16:97:cf:d5:ca:c4:c0:55:5d:ed:78:d9:0e:d4:b1:
         08:99:83:e5:4e:ec:cf:07:99:dd:45:26:57:16:4f:5a:3e:6f:
         80:53:71:93:cd:68:50:d6:78:3e:9c:47:5d:a6:6a:ee:88:e4:
         e0:3f:93:48:b1:ad:d6:5a:74:fc:38:b2:4e:97:f8:12:5c:94:
         ea:c1:c9:64:5f:ef:27:a7:02:82:96:4e:06:1c:ee:85:66:4c:
         56:41:34:3e:2c:13:22:c3:85:14:f5:3f:10:80:1b:2c:54:bc:
         02:a5:c7:38:68:51:cf:f0:fc:2d:61:6e:9c:df:cd:a6:18:43:
         c6:03:2e:c0:7b:51:5e:da:7f:27:50:9c:3f:d2:4c:35:9c:49:
         21:8f:76:4c:94:b7:8b:68:33:80:bf:48:7e:7a:af:dc:7a:3e:
         19:a5:09:6b:da:a6:f7:b6:fa:6d:3c:b8:71:71:85:c3:d8:14:
         8a:a4:bb:8d:65:ef:90:57:1b:95:1c:c8:0e:e2:e7:23:66:65:
         42:e2:e2:fe:22:bb:cc:9b:40:2d:6d:1c:8c:07:2d:1c:70:91:
         46:d0:b1:a1:de:f1:ed:3c:9c:b9:4e:37:87:1f:ba:6f:59:81:
         aa:72:4a:51:97:2a:41:80:47:e5:f8:1a:df:08:3d:31:4e:f0:
         c6:e0:89:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org