Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mTKndnsAMnBM4nfm4LZWYB70VVY.roa
File:                     mTKndnsAMnBM4nfm4LZWYB70VVY.roa (raw, json)
Hash identifier:          S85TByrchEhbevek//phTDAY3wfCxGQlfirSwwSXG1c=
Subject key identifier:   99:32:A7:76:7B:00:32:70:4C:E2:77:E6:E0:B6:56:60:1E:F4:55:56
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       022C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mTKndnsAMnBM4nfm4LZWYB70VVY.roa
Signing time:             Tue 30 May 2023 17:42:24 +0000
ROA not before:           Tue 30 May 2023 17:42:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3000::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=9932A7767B0032704CE277E6E0B656601EF45556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3c:65:22:47:b4:e5:b7:f6:78:8f:d6:1f:3a:
                    7c:71:5f:87:11:03:53:4e:25:e9:03:1d:59:f2:aa:
                    0f:7b:1b:a6:c1:18:fb:b6:8e:0b:59:5f:0b:6d:ac:
                    f3:62:32:aa:84:7d:8c:c5:51:86:a7:61:4c:e0:e9:
                    13:9f:6d:f4:d7:2f:e6:18:4f:83:d2:f6:c6:70:dd:
                    8e:77:ea:3f:f8:63:10:a5:7d:e4:59:62:2e:5d:2a:
                    a5:92:f0:a8:5e:39:06:db:ec:3b:a9:d1:f8:be:1f:
                    4d:73:92:ed:01:5e:ab:15:a5:18:0c:72:aa:35:4d:
                    5b:00:a3:f3:b8:4a:83:81:66:65:60:de:08:04:a8:
                    5a:80:84:63:19:12:e9:ae:2b:9e:ba:2a:1b:e7:17:
                    f7:9b:bd:00:d7:52:39:c8:3e:a5:40:11:32:89:13:
                    15:87:29:d9:c7:fc:60:9f:7c:77:d8:9f:46:8e:64:
                    be:4b:ea:67:df:4f:72:8a:3c:91:17:7a:6a:40:ad:
                    ba:de:d1:d1:01:26:64:e0:bb:e9:e0:8d:a6:6d:38:
                    04:7f:ac:08:27:f8:3f:ba:64:a9:c0:66:14:97:7a:
                    bd:70:fe:4e:8a:6a:0d:95:8f:9a:90:cf:1b:39:ae:
                    ec:c3:55:fa:74:32:3f:40:0d:9e:ce:0d:10:d7:a2:
                    1f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:32:A7:76:7B:00:32:70:4C:E2:77:E6:E0:B6:56:60:1E:F4:55:56
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mTKndnsAMnBM4nfm4LZWYB70VVY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:98:b3:52:da:1e:29:b7:83:2d:d8:46:58:dd:99:a3:e7:46:
         54:dd:b2:03:d3:1a:f6:5a:f9:ca:c3:e6:81:9e:4d:32:bd:5a:
         81:c6:e7:cd:3a:fe:47:0d:f8:d9:39:5c:92:2b:e6:51:37:f5:
         65:cb:18:fe:aa:28:cf:52:39:15:18:c2:12:dd:f5:79:1c:28:
         3a:e3:de:73:af:75:f4:3d:78:90:05:9b:4a:83:ee:44:e8:f4:
         a7:04:c5:2d:66:82:03:70:b4:e5:25:d1:35:09:51:15:5b:5c:
         95:f3:f4:6e:eb:b6:59:a1:47:c3:e8:2e:84:d3:c8:a5:e0:57:
         93:e6:c6:f0:fe:0c:68:ab:dc:5e:bb:ae:89:8c:f8:4f:bc:cb:
         df:41:21:c6:86:9c:2f:67:0a:f0:86:35:95:9d:a3:08:eb:61:
         55:cc:c2:66:07:af:a4:2d:2b:12:80:71:ab:66:84:b7:93:5c:
         1f:74:39:f9:45:ad:7e:9f:f0:55:93:a7:46:85:9f:0c:bf:34:
         9c:6f:7e:79:b5:6b:08:44:0f:86:ea:34:08:ba:dd:b9:4f:42:
         e5:ac:5e:cc:9a:b7:d7:b1:01:6d:03:91:02:c8:a7:59:39:bf:
         b5:5b:3b:d5:3d:88:a5:17:65:48:ec:bf:26:21:65:9c:51:50:
         56:33:b9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org