Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/nFCs_9ndbmgK86MvBGgDPqg4u70.roa
File:                     nFCs_9ndbmgK86MvBGgDPqg4u70.roa (raw, json)
Hash identifier:          W/iLeFI/e/4vIJnWj4dKRUCj/wf9ZywV5laL3UC69ZU=
Subject key identifier:   9C:50:AC:FF:D9:DD:6E:68:0A:F3:A3:2F:04:68:03:3E:A8:38:BB:BD
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       C8
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/nFCs_9ndbmgK86MvBGgDPqg4u70.roa
Signing time:             Tue 30 May 2023 16:10:16 +0000
ROA not before:           Tue 30 May 2023 16:10:16 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4500::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:16 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=9C50ACFFD9DD6E680AF3A32F0468033EA838BBBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:f4:c3:07:68:f6:7f:8f:1d:24:c0:4f:79:
                    6d:95:e3:18:da:db:b5:9b:c9:f6:cf:a7:24:40:71:
                    b2:09:80:41:5c:90:cd:21:b4:69:bf:15:a6:88:7c:
                    4e:9b:a8:c5:bd:79:3b:87:fd:9d:da:97:6b:2e:13:
                    fe:4d:30:ba:92:a7:e4:7a:d9:2d:e5:52:1c:5b:04:
                    07:b6:1e:b1:f2:cc:42:6b:84:7d:af:80:2a:d2:6a:
                    e9:c6:46:65:16:e6:7a:33:0f:a3:e9:b1:22:ca:95:
                    e6:49:45:b3:02:fb:d3:f7:15:7b:eb:24:76:31:a1:
                    f0:89:98:98:5a:81:5f:9e:ce:9c:69:ce:6c:3c:f2:
                    b2:25:6d:1e:c0:78:3e:d0:e2:1e:68:7a:38:4c:e6:
                    82:a7:fd:6c:bf:00:b3:7b:cb:52:7f:fc:58:21:88:
                    e5:84:1b:9d:02:2d:d6:23:f7:84:a0:ca:27:5e:72:
                    04:57:b4:77:27:93:0a:0e:7e:1f:0f:df:ac:d8:a2:
                    8b:f3:f7:ed:df:5e:4e:47:86:0c:80:51:8f:70:aa:
                    e2:e5:24:a0:b1:58:d2:bf:ee:9b:4c:2a:e6:ac:6b:
                    17:3b:10:37:b2:d4:1b:d4:1b:96:1d:2b:aa:bc:34:
                    e1:8a:bd:a8:96:19:69:81:72:0f:4a:d3:dc:2d:86:
                    d7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:50:AC:FF:D9:DD:6E:68:0A:F3:A3:2F:04:68:03:3E:A8:38:BB:BD
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/nFCs_9ndbmgK86MvBGgDPqg4u70.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4500::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:54:96:6c:68:b2:b8:fb:3e:0f:e0:27:a0:f7:11:2a:ad:f4:
         54:28:1f:fc:c3:66:b9:97:fb:6a:be:a5:05:7a:c6:b3:4b:1f:
         06:db:fd:5d:1c:75:1d:a1:2b:27:f5:dc:e4:3e:6a:67:4f:f9:
         ee:20:49:33:88:f1:b7:f8:b6:b4:8d:8f:3f:61:31:02:7f:e3:
         1b:cb:da:cc:4f:fa:bd:b3:58:0b:12:d7:e6:7f:a9:ea:b7:6b:
         1d:5f:0d:7a:ba:80:25:a0:a5:97:36:fe:16:94:77:94:5c:c0:
         d6:70:0c:2c:30:cc:e3:f1:c8:eb:7e:9d:df:15:81:ae:40:02:
         6f:d5:e0:75:b5:47:7a:94:eb:04:c7:b2:58:83:a8:ea:69:99:
         24:2f:66:8c:32:ee:45:a2:37:e6:e0:6e:6b:db:e0:49:cd:da:
         54:8b:4a:b3:48:3c:61:61:b9:41:13:bf:df:f0:23:93:8f:ef:
         2b:58:00:7e:d4:ce:5b:e8:80:86:7f:b8:e2:db:2b:a1:c9:e5:
         50:a8:d1:83:a8:6b:d0:f8:12:bd:3b:b3:12:9e:db:ad:f8:92:
         ca:df:d2:3d:8d:49:ed:49:32:9c:2e:54:09:dc:69:9e:2f:e9:
         a1:08:17:f7:34:e3:01:cf:3c:80:fa:9e:e3:c8:e0:e7:06:94:
         7a:0e:74:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org