Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/o1A-ODga3iEvtxiQG_WsivpA-f0.roa
File:                     o1A-ODga3iEvtxiQG_WsivpA-f0.roa (raw, json)
Hash identifier:          MiTGtqIcJGBojNxlzmkVeR7r2BiHTVljcrMYknIrZJ8=
Subject key identifier:   A3:50:3E:38:38:1A:DE:21:2F:B7:18:90:1B:F5:AC:8A:FA:40:F9:FD
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0221
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/o1A-ODga3iEvtxiQG_WsivpA-f0.roa
Signing time:             Tue 30 May 2023 17:42:19 +0000
ROA not before:           Tue 30 May 2023 17:42:19 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:d900::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:19 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A3503E38381ADE212FB718901BF5AC8AFA40F9FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f1:d5:59:97:d0:b0:b7:78:62:3d:af:c3:18:
                    70:40:cd:2e:d4:ae:26:67:c4:0b:5c:51:18:7c:ab:
                    8d:2d:d7:b6:7d:94:b9:d6:6f:73:54:a6:9c:30:26:
                    29:45:f7:eb:ff:8a:eb:ad:cd:6a:97:14:e7:d3:ae:
                    8e:3b:a9:4f:6e:dc:02:02:20:97:1f:4f:34:a3:26:
                    a5:83:0b:ce:d5:1a:2a:50:5b:fc:b7:74:c7:5d:f6:
                    ec:6f:85:35:8c:89:88:50:ce:32:26:bf:08:7c:1f:
                    12:4d:6d:19:8a:b2:00:a1:9d:0d:ca:8c:32:8b:f3:
                    57:25:36:9d:79:d7:b7:ef:38:c5:95:cd:6e:89:f8:
                    b6:51:4f:2a:f5:1f:14:b3:c3:d4:d1:93:95:56:11:
                    77:91:ab:fd:9a:99:b8:d5:7f:49:9a:6b:c0:60:60:
                    80:02:d1:61:62:6f:ef:b2:dd:20:51:64:2d:b1:69:
                    99:7d:fa:e2:72:80:81:7d:48:b9:8d:b4:41:8d:2c:
                    77:5f:fd:d5:7e:5b:99:d3:d3:2f:5d:d4:01:e8:dc:
                    46:f8:c7:c0:29:cf:86:b9:a2:1a:75:21:2e:db:58:
                    2b:fc:15:e2:0b:ac:b9:91:84:3c:7a:e1:7e:5d:65:
                    e1:2f:c6:eb:c8:10:9a:31:86:9b:24:9b:ef:46:f6:
                    8a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:50:3E:38:38:1A:DE:21:2F:B7:18:90:1B:F5:AC:8A:FA:40:F9:FD
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/o1A-ODga3iEvtxiQG_WsivpA-f0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d900::/40

    Signature Algorithm: sha256WithRSAEncryption
         61:88:4a:c3:b7:86:3d:9f:4b:cf:0b:a3:d3:47:58:a7:b3:0e:
         60:c7:be:d8:d5:65:b7:93:26:e6:8e:2f:48:24:99:15:6e:ff:
         41:d2:92:c0:40:7e:3a:63:fb:fb:2d:46:01:a6:b3:20:89:86:
         9e:0e:50:be:21:7b:25:a4:1a:d5:42:72:96:f2:77:23:e3:a5:
         28:ca:01:a4:af:cd:99:bc:b2:6d:34:14:21:83:fb:d7:53:3f:
         24:da:ed:10:4b:96:d0:8a:7d:9f:6a:e5:eb:97:22:2a:5d:4e:
         d6:e5:dd:4f:4b:8b:a4:9d:85:c1:45:2b:8a:1a:b1:29:7d:9d:
         e4:c6:bf:d3:7e:47:88:ba:24:06:26:b2:08:1a:88:28:40:4f:
         cb:89:6c:ce:70:1e:9c:3c:b9:d8:31:77:17:96:00:3a:b1:c8:
         eb:50:f6:da:d7:3a:fd:4f:b4:a9:05:e9:63:3c:4d:7e:6e:eb:
         f9:cb:ab:18:f3:7e:6e:90:51:fe:f2:59:b3:c2:4b:88:04:da:
         6f:d3:a9:4d:7c:c1:c7:79:d5:7c:d7:06:43:6d:c6:54:b6:71:
         a6:b9:8f:d0:d2:1a:31:62:e3:4e:f2:af:13:90:e7:8f:b3:9f:
         b4:aa:41:9c:ad:49:5a:d2:00:23:82:2e:03:b6:82:c8:04:09:
         46:a6:d4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org