Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oEHBDaPPhXtlVAToB_eRBP93bxM.roa
File:                     oEHBDaPPhXtlVAToB_eRBP93bxM.roa (raw, json)
Hash identifier:          M+11z7hJNhTpSpD/FgjjbAekZ1Lq67LgZYArI6fUXf4=
Subject key identifier:   A0:41:C1:0D:A3:CF:85:7B:65:54:04:E8:07:F7:91:04:FF:77:6F:13
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0223
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oEHBDaPPhXtlVAToB_eRBP93bxM.roa
Signing time:             Tue 30 May 2023 17:42:20 +0000
ROA not before:           Tue 30 May 2023 17:42:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f000::/45 maxlen: 45

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547 (0x223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A041C10DA3CF857B655404E807F79104FF776F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d5:32:8a:e9:ce:c6:eb:84:34:64:6c:a8:6b:
                    45:10:cf:56:a1:52:95:41:d5:0f:99:bc:58:4e:5c:
                    4e:46:a8:b0:5c:28:74:ba:3a:c6:aa:51:eb:c9:ca:
                    6e:47:74:49:94:e3:b7:be:f5:f1:1f:ca:c3:d5:0b:
                    07:46:4c:1f:27:7e:cf:b3:50:41:1d:46:d7:08:7e:
                    ec:59:7f:b7:27:da:10:bb:4b:26:ac:c0:49:17:1e:
                    cf:b6:a2:a1:d6:b3:ec:1a:99:23:80:0b:a2:6d:db:
                    e2:3b:51:c3:7a:0d:13:5b:3a:72:66:6e:79:08:2f:
                    a1:1d:8c:34:c3:b8:26:7b:d0:5a:e0:0f:d4:6a:20:
                    ce:35:00:03:f9:fa:48:a6:fa:17:32:cc:c8:95:0d:
                    f3:d4:fc:f7:95:7d:ec:a2:3a:8f:d2:47:39:0c:52:
                    69:24:81:cb:6f:8c:3d:d6:fe:f9:06:e5:1d:2b:00:
                    3f:52:df:94:22:28:b1:77:84:5b:02:23:45:0f:c9:
                    70:9b:e2:b9:2a:c9:92:4d:3c:66:4b:06:71:3c:55:
                    6d:13:bc:6a:7b:29:c8:88:48:c1:c3:4f:c3:f3:4d:
                    7b:f8:f1:b1:b6:5f:c7:7a:f3:46:de:fc:71:d4:ab:
                    a5:c4:f7:02:7e:56:1d:3d:27:ac:9b:2e:66:37:99:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:41:C1:0D:A3:CF:85:7B:65:54:04:E8:07:F7:91:04:FF:77:6F:13
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oEHBDaPPhXtlVAToB_eRBP93bxM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f000::/45

    Signature Algorithm: sha256WithRSAEncryption
         cb:a9:a9:df:be:8e:ec:c9:56:5c:09:72:98:f3:a1:b8:6f:92:
         01:8d:19:9b:ba:71:52:5f:8f:ac:50:38:67:ae:41:35:9e:86:
         42:19:01:fa:17:0c:57:7e:b9:c9:6b:d3:fd:d5:0a:af:1f:ff:
         87:1c:37:ac:e0:75:2f:44:86:8b:21:e1:ce:14:6b:ab:71:72:
         ae:99:55:ca:9f:42:2a:68:cb:40:ae:65:ed:66:3e:58:53:cf:
         70:27:41:f6:94:3a:2e:88:65:72:a8:ea:2e:68:40:17:5f:31:
         dc:a3:c9:fe:0a:96:17:9e:8e:65:b7:1b:05:47:67:91:76:e0:
         5d:72:74:94:ea:28:ac:4a:03:b2:e0:44:ae:83:7c:6c:23:74:
         9e:40:c2:30:d7:26:fe:d6:89:fc:5e:9b:ea:75:93:b9:6a:06:
         26:0e:56:e8:ff:bf:a0:9e:f9:78:db:4f:44:d1:cd:97:2f:11:
         d3:22:1e:d9:00:ab:43:0a:1a:d2:a2:e5:27:27:80:44:0a:f2:
         9e:47:99:15:55:4d:cf:0c:8b:68:d2:69:88:f3:d3:96:82:7f:
         ee:6c:fb:1f:61:0a:3f:af:0d:58:82:c5:a1:5d:bc:5c:0a:69:
         a9:f1:4e:f1:62:49:4c:7b:a9:34:96:3b:5d:5b:09:63:64:aa:
         41:03:2d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org