Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oEmNX-MehnGSYuUqsf5mwCKmjBA.roa
File:                     oEmNX-MehnGSYuUqsf5mwCKmjBA.roa (raw, json)
Hash identifier:          xJhbNAXekrMnU6c36UvKj7MwU9/MtNf49Ka6Q957QSs=
Subject key identifier:   A0:49:8D:5F:E3:1E:86:71:92:62:E5:2A:B1:FE:66:C0:22:A6:8C:10
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       014C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oEmNX-MehnGSYuUqsf5mwCKmjBA.roa
Signing time:             Tue 30 May 2023 17:32:24 +0000
ROA not before:           Tue 30 May 2023 17:32:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c500::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A0498D5FE31E86719262E52AB1FE66C022A68C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:66:38:0f:22:61:30:96:aa:85:c7:dc:70:df:
                    9e:c2:1f:4f:46:41:fd:22:f6:73:1c:b7:8c:67:43:
                    13:19:5a:5e:16:f2:02:8d:ea:8c:38:f4:66:7c:89:
                    fa:0d:59:7d:f2:ba:83:81:56:e9:7a:6c:63:b8:96:
                    de:67:94:fb:30:67:bd:64:25:05:d2:4b:e5:64:7a:
                    8e:fc:e1:48:95:a8:86:e1:45:e2:05:37:59:6a:22:
                    f3:98:6c:d2:ae:71:73:13:82:4e:c4:cc:cb:0d:c2:
                    62:9c:56:d0:d5:2f:8e:26:6a:93:a3:ad:53:1d:63:
                    01:20:55:ec:41:de:47:12:1f:f3:ee:45:17:99:4f:
                    7c:45:96:5a:27:3e:c0:ce:60:ee:d3:dc:26:52:56:
                    2c:92:e6:38:e6:e3:90:91:a2:69:2b:54:c9:09:fd:
                    4e:ca:eb:e9:32:83:87:cf:7f:46:82:0d:a5:0a:80:
                    a1:60:7a:e5:ef:db:84:ce:49:36:91:a1:3d:09:93:
                    d9:ec:96:ee:91:07:fd:e4:11:2a:df:90:1c:77:ce:
                    e8:a7:8e:0c:7c:a9:1b:90:2f:05:e4:8f:b2:27:bb:
                    c1:f7:77:1e:0b:50:b6:de:aa:ae:8a:a9:a7:41:a2:
                    2d:9c:ef:e0:4b:c4:c8:48:bb:74:df:ee:e4:e4:89:
                    42:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:49:8D:5F:E3:1E:86:71:92:62:E5:2A:B1:FE:66:C0:22:A6:8C:10
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oEmNX-MehnGSYuUqsf5mwCKmjBA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c500::/40

    Signature Algorithm: sha256WithRSAEncryption
         bb:7c:b4:87:b7:3e:6c:73:ce:df:3b:2b:99:4c:e1:8a:ea:6b:
         0c:b2:a0:53:e4:07:25:a7:4b:f8:97:bf:50:5e:89:15:b9:6d:
         91:41:f1:c3:ec:f3:18:42:2f:6a:aa:9b:e9:4c:e4:08:02:2b:
         38:aa:89:f8:f4:f1:89:d6:c8:69:58:f0:bf:4d:52:58:b2:c1:
         9e:a8:83:e8:8f:c9:ee:ec:f9:ea:78:46:c3:ec:be:ec:25:37:
         71:01:7a:af:68:c1:a4:c6:02:dd:ef:a1:59:6a:08:83:4b:02:
         c0:ed:b7:af:a0:dd:52:84:33:db:e2:67:25:4f:e8:52:e5:ba:
         04:e2:1f:32:7b:04:b5:f5:7c:18:93:62:bf:fd:4b:90:18:7e:
         c4:de:8a:03:1f:1f:51:c6:dd:07:95:1b:61:97:34:02:36:9c:
         df:52:6d:cb:9b:f2:b0:80:65:ca:a5:c9:3f:55:e7:76:ba:c0:
         94:42:94:06:f6:1e:b7:50:63:57:6a:4f:48:e7:26:f5:e8:f8:
         ec:bc:df:b4:38:41:1f:0e:d0:87:e5:b9:a8:13:96:69:a8:71:
         52:cf:c4:38:52:c7:04:35:f1:c0:b5:4b:69:d7:33:19:d3:ea:
         ad:6c:ca:58:fb:10:09:eb:2c:a6:63:66:b0:ef:72:56:f8:ee:
         48:ae:1e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org