Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qDz01vL_qDo_JKM30XeLf305Kyk.roa
File:                     qDz01vL_qDo_JKM30XeLf305Kyk.roa (raw, json)
Hash identifier:          1NZE3FKBtD7bBh+KSa84obOPnuaCmhkYH5lWY+EQY/0=
Subject key identifier:   A8:3C:F4:D6:F2:FF:A8:3A:3F:24:A3:37:D1:77:8B:7F:7D:39:2B:29
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01CF
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qDz01vL_qDo_JKM30XeLf305Kyk.roa
Signing time:             Tue 30 May 2023 17:38:23 +0000
ROA not before:           Tue 30 May 2023 17:38:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5200::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A83CF4D6F2FFA83A3F24A337D1778B7F7D392B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:81:98:3b:7b:c0:4c:4f:c4:99:89:0b:83:8c:
                    e0:98:53:9f:68:c3:71:10:4f:78:11:da:69:9c:5f:
                    4d:13:4c:54:63:00:34:a5:af:9f:e2:b5:01:61:82:
                    87:8d:5d:bc:ff:7c:83:dc:c1:08:b9:41:aa:3b:8d:
                    a8:cd:c3:96:98:6f:cc:ff:1c:84:09:48:b9:e4:cb:
                    b5:c7:72:7b:0d:fe:86:9e:1e:79:13:15:3d:e8:51:
                    8b:7e:ed:af:9e:fe:5d:18:6c:6c:54:a6:85:a5:33:
                    1d:f9:6b:86:bf:b9:6a:32:54:38:bb:99:0b:58:fc:
                    4c:d9:a8:3a:05:b6:3c:33:0a:2b:d7:86:65:5e:27:
                    fd:34:b2:77:ee:40:3f:f9:d4:86:65:44:01:b4:7f:
                    38:45:f3:7a:1a:1a:e5:7b:6f:e0:98:52:6c:88:ec:
                    b8:86:a8:b6:75:16:6e:4c:e9:45:92:d7:91:6d:a3:
                    88:dc:7f:86:79:e1:84:ca:68:e3:21:a6:60:99:c3:
                    b9:d2:ba:4c:1c:93:55:6c:f7:a1:ca:24:37:96:02:
                    ba:71:f5:d0:9f:01:d3:cf:b0:d8:90:a1:86:05:13:
                    3b:c8:da:5f:5e:da:f6:cf:2c:01:9d:5a:d7:96:af:
                    e0:f6:21:c5:92:a1:b9:3d:71:78:e3:79:29:34:ac:
                    3a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3C:F4:D6:F2:FF:A8:3A:3F:24:A3:37:D1:77:8B:7F:7D:39:2B:29
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qDz01vL_qDo_JKM30XeLf305Kyk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5200::/40

    Signature Algorithm: sha256WithRSAEncryption
         9d:d6:e7:ca:63:30:89:63:4f:6d:4a:24:15:e1:bf:85:76:e2:
         34:dd:64:fb:9c:95:12:36:15:a0:09:99:b7:0f:71:67:1b:86:
         a7:13:06:41:84:5f:4a:b2:ba:77:6c:70:9c:53:f8:e2:b2:57:
         95:e3:32:df:2f:dc:92:a6:85:46:69:97:53:25:6c:ae:0d:5f:
         c3:f6:d1:c1:0e:0d:16:fb:c4:39:2a:d4:57:dd:cb:6d:1d:38:
         c8:c1:1e:c7:36:05:bb:f2:f7:2c:e5:bd:88:f0:08:e8:30:5b:
         ce:aa:ba:da:50:f2:65:3a:d2:71:5f:97:94:63:b3:2e:3d:fa:
         b8:51:a8:66:28:bb:f1:95:8a:a6:bb:d4:59:0a:18:dd:ca:1a:
         3b:98:ca:e7:cb:f7:47:0e:35:7d:ed:64:50:ab:4e:35:8d:90:
         ba:57:58:50:99:ee:ca:03:0c:01:a2:7e:93:87:00:54:39:50:
         39:17:84:ac:f1:43:d1:f3:5a:35:1d:d4:c1:36:ac:42:55:9b:
         10:94:0e:91:7e:7a:2b:eb:15:80:ed:6a:4a:1f:71:e6:08:44:
         e7:c6:62:94:52:96:9c:27:e5:94:93:4f:a4:e8:89:0a:62:89:
         22:bc:03:24:f3:ea:5f:63:ef:de:6d:8a:fd:79:ba:05:89:3d:
         88:03:61:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org