Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qmPl6SXKYvH7onbd5oaHt266xYg.roa
File:                     qmPl6SXKYvH7onbd5oaHt266xYg.roa (raw, json)
Hash identifier:          U5QDR3h9xsbew6IdO+mphhOD/vS/K9smLW6AGE0/CZE=
Subject key identifier:   AA:63:E5:E9:25:CA:62:F1:FB:A2:76:DD:E6:86:87:B7:6E:BA:C5:88
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01FF
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qmPl6SXKYvH7onbd5oaHt266xYg.roa
Signing time:             Tue 30 May 2023 17:40:21 +0000
ROA not before:           Tue 30 May 2023 17:40:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c300::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=AA63E5E925CA62F1FBA276DDE68687B76EBAC588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:67:1e:a3:66:90:7a:c0:6b:2b:c3:94:a5:
                    21:1b:52:fd:ce:e0:b8:1e:1a:9d:19:40:c9:7f:cb:
                    a0:fa:5a:e2:fb:a3:b3:68:d9:34:22:1b:58:f4:70:
                    a7:55:e9:4c:c6:0d:c8:95:93:ae:b6:74:b7:58:d0:
                    be:ce:73:a1:f9:22:5f:28:64:69:74:dd:8f:04:d5:
                    3e:31:18:40:6b:da:ee:11:90:83:0a:e6:ea:93:5d:
                    8c:21:4d:bf:58:93:de:1f:3e:8e:37:b7:a4:7d:31:
                    fb:ab:de:78:07:6b:82:65:7b:1b:5c:d2:8b:a7:8f:
                    c7:3f:51:ba:64:cf:05:61:8e:f3:9c:43:d3:aa:ff:
                    86:8c:97:8a:de:31:12:6c:75:ee:bc:33:61:f6:b4:
                    47:fe:14:10:d8:3b:f5:51:9b:64:18:b4:01:53:f9:
                    ab:57:4b:5a:b7:77:e4:11:37:c1:2c:d3:a0:0b:93:
                    f8:0e:41:6f:0f:65:fe:2a:53:53:e3:df:d7:2d:91:
                    da:2a:8a:91:bd:b9:4f:bb:bc:c6:3f:e0:92:50:d9:
                    2f:ff:95:8a:0c:82:e6:2f:61:e9:f5:bc:3d:e2:a8:
                    c4:78:ec:e2:85:44:fc:38:48:00:99:ab:e9:fb:50:
                    63:1f:33:28:92:98:f7:03:f5:e2:00:24:f3:d7:02:
                    bf:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:63:E5:E9:25:CA:62:F1:FB:A2:76:DD:E6:86:87:B7:6E:BA:C5:88
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qmPl6SXKYvH7onbd5oaHt266xYg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c300::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:50:1c:9c:43:42:fc:4d:4a:e8:f8:d2:c0:ab:32:4c:3e:d8:
         aa:78:32:b8:60:01:6c:3b:68:86:1d:a5:a3:50:bf:25:61:fc:
         df:14:54:b6:87:b9:bf:76:24:9f:7a:3a:d7:d5:fb:21:f5:22:
         f7:46:c8:bc:b0:36:2a:50:a2:a3:f6:d3:63:0e:88:7b:69:17:
         17:e5:e3:d3:46:b3:ef:d6:9a:78:3e:a7:b0:c6:20:a1:66:cf:
         e7:68:e5:7b:e6:18:3b:5d:51:11:42:57:30:48:51:e0:63:7e:
         6f:20:75:5e:86:58:77:f2:5b:8b:3b:97:45:67:02:22:04:d2:
         bb:57:5b:ad:3b:21:ca:5f:07:0c:2b:9f:b9:3d:06:e6:7e:cb:
         f1:d0:ff:62:7c:13:b6:75:a8:89:09:a1:7c:0f:84:a3:53:00:
         95:84:ff:a2:11:c1:ad:21:a1:90:fa:81:df:6c:b3:75:a0:62:
         e1:93:f6:23:83:23:75:17:64:c5:30:d7:15:91:bc:c1:77:67:
         d6:7a:9f:8b:bb:f6:63:21:76:27:19:ee:11:08:92:2c:5d:00:
         cb:f4:4b:ba:4f:c8:a6:d8:04:77:b0:0c:ba:24:71:5f:3c:37:
         c4:fc:f1:02:0c:6d:da:d1:00:ca:83:3b:47:1b:86:4b:c9:65:
         bf:f0:4d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org