Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/t9bdzR-qxhgUNS7Lm8aHUPzy1io.roa
File:                     t9bdzR-qxhgUNS7Lm8aHUPzy1io.roa (raw, json)
Hash identifier:          +RY4UQb3qQZPW7fB7OQWRkIkAqV3Z++jZzahWys6y3I=
Subject key identifier:   B7:D6:DD:CD:1F:AA:C6:18:14:35:2E:CB:9B:C6:87:50:FC:F2:D6:2A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       DA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/t9bdzR-qxhgUNS7Lm8aHUPzy1io.roa
Signing time:             Tue 30 May 2023 16:10:24 +0000
ROA not before:           Tue 30 May 2023 16:10:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:d700::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B7D6DDCD1FAAC61814352ECB9BC68750FCF2D62A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:89:61:b6:95:47:3e:a1:36:30:50:40:a7:16:
                    7f:1f:c0:ff:52:66:4b:a7:e8:a3:41:68:34:d1:a7:
                    74:81:a0:e7:4d:0e:bf:29:5c:2a:1f:00:de:b2:62:
                    e1:d3:4b:2d:33:15:b8:d1:86:40:c4:89:d1:58:51:
                    1d:96:61:78:73:2d:54:e0:da:4d:28:0c:c0:38:19:
                    14:f5:0d:11:be:d0:e0:e2:16:db:2f:00:ad:41:d2:
                    59:7d:40:bf:de:07:7c:82:8f:a8:ee:0a:db:7a:13:
                    13:78:06:be:e4:44:a7:5f:f9:e5:64:4b:56:46:b0:
                    32:c1:20:78:90:39:d6:98:53:7e:da:ec:72:ec:b3:
                    30:4c:5f:1f:1b:d6:44:4b:bc:d2:54:98:c5:bd:24:
                    74:a1:77:e8:49:ec:cf:06:d2:2e:d8:de:42:8d:a5:
                    8a:d9:9c:4c:c6:32:72:82:7b:ae:50:7a:8c:7c:0a:
                    2b:c7:52:34:67:e8:3d:80:19:08:40:bf:b4:72:ec:
                    bf:7d:51:3b:cb:33:ac:f2:ab:e7:44:f6:e0:11:de:
                    85:98:5f:9f:56:55:27:50:c5:f0:cf:4c:0e:20:2c:
                    81:d8:bb:03:71:42:27:31:21:b7:66:7e:a5:69:b3:
                    3c:97:d3:97:05:cc:57:1d:fb:cf:97:99:d1:e3:d5:
                    86:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D6:DD:CD:1F:AA:C6:18:14:35:2E:CB:9B:C6:87:50:FC:F2:D6:2A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/t9bdzR-qxhgUNS7Lm8aHUPzy1io.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d700::/40

    Signature Algorithm: sha256WithRSAEncryption
         37:17:40:b3:32:68:07:f2:40:fc:77:6c:65:28:73:68:3b:0c:
         1b:70:be:73:40:bf:eb:be:5e:b0:3c:df:d4:01:88:38:63:6c:
         df:af:f6:a1:1f:ee:2e:05:6c:d1:f2:76:e9:23:4a:c4:0f:69:
         6b:72:09:ff:64:eb:ab:d7:f6:ec:82:8e:e0:a2:e8:98:56:43:
         b4:15:98:48:4f:4f:09:ef:70:0b:c1:b5:fb:27:9b:99:43:af:
         60:55:4d:0f:cb:4c:ed:27:aa:93:9e:2d:24:c2:35:3c:a3:57:
         04:eb:58:bc:99:11:bc:94:11:0d:70:23:01:09:55:6f:88:95:
         28:01:46:41:7a:24:e8:4d:06:91:c1:2d:38:a1:77:c0:8a:ef:
         79:6f:73:c0:c9:e9:8f:85:1b:60:6a:66:cd:a0:50:be:8d:29:
         94:f5:fd:26:ce:fe:10:47:27:9f:52:7a:2e:71:a5:77:d1:20:
         a8:1d:92:1c:70:26:70:5e:a8:36:7f:bd:06:86:c9:45:ab:b5:
         e5:b8:d6:35:e5:8b:84:0c:83:e6:1c:b7:b1:b7:d3:74:72:85:
         82:ea:21:5c:b5:52:62:49:d8:d7:d0:a5:8f:0a:3e:52:b6:d7:
         12:f6:0f:f4:d3:03:11:ef:76:d2:2a:f0:34:7b:fb:2b:a7:cd:
         5d:29:d1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org