Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vdeBTjqeBY2jnHllVb1ZdlcZXWg.roa
File:                     vdeBTjqeBY2jnHllVb1ZdlcZXWg.roa (raw, json)
Hash identifier:          su6mwDB+9hbRUfDmlsK/hKMvTervaeJQ9WFmlrrg9DQ=
Subject key identifier:   BD:D7:81:4E:3A:9E:05:8D:A3:9C:79:65:55:BD:59:76:57:19:5D:68
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0100
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vdeBTjqeBY2jnHllVb1ZdlcZXWg.roa
Signing time:             Tue 30 May 2023 16:12:31 +0000
ROA not before:           Tue 30 May 2023 16:12:31 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:31 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=BDD7814E3A9E058DA39C796555BD597657195D68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ab:a1:59:82:a1:83:0a:d7:00:ea:88:1e:2a:
                    9b:d0:43:9a:0c:8e:14:0f:18:db:eb:6a:d2:b3:a4:
                    f9:10:a9:ec:3f:91:b7:62:26:9c:54:25:62:f9:1f:
                    ed:79:b6:14:00:39:9b:51:9b:4a:ea:d3:32:93:1e:
                    c1:55:f8:eb:58:c4:67:f9:9e:2f:20:90:33:fa:c9:
                    b1:09:5d:8f:eb:4b:b0:f8:4f:6d:7c:97:96:34:27:
                    b3:3e:e5:c9:d1:18:b1:00:9a:ee:7f:9b:16:06:d2:
                    06:29:f0:a3:9b:99:fa:41:36:15:70:8c:23:60:6b:
                    2f:27:0f:af:af:fc:c6:47:86:86:19:aa:41:5b:4d:
                    fc:fb:1d:46:44:8e:1e:bc:0f:61:cd:20:31:47:bb:
                    e3:a5:49:81:55:86:27:d3:cf:d5:f3:6f:94:16:3d:
                    a2:d7:38:75:7f:4e:7f:1d:9b:df:8d:e7:ae:98:33:
                    0b:da:71:db:e7:b3:c1:e2:c4:2b:5f:a9:29:d1:fc:
                    a3:f9:ac:2c:51:39:cf:f4:e2:c1:26:ce:b8:bd:50:
                    14:5a:fc:af:29:43:d9:9c:04:83:ad:a2:c7:6d:34:
                    c4:dc:77:50:eb:44:f5:e7:d9:56:76:8b:91:6c:9d:
                    19:e1:7b:b0:68:a7:d1:0f:24:bd:74:e8:b2:d2:c1:
                    41:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D7:81:4E:3A:9E:05:8D:A3:9C:79:65:55:BD:59:76:57:19:5D:68
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vdeBTjqeBY2jnHllVb1ZdlcZXWg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6800::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:d6:64:38:dd:28:14:6e:9c:e0:39:d0:20:5f:d8:d7:2b:f3:
         66:22:80:f0:01:29:b8:08:d4:f0:c9:ef:84:6d:25:09:fd:bc:
         57:8e:fb:3c:4d:ab:1b:68:90:4b:33:34:7e:48:0a:83:2c:59:
         63:22:41:87:de:a4:d5:5b:b6:cc:48:80:62:b6:46:62:16:5a:
         bd:d1:db:38:b6:35:7e:2e:b9:60:28:d3:1a:8b:5c:00:85:ad:
         91:c5:45:4b:57:e8:22:92:75:e2:f5:0b:a0:fe:28:1c:3b:c6:
         36:8c:4c:c3:4f:02:fa:bd:ce:55:e0:51:d3:23:18:bb:13:7e:
         a1:68:58:42:ef:7f:ac:3c:13:aa:96:da:69:3e:17:ee:2d:52:
         9b:d7:a7:0b:6d:d4:30:19:13:b5:45:52:8b:e1:17:5a:e7:d2:
         54:3f:af:8c:5a:5e:07:54:ca:d6:93:6f:f6:1d:02:31:ed:52:
         4d:da:9a:f1:6b:b0:15:00:a8:39:e3:a3:45:4a:d1:65:8e:ce:
         1b:b1:14:67:49:7e:51:ec:15:04:22:6b:c3:44:3d:9c:e2:15:
         dd:c3:9a:3d:d0:86:24:44:cc:01:cc:13:ed:71:aa:af:e4:e5:
         70:2a:b4:e2:1e:d9:f6:c5:5d:ac:8e:36:ae:d9:91:04:a4:27:
         25:61:51:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org