Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/xpLotsEkJgvT560XeVGRSzXFB8k.roa
File:                     xpLotsEkJgvT560XeVGRSzXFB8k.roa (raw, json)
Hash identifier:          s/4lCQkQG+9B87+QoUkH83HiS2QBoOpnrBJGyK4Wfs0=
Subject key identifier:   C6:92:E8:B6:C1:24:26:0B:D3:E7:AD:17:79:51:91:4B:35:C5:07:C9
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0183
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/xpLotsEkJgvT560XeVGRSzXFB8k.roa
Signing time:             Tue 30 May 2023 17:34:25 +0000
ROA not before:           Tue 30 May 2023 17:34:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e000::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=C692E8B6C124260BD3E7AD177951914B35C507C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1a:38:db:93:cd:ae:07:8e:97:6f:ae:98:b6:
                    8f:b2:f5:f3:dc:00:08:b1:a9:54:75:2c:f4:cc:41:
                    d8:08:86:00:15:b0:cd:52:9d:20:7f:e1:5c:67:8c:
                    74:2f:85:7f:f5:3f:63:8b:d8:58:e0:0e:b8:d5:ec:
                    c4:71:ad:ab:ba:04:9e:ff:7d:42:c5:ee:c0:76:e9:
                    b1:a6:1e:49:22:dc:72:8b:67:fe:61:32:b8:74:54:
                    fa:4b:f6:a6:0a:9b:a0:28:d0:35:e1:1a:5b:87:ae:
                    4d:03:0a:8e:5b:f9:ed:16:fd:ca:ed:f5:73:3c:60:
                    d4:68:f0:dd:80:e8:ec:e4:85:16:5c:98:02:3d:2f:
                    df:b1:81:99:4f:06:07:46:e8:e2:f1:ad:16:dd:3d:
                    29:f3:5f:2b:e4:74:8d:77:01:89:81:4d:5b:84:f1:
                    88:c2:7e:9f:72:16:c1:ff:ab:a2:3f:18:d0:0e:67:
                    fe:59:b9:20:f1:1d:35:79:1d:15:25:c4:c4:d3:c8:
                    80:11:cc:34:9d:73:b3:13:f3:47:57:44:45:a5:35:
                    d8:62:ab:04:fc:40:1f:8d:eb:c9:ac:b5:9f:ee:bf:
                    d6:ea:0b:0a:25:6f:f7:62:ae:52:28:f4:65:d7:ae:
                    ae:68:8c:c5:ec:d8:40:5e:e6:bb:6f:48:2a:e0:58:
                    66:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:92:E8:B6:C1:24:26:0B:D3:E7:AD:17:79:51:91:4B:35:C5:07:C9
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/xpLotsEkJgvT560XeVGRSzXFB8k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:23:cd:d2:d4:a2:5a:e3:7d:12:4b:66:c6:02:7a:12:64:ad:
         40:fd:8c:45:c6:50:fd:36:85:e9:98:fa:96:40:b4:e1:5b:b3:
         13:da:78:de:f7:0a:d4:5a:d7:95:51:08:70:c9:b1:ef:44:44:
         72:d3:73:bb:b5:c9:61:a9:cf:d0:34:ac:7a:be:1c:6b:0a:82:
         3e:8e:6d:6c:19:57:fd:c2:b1:34:aa:38:a2:c3:1c:6f:60:59:
         6d:ea:44:bd:6a:9c:7a:d9:a1:05:2c:6f:7d:fe:4d:ad:21:f4:
         de:45:30:0f:80:60:5d:17:c5:08:af:66:32:a0:bc:8a:9b:3a:
         95:d3:e7:f1:41:96:47:ce:11:02:94:21:03:5f:de:5e:f5:35:
         44:6b:4d:e9:9e:6b:b4:36:21:62:2d:4c:1d:03:9c:4c:37:2e:
         11:3c:ad:c8:18:61:5e:8d:0d:de:ce:7c:46:74:08:fe:e8:28:
         7e:9e:61:8d:96:ae:57:37:0a:5e:86:d2:6f:27:c3:3e:a2:58:
         ec:6b:3f:a8:04:54:e6:f5:00:c4:3b:4a:f3:ee:e1:90:a8:25:
         69:87:65:4c:d8:f7:82:05:a2:01:94:f3:26:38:1d:de:3d:d9:
         25:e1:6d:74:ac:f2:25:d1:a4:4a:77:df:73:60:d4:ca:c0:c8:
         76:bb:f3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org