Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/y0MWW7vUobe-a01YEacUV7Kz9S4.roa
File:                     y0MWW7vUobe-a01YEacUV7Kz9S4.roa (raw, json)
Hash identifier:          22ZvMJB1NgCvhT328KVZ55GC1sqIRxStdSNvYJL38Xc=
Subject key identifier:   CB:43:16:5B:BB:D4:A1:B7:BE:6B:4D:58:11:A7:14:57:B2:B3:F5:2E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       C6
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/y0MWW7vUobe-a01YEacUV7Kz9S4.roa
Signing time:             Tue 30 May 2023 16:10:16 +0000
ROA not before:           Tue 30 May 2023 16:10:16 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8000::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:16 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=CB43165BBBD4A1B7BE6B4D5811A71457B2B3F52E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:06:07:cb:86:70:f8:79:46:5c:6f:9d:c4:8c:
                    6d:7a:7a:80:7d:bf:28:80:58:92:67:c9:5c:bc:de:
                    21:9e:df:97:5f:f7:7c:0d:50:0d:ef:f5:5a:92:cf:
                    b1:d9:8d:cd:4b:f3:69:d5:9e:42:0e:02:ad:8c:3b:
                    20:d6:06:14:e0:4c:d2:e4:57:f3:48:e1:60:de:39:
                    94:be:22:df:18:ff:70:c8:e1:fa:6c:96:d8:eb:cd:
                    99:4b:6b:3f:31:29:9d:b4:ee:fc:3d:0c:59:ff:05:
                    a3:35:68:79:57:a1:2c:07:35:9e:39:e4:e2:00:d0:
                    95:50:ec:07:80:00:15:ca:ee:ce:23:35:0b:7f:2d:
                    a5:8f:ce:e6:56:b7:46:52:84:55:98:57:d5:75:32:
                    c4:78:cd:e9:7f:f9:dc:ea:c8:63:7e:96:9e:1c:35:
                    9d:18:b6:b4:f8:05:0c:9c:a9:29:40:0b:52:0a:6e:
                    c5:f9:be:51:c3:4b:61:a3:e0:05:1c:eb:d2:be:5f:
                    71:59:f4:bb:2d:ee:69:03:e5:18:a9:2e:f2:81:bf:
                    48:16:18:94:ea:ff:d0:5c:44:ab:0a:6f:f3:7e:5d:
                    67:d8:79:aa:d4:ac:f1:22:a9:f3:30:1a:e8:e2:1e:
                    2c:cd:61:1d:a8:0b:c3:03:be:7d:e7:8a:9f:4e:7e:
                    b3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:43:16:5B:BB:D4:A1:B7:BE:6B:4D:58:11:A7:14:57:B2:B3:F5:2E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/y0MWW7vUobe-a01YEacUV7Kz9S4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:e0:85:ba:8d:b7:e6:6b:39:05:d3:53:3a:51:55:f9:f6:f4:
         19:fe:bc:37:9a:f4:c5:9b:5e:a6:e6:19:ff:b1:78:32:16:91:
         a6:d8:5c:1d:af:c6:5f:f5:b1:cf:78:e9:d6:2a:af:be:5f:d2:
         a0:74:13:27:0c:9a:4e:ff:10:a8:30:a7:62:62:25:2f:4d:90:
         07:24:36:9d:da:5b:ea:9d:42:89:df:d1:07:a9:ea:5e:97:12:
         ab:d0:b4:b4:d9:f2:ba:78:06:63:6a:56:93:93:3d:ae:98:6f:
         7f:96:07:a5:f1:ca:1e:ed:fd:87:b6:79:1d:e8:8b:d7:15:20:
         3f:57:86:14:e4:cd:1f:87:7f:b4:f5:89:4d:d3:c7:5e:fb:c4:
         77:6e:c1:f4:17:c1:c1:b7:82:45:11:8a:5f:a6:e1:e8:cc:33:
         be:bc:10:a5:84:41:23:40:64:8c:28:71:b5:b6:81:66:36:87:
         7c:14:95:d2:68:7f:4c:c4:e4:68:23:5f:75:78:5c:82:5d:1a:
         be:6f:7a:0e:97:20:f2:20:ed:df:93:54:e6:e5:3c:a4:d0:74:
         dc:b0:f9:c6:b3:06:4c:c5:ba:07:23:c7:cc:53:f0:d9:15:de:
         44:76:72:eb:e0:7c:2c:5f:13:28:b9:10:1b:f1:78:81:4c:15:
         b6:71:49:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org