Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/y3N4MK2sZpWVvaMETUkNzKgVBew.roa
File:                     y3N4MK2sZpWVvaMETUkNzKgVBew.roa (raw, json)
Hash identifier:          sYFGrR9pP6gCF2nffRlqCasfSudycBbmOdZ/MJy7Fyc=
Subject key identifier:   CB:73:78:30:AD:AC:66:95:95:BD:A3:04:4D:49:0D:CC:A8:15:05:EC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01DB
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/y3N4MK2sZpWVvaMETUkNzKgVBew.roa
Signing time:             Tue 30 May 2023 17:38:27 +0000
ROA not before:           Tue 30 May 2023 17:38:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b700::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=CB737830ADAC669595BDA3044D490DCCA81505EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c6:17:d7:6b:ee:38:c9:ae:93:69:18:02:2a:
                    a1:b0:3f:61:0f:25:c0:7d:78:f7:94:80:73:2d:5f:
                    1f:48:81:23:ec:da:b9:27:66:7f:3d:2d:30:30:15:
                    c6:51:bd:ad:3d:10:84:06:7d:9c:48:5b:29:ee:55:
                    02:70:12:79:b3:35:31:54:dc:b4:bc:e5:c7:cb:1c:
                    af:95:5d:cf:27:c3:51:be:7c:03:4e:14:10:58:ea:
                    5c:14:8f:a0:e8:a5:c8:ec:9b:fd:46:80:e5:47:b9:
                    92:14:b7:ec:56:ea:1f:7f:d1:8d:7d:36:95:1b:20:
                    0b:b9:c3:ea:56:59:7f:b2:6f:95:ee:dc:2d:dd:26:
                    ee:bd:81:31:17:f7:4f:09:10:b4:74:72:6d:9d:83:
                    fa:5d:fa:20:bf:ae:06:9d:aa:c5:60:81:f4:0a:5d:
                    99:cc:95:69:0f:dc:ec:34:f0:84:ad:ce:67:23:44:
                    17:47:b0:6b:0d:85:28:cb:f8:aa:3c:5e:34:9c:ee:
                    db:7a:e8:d8:15:a1:c8:b9:37:8c:5a:5d:97:2c:9b:
                    5d:c3:db:19:cd:e7:d3:12:96:36:ef:9c:aa:f4:8b:
                    7f:28:b2:77:57:27:79:04:0a:bd:98:41:a2:bb:9e:
                    96:50:36:3d:f7:1b:12:21:96:d9:eb:5e:ea:7b:59:
                    d2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:73:78:30:AD:AC:66:95:95:BD:A3:04:4D:49:0D:CC:A8:15:05:EC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/y3N4MK2sZpWVvaMETUkNzKgVBew.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b700::/40

    Signature Algorithm: sha256WithRSAEncryption
         5a:01:a4:eb:74:47:a6:65:41:53:e9:d2:ef:89:50:a1:27:54:
         a4:23:7f:14:1e:04:b6:fa:c9:b3:71:e5:42:77:00:ae:33:18:
         7a:14:f0:74:41:ef:37:79:54:21:1f:b3:55:34:f8:fa:f9:8a:
         96:8c:58:7f:29:53:b2:cc:84:13:29:cb:f2:1c:4a:30:3a:23:
         4f:21:64:d4:24:79:4d:94:f6:91:48:5d:6c:55:ee:a3:a7:3c:
         7a:78:3c:cc:3e:75:f3:6d:50:f6:d7:16:ff:78:07:b3:f3:86:
         8e:4e:7b:d9:7e:41:95:cb:65:e8:29:36:3e:1a:c0:0c:af:ae:
         e9:31:1c:9d:90:56:05:a8:2d:1b:f5:6d:8f:68:21:43:9a:3b:
         b7:cd:5d:1a:86:5f:ae:b0:bc:29:90:23:63:02:29:08:48:ee:
         89:a2:b1:2d:a0:6d:17:62:9c:e1:36:d0:f3:a1:c1:53:9f:8b:
         6f:2a:96:2f:37:ed:58:72:d3:fe:f8:5c:2e:da:4f:7d:24:81:
         ca:44:7b:77:57:64:63:79:12:51:29:f6:e6:00:aa:c9:d9:09:
         ea:d5:49:1a:72:8d:63:3a:aa:35:0a:c2:b6:8f:77:fb:fc:97:
         23:4f:cd:d0:61:2c:05:32:5c:16:4f:af:4e:71:18:89:24:28:
         69:fd:6f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org