Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ybLneacmiLjTdbcRHyXGbs85Whk.roa
File:                     ybLneacmiLjTdbcRHyXGbs85Whk.roa (raw, json)
Hash identifier:          4jq8sf3BmIsSToU8fJzhZLInr9xbNsNVLU9Ze3pqfOU=
Subject key identifier:   C9:B2:E7:79:A7:26:88:B8:D3:75:B7:11:1F:25:C6:6E:CF:39:5A:19
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       010F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ybLneacmiLjTdbcRHyXGbs85Whk.roa
Signing time:             Tue 30 May 2023 16:14:15 +0000
ROA not before:           Tue 30 May 2023 16:14:15 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c900::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:14:15 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=C9B2E779A72688B8D375B7111F25C66ECF395A19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:74:14:43:20:9a:51:a8:45:fd:32:27:e2:
                    fb:fa:71:d3:64:1f:7a:0d:01:65:10:6e:d0:d5:8b:
                    5c:0a:9d:5d:a6:44:2f:b4:6c:4c:14:98:07:29:4e:
                    a9:02:c8:ff:6b:9c:4a:b1:f9:ea:b1:fd:5b:30:c4:
                    cb:f1:c7:31:c1:d2:5b:c9:ea:4b:64:94:3d:bd:a3:
                    77:33:bb:24:0f:af:54:63:c0:f4:01:d3:41:21:c6:
                    d9:32:93:21:a4:68:6e:4a:0f:65:16:f7:c3:59:fd:
                    a0:25:aa:ac:2d:d0:90:24:8b:8d:17:93:43:af:2c:
                    9f:e9:c0:ac:11:0a:e2:56:26:d0:4c:86:48:5c:dd:
                    17:2f:c7:71:d0:45:07:e5:0a:46:84:11:8a:7b:dd:
                    f2:20:de:4b:59:40:94:67:39:7d:7c:21:7c:3e:93:
                    61:57:53:98:ab:f4:77:4a:c1:d3:f8:7c:57:38:9c:
                    44:ae:aa:5b:f3:ba:28:2f:7a:16:fd:b4:53:d0:ef:
                    3f:a4:79:76:27:84:9b:91:24:86:ec:8d:e0:ce:40:
                    bc:dd:22:91:8c:5b:34:e2:1e:ad:81:f4:64:d9:0b:
                    ff:48:04:80:fd:e5:85:64:7a:3e:df:3b:83:63:2a:
                    f0:b2:1b:4c:17:49:bb:3b:04:08:70:9d:ce:bb:fe:
                    62:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B2:E7:79:A7:26:88:B8:D3:75:B7:11:1F:25:C6:6E:CF:39:5A:19
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ybLneacmiLjTdbcRHyXGbs85Whk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c900::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:2c:9e:ab:df:60:e1:a9:96:04:1a:41:14:80:09:a9:b4:d2:
         cc:06:90:21:01:fc:e2:ba:25:67:15:97:6b:30:7f:24:d6:45:
         36:38:ab:df:ff:5e:9b:94:75:ca:9b:a3:d0:4e:fe:7c:7c:0e:
         d6:2b:fb:67:a7:54:59:46:ad:a5:c1:e4:13:49:f3:15:29:c6:
         6d:69:3f:b3:20:38:43:09:02:6d:b6:e7:85:84:07:73:52:b5:
         7c:79:9b:ac:91:70:04:62:63:6f:13:37:b3:c6:e8:5f:4a:65:
         1b:11:33:48:c2:e1:f2:8b:8e:6a:53:f1:30:1e:e9:9a:f4:c7:
         58:c5:92:bd:19:dd:ef:0f:83:79:b5:d9:3b:d4:77:18:36:db:
         30:ce:be:58:7b:83:9d:e0:72:b7:c5:10:6a:26:09:33:b2:e8:
         ae:2c:7a:37:fe:66:f0:58:84:92:fa:8f:5b:49:d9:1e:9b:7f:
         46:c3:35:eb:5c:c5:68:4c:e8:4b:af:5e:b6:26:4d:0d:7c:2e:
         9f:76:f0:5e:0c:e1:0d:f0:90:78:9a:a2:ae:74:b3:88:11:70:
         83:5a:67:1f:be:13:cb:b5:96:6a:97:f7:6d:5a:29:33:ae:f0:
         f5:bc:05:f8:9f:02:a2:a7:fc:0c:bf:2d:2b:4e:a8:8c:f1:a4:
         61:03:75:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org