Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-iuD7j7Y_MkiLgJozQ2Zx71QxAM.roa
File:                     -iuD7j7Y_MkiLgJozQ2Zx71QxAM.roa (raw, json)
Hash identifier:          DQ5uO1ZRa2wpmlHbR4IpWaLEbNqiZ8WE8FNL/McFin4=
Subject key identifier:   FA:2B:83:EE:3E:D8:FC:C9:22:2E:02:68:CD:0D:99:C7:BD:50:C4:03
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       012A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-iuD7j7Y_MkiLgJozQ2Zx71QxAM.roa
Signing time:             Tue 30 May 2023 17:29:56 +0000
ROA not before:           Tue 30 May 2023 17:29:56 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3600::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:29:56 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=FA2B83EE3ED8FCC9222E0268CD0D99C7BD50C403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:72:a6:59:65:f0:d6:db:76:37:86:00:5f:cb:
                    a3:69:41:a9:3e:d9:1f:10:fb:61:90:86:2f:09:27:
                    66:ac:10:91:04:a3:4c:d3:06:84:ab:37:fc:ad:03:
                    71:2c:23:b9:21:95:f8:b0:c7:ed:b5:f9:e6:7c:44:
                    dc:f6:bc:0a:69:cc:89:b2:30:91:b1:0b:79:a6:2a:
                    7f:18:59:26:48:55:ed:1e:ba:a6:33:1f:f8:de:7a:
                    a4:fb:63:7b:89:de:9a:fd:85:6b:23:f2:81:21:ee:
                    a2:50:8d:f4:09:94:0f:d2:6a:e2:01:aa:30:71:18:
                    fa:a3:68:ae:a3:ff:f2:bb:b5:ac:9d:99:6f:29:f1:
                    c2:07:9a:d9:0c:4e:7c:ab:3e:99:e2:71:95:79:7f:
                    88:fa:7d:4b:9d:28:2a:35:9f:48:44:dd:81:db:7e:
                    ac:20:4d:0b:05:02:73:ff:21:54:74:56:62:be:80:
                    35:ed:20:8e:91:37:b9:7e:68:2d:f8:f8:9b:8a:a5:
                    a6:8b:61:74:34:b5:2b:1c:50:28:1e:e8:0e:46:66:
                    99:ae:d9:a4:12:48:e3:90:b2:53:74:9f:46:ad:9e:
                    ca:1c:98:58:c7:4f:90:09:46:7f:e8:57:cc:7d:19:
                    76:bf:09:47:29:2c:9e:ac:4c:15:4b:0d:96:05:6e:
                    99:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2B:83:EE:3E:D8:FC:C9:22:2E:02:68:CD:0D:99:C7:BD:50:C4:03
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-iuD7j7Y_MkiLgJozQ2Zx71QxAM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3600::/40

    Signature Algorithm: sha256WithRSAEncryption
         9f:c8:a1:51:be:db:d0:72:af:fc:e0:cc:c9:d9:45:54:e9:a5:
         51:42:ab:cb:76:33:90:20:09:8b:d2:5f:a2:da:a0:17:df:ae:
         4b:f4:c7:59:06:8c:67:2a:8e:5e:cb:ad:83:58:2f:f6:c4:89:
         7c:40:81:ee:3a:95:bc:6c:87:09:a9:91:f4:65:70:06:3e:15:
         2a:5e:8b:07:b1:3e:39:3d:05:e9:d1:21:db:69:4d:d4:41:d2:
         7a:2f:43:31:33:6a:8a:04:21:77:c0:a5:3d:be:fe:be:da:ff:
         0c:26:b9:64:24:40:ff:6c:0d:d6:03:0d:f2:31:c9:e3:36:cd:
         96:a9:5b:f9:f3:b2:94:70:e9:1b:1b:95:5b:05:5b:e0:d6:3f:
         3c:94:33:2d:c1:8d:8c:a0:42:ee:89:4c:34:c9:b2:c2:e4:d5:
         2e:e3:9e:8d:2a:58:f8:50:1d:46:5a:8a:65:43:66:d8:2b:9d:
         66:61:95:92:69:15:0a:4e:49:5a:a2:bd:55:1f:74:ab:44:19:
         33:6a:35:c2:d8:42:23:0e:a1:bb:b9:0e:df:43:c8:62:67:5e:
         91:cb:b6:32:41:48:4a:47:82:d8:62:8f:c6:b8:65:60:9b:3b:
         53:2e:95:74:d2:8c:e0:8f:e1:f0:81:c9:df:64:32:82:17:d5:
         57:b0:38:c2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICASowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzI5NTZaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEZBMkI4M0VFM0VEOEZD
QzkyMjJFMDI2OENEMEQ5OUM3QkQ1MEM0MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDecqZZZfDW23Y3hgBfy6NpQak+2R8Q+2GQhi8JJ2asEJEEo0zT
BoSrN/ytA3EsI7khlfiwx+21+eZ8RNz2vAppzImyMJGxC3mmKn8YWSZIVe0euqYz
H/jeeqT7Y3uJ3pr9hWsj8oEh7qJQjfQJlA/SauIBqjBxGPqjaK6j//K7taydmW8p
8cIHmtkMTnyrPpnicZV5f4j6fUudKCo1n0hE3YHbfqwgTQsFAnP/IVR0VmK+gDXt
II6RN7l+aC34+JuKpaaLYXQ0tSscUCge6A5GZpmu2aQSSOOQslN0n0atnsocmFjH
T5AJRn/oV8x9GXa/CUcpLJ6sTBVLDZYFbplFAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU+iuD7j7Y/MkiLgJozQ2Zx71QxAMwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS8taXVEN2o3WV9Na2lMZ0pvelEyWng3MVF4QU0u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAazYwDQYJKoZIhvcNAQELBQADggEBAJ/IoVG+29Byr/zgzMnZ
RVTppVFCq8t2M5AgCYvSX6LaoBffrkv0x1kGjGcqjl7LrYNYL/bEiXxAge46lbxs
hwmpkfRlcAY+FSpeiwexPjk9BenRIdtpTdRB0novQzEzaooEIXfApT2+/r7a/wwm
uWQkQP9sDdYDDfIxyeM2zZapW/nzspRw6RsblVsFW+DWPzyUMy3BjYygQu6JTDTJ
ssLk1S7jno0qWPhQHUZaimVDZtgrnWZhlZJpFQpOSVqivVUfdKtEGTNqNcLYQiMO
obu5Dt9DyGJnXpHLtjJBSEpHgthij8a4ZWCbO1MulXTSjOCP4fCByd9kMoIX1Vew
OMI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org