Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/30QCi6vZ9WiqA61ZiurIeFFi64o.roa
File:                     30QCi6vZ9WiqA61ZiurIeFFi64o.roa (raw, json)
Hash identifier:          0PUrw7L7hRsOyoNpLsf6t/+nlcTANj2nT2LCM7QaVME=
Subject key identifier:   DF:44:02:8B:AB:D9:F5:68:AA:03:AD:59:8A:EA:C8:78:51:62:EB:8A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       A7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/30QCi6vZ9WiqA61ZiurIeFFi64o.roa
Signing time:             Tue 30 May 2023 16:08:21 +0000
ROA not before:           Tue 30 May 2023 16:08:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8700::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=DF44028BABD9F568AA03AD598AEAC8785162EB8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b6:a8:75:af:82:fe:18:31:91:a2:e7:e9:9c:
                    3b:33:37:bd:2e:a8:91:b7:ab:7d:ce:20:f2:02:91:
                    1a:24:1e:c5:06:98:74:40:82:2d:88:11:a3:ac:1b:
                    98:37:23:53:c5:90:99:2f:d8:89:a8:42:90:03:3f:
                    a8:d9:d6:82:a7:da:f2:a9:47:01:c5:45:70:98:32:
                    b4:26:5a:9a:37:85:72:c6:94:12:33:f2:96:dd:b2:
                    48:83:c6:b4:e7:78:e1:30:1b:a9:a2:ce:67:af:fd:
                    23:75:8d:8c:82:8e:f1:da:6c:02:a3:76:c9:63:41:
                    bb:b7:08:f6:b0:9f:04:38:af:9b:c5:28:9c:db:ba:
                    74:4d:4c:fd:87:c3:65:7f:47:53:29:c0:aa:82:45:
                    ec:34:5f:e6:a9:33:ae:0d:fd:1c:24:8d:38:d9:e3:
                    bb:ca:b9:c1:cf:56:ef:3c:44:86:aa:d1:70:b0:52:
                    e7:94:64:aa:28:00:ab:df:4d:96:0f:58:27:75:cd:
                    82:53:4e:05:29:0e:2f:dd:15:ec:a4:87:0c:0a:c8:
                    6d:14:1b:d3:c6:a7:e0:fc:7f:d2:ed:57:66:97:22:
                    24:b5:8c:94:c3:c2:d5:3f:92:5f:2a:d7:7c:14:03:
                    b4:26:ce:96:7f:82:9b:f5:ba:b7:b9:c7:ef:61:61:
                    ff:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:44:02:8B:AB:D9:F5:68:AA:03:AD:59:8A:EA:C8:78:51:62:EB:8A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/30QCi6vZ9WiqA61ZiurIeFFi64o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8700::/40

    Signature Algorithm: sha256WithRSAEncryption
         79:23:d4:c2:76:4b:ab:6b:ec:e5:2a:e5:42:c6:e0:ce:1a:ff:
         10:fd:5a:e8:42:b4:28:ce:ff:e1:36:59:60:92:3d:a9:d8:8d:
         ca:ba:86:21:9b:a7:1c:64:3a:0d:e8:11:e4:54:ae:16:37:92:
         3b:5b:eb:f4:8e:71:05:58:f4:6c:d4:cd:d2:90:91:4a:7d:8d:
         1c:9f:95:f0:c2:bc:6f:59:2e:1d:4b:32:ad:02:34:6c:e3:3e:
         1e:a8:77:7f:94:81:dc:2f:f7:b5:dd:89:e4:dc:45:0f:6f:c7:
         ec:7f:b4:86:5a:1d:45:3d:57:d9:9c:b1:70:70:43:5e:c1:31:
         51:64:48:07:7f:8e:a1:e3:25:a3:12:0a:60:9d:06:e3:17:1f:
         9f:44:f0:6d:5d:2a:67:a5:37:5c:a6:27:e6:80:ce:09:77:06:
         a9:73:ea:9f:36:91:a3:df:a1:d8:81:a5:57:e6:12:f8:2b:2c:
         0d:1f:3b:3b:03:10:33:47:8f:28:0a:63:77:33:98:31:db:6c:
         eb:1d:19:4c:0f:96:67:94:2d:74:be:1c:be:21:12:09:ca:61:
         60:09:b9:b4:df:20:3b:05:ff:8f:57:de:ce:7c:5b:8b:f4:87:
         40:91:6b:f9:e3:b3:af:0d:46:fc:59:49:a1:33:9b:af:4f:5e:
         65:c7:6d:63
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NjA4MjFaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKERGNDQwMjhCQUJEOUY1
NjhBQTAzQUQ1OThBRUFDODc4NTE2MkVCOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXtqh1r4L+GDGRoufpnDszN70uqJG3q33OIPICkRokHsUGmHRA
gi2IEaOsG5g3I1PFkJkv2ImoQpADP6jZ1oKn2vKpRwHFRXCYMrQmWpo3hXLGlBIz
8pbdskiDxrTneOEwG6mizmev/SN1jYyCjvHabAKjdsljQbu3CPawnwQ4r5vFKJzb
unRNTP2Hw2V/R1MpwKqCRew0X+apM64N/RwkjTjZ47vKucHPVu88RIaq0XCwUueU
ZKooAKvfTZYPWCd1zYJTTgUpDi/dFeykhwwKyG0UG9PGp+D8f9LtV2aXIiS1jJTD
wtU/kl8q13wUA7QmzpZ/gpv1ure5x+9hYf9tAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU30QCi6vZ9WiqA61ZiurIeFFi64owHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS8zMFFDaTZ2WjlXaXFBNjFaaXVySWVGRmk2NG8u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa4cwDQYJKoZIhvcNAQELBQADggEBAHkj1MJ2S6tr7OUq5ULG
4M4a/xD9WuhCtCjO/+E2WWCSPanYjcq6hiGbpxxkOg3oEeRUrhY3kjtb6/SOcQVY
9GzUzdKQkUp9jRyflfDCvG9ZLh1LMq0CNGzjPh6od3+Ugdwv97XdieTcRQ9vx+x/
tIZaHUU9V9mcsXBwQ17BMVFkSAd/jqHjJaMSCmCdBuMXH59E8G1dKmelN1ymJ+aA
zgl3Bqlz6p82kaPfodiBpVfmEvgrLA0fOzsDEDNHjygKY3czmDHbbOsdGUwPlmeU
LXS+HL4hEgnKYWAJubTfIDsF/49X3s58W4v0h0CRa/njs68NRvxZSaEzm69PXmXH
bWM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org