Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3AlJHoOlNlb2YEYnTBmJtTUd540.roa
File:                     3AlJHoOlNlb2YEYnTBmJtTUd540.roa (raw, json)
Hash identifier:          71IfC3nPmj9+hNTz2a9oVkiqwJpiwqldq9ierdzzEbQ=
Subject key identifier:   DC:09:49:1E:83:A5:36:56:F6:60:46:27:4C:19:89:B5:35:1D:E7:8D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       89
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3AlJHoOlNlb2YEYnTBmJtTUd540.roa
Signing time:             Tue 30 May 2023 16:06:28 +0000
ROA not before:           Tue 30 May 2023 16:06:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=DC09491E83A53656F66046274C1989B5351DE78D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b5:8e:05:da:cf:14:ae:30:51:61:29:3d:c2:
                    27:c4:a2:fc:68:f2:a5:73:3a:fe:0a:14:a5:99:ba:
                    a2:bb:37:a2:46:ec:dd:bc:ea:40:94:c8:a5:31:6b:
                    b1:fe:ce:e4:8d:02:79:8b:74:65:4f:bb:dd:13:18:
                    df:d1:12:21:70:79:26:51:5d:2c:fe:a7:52:55:f9:
                    bc:49:4e:7a:4a:b6:db:2a:41:f8:99:df:e9:e9:e2:
                    42:3d:cc:19:33:e1:8f:f5:08:cc:ce:8c:63:92:27:
                    60:0f:ba:d0:77:37:21:1b:c0:26:73:8a:45:c7:7a:
                    8b:f4:61:9a:3e:9c:f7:4e:5b:ab:a8:8d:8b:02:d2:
                    fe:dd:92:54:0a:ef:64:5f:9e:a7:29:3d:39:06:21:
                    38:83:13:27:68:54:a6:96:2d:be:df:5b:54:ac:b8:
                    0b:d0:ca:3a:c3:20:d4:c2:b1:aa:f5:c6:32:24:39:
                    cb:b8:05:aa:c2:ea:c0:03:d3:bc:70:40:55:a7:19:
                    46:2c:15:46:38:40:7a:fc:fa:db:fb:3c:fd:af:d0:
                    58:78:70:ef:6e:ad:b8:b1:78:1c:05:c4:b4:f2:74:
                    50:8e:c0:83:13:ad:dd:bd:e9:26:ce:5b:41:b2:cb:
                    82:6e:be:a5:1f:18:31:05:a5:33:1e:51:1d:24:0e:
                    c8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:09:49:1E:83:A5:36:56:F6:60:46:27:4C:19:89:B5:35:1D:E7:8D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3AlJHoOlNlb2YEYnTBmJtTUd540.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3800::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:15:44:a3:49:1e:4d:fc:02:b3:24:a4:53:2d:98:14:09:2d:
         43:2f:04:02:be:a4:6c:88:cd:ea:8b:e6:12:a8:b3:37:57:b3:
         63:08:81:e2:87:e9:b6:fe:5f:f8:a5:8c:c6:74:cc:6f:df:a9:
         83:8f:44:ed:13:76:ab:f4:07:56:96:f5:68:d2:42:62:5c:ef:
         e7:f1:5f:71:ce:77:f6:9a:f9:79:f5:56:4c:b6:52:1e:2d:60:
         0e:4f:fa:0a:ff:c2:37:67:e3:b1:69:15:4a:aa:4d:cb:3b:72:
         38:a9:6c:c1:ea:88:de:de:01:ed:c1:b0:62:ca:4a:b6:0d:94:
         5e:3f:f7:1a:41:ae:30:85:e5:d9:5f:bf:84:08:01:ba:6c:4a:
         4f:5f:1f:03:a1:4b:22:e4:2a:18:f4:16:bf:8c:88:51:59:ee:
         e1:3f:82:7f:e9:e7:0f:cb:1c:5d:6c:e1:8f:5b:0d:0b:de:e5:
         b1:eb:07:55:2f:aa:f8:97:d1:b6:4b:1b:2c:b7:77:d4:32:4e:
         f2:fa:34:58:26:9f:b7:0f:fa:47:14:eb:35:b2:4a:1c:2e:6d:
         df:de:d0:0c:e6:d8:aa:e0:be:47:f5:40:0c:95:6b:f9:10:89:
         1d:30:32:d2:83:ac:52:96:98:d8:8b:f6:9a:2b:33:b4:85:52:
         20:22:bf:b3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NjA2MjhaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKERDMDk0OTFFODNBNTM2
NTZGNjYwNDYyNzRDMTk4OUI1MzUxREU3OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDtY4F2s8UrjBRYSk9wifEovxo8qVzOv4KFKWZuqK7N6JG7N28
6kCUyKUxa7H+zuSNAnmLdGVPu90TGN/REiFweSZRXSz+p1JV+bxJTnpKttsqQfiZ
3+np4kI9zBkz4Y/1CMzOjGOSJ2APutB3NyEbwCZzikXHeov0YZo+nPdOW6uojYsC
0v7dklQK72RfnqcpPTkGITiDEydoVKaWLb7fW1SsuAvQyjrDINTCsar1xjIkOcu4
BarC6sAD07xwQFWnGUYsFUY4QHr8+tv7PP2v0Fh4cO9urbixeBwFxLTydFCOwIMT
rd296SbOW0Gyy4JuvqUfGDEFpTMeUR0kDsi5AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU3AlJHoOlNlb2YEYnTBmJtTUd540wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS8zQWxKSG9PbE5sYjJZRVluVEJtSnRUVWQ1NDAu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAazgwDQYJKoZIhvcNAQELBQADggEBAE8VRKNJHk38ArMkpFMt
mBQJLUMvBAK+pGyIzeqL5hKoszdXs2MIgeKH6bb+X/iljMZ0zG/fqYOPRO0Tdqv0
B1aW9WjSQmJc7+fxX3HOd/aa+Xn1Vky2Uh4tYA5P+gr/wjdn47FpFUqqTcs7cjip
bMHqiN7eAe3BsGLKSrYNlF4/9xpBrjCF5dlfv4QIAbpsSk9fHwOhSyLkKhj0Fr+M
iFFZ7uE/gn/p5w/LHF1s4Y9bDQve5bHrB1UvqviX0bZLGyy3d9QyTvL6NFgmn7cP
+kcU6zWyShwubd/e0Azm2Krgvkf1QAyVa/kQiR0wMtKDrFKWmNiL9porM7SFUiAi
v7M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org