Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3ZFEKtpuu4-N66cLB-fYJRRRQoc.roa
File:                     3ZFEKtpuu4-N66cLB-fYJRRRQoc.roa (raw, json)
Hash identifier:          euJ4kAKBNe6oc+l2y9lhTGhHANzhUvBhZVraOV0V+FI=
Subject key identifier:   DD:91:44:2A:DA:6E:BB:8F:8D:EB:A7:0B:07:E7:D8:25:14:51:42:87
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       33
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3ZFEKtpuu4-N66cLB-fYJRRRQoc.roa
Signing time:             Tue 30 May 2023 16:02:10 +0000
ROA not before:           Tue 30 May 2023 16:02:10 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:aa00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:02:10 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=DD91442ADA6EBB8F8DEBA70B07E7D82514514287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:0e:1e:19:a6:6f:ac:c4:72:a2:65:b9:02:
                    0b:2c:98:fd:d8:50:1b:b3:88:62:0a:ca:63:18:20:
                    1b:f5:49:d9:36:99:c6:e2:8a:b7:6b:c6:f5:b4:a6:
                    d4:c2:30:66:21:06:e2:df:2d:4f:21:d9:aa:2e:0a:
                    73:15:f8:e2:43:d0:68:6c:18:68:6a:1f:0c:82:43:
                    44:97:bb:f9:d3:eb:36:a9:a3:4c:c4:29:30:9d:94:
                    96:28:e3:56:83:fa:d6:e1:93:37:eb:42:88:25:26:
                    9d:fd:5e:ec:68:d0:fb:9c:13:1a:9e:4f:f2:2d:a3:
                    5e:96:74:63:d1:23:e6:82:88:e6:fa:4e:4b:bb:9c:
                    31:4f:e9:73:4a:dc:96:fb:d3:09:ae:03:25:cf:c1:
                    c7:4e:09:e5:e5:4e:5d:a9:50:27:74:c7:f9:dc:29:
                    3b:6d:4c:a8:a1:1e:65:0f:2f:5f:92:95:2a:3e:79:
                    61:2b:11:4b:64:97:f7:27:14:25:2b:dd:8a:7d:76:
                    b6:6e:cb:c2:ef:fa:29:d4:20:61:66:9a:e5:e2:ed:
                    02:f9:5a:08:90:bc:3f:b3:63:50:6d:13:89:33:b9:
                    41:e2:a9:15:ee:db:3e:cf:b8:de:c7:29:52:ca:94:
                    a2:06:78:81:5a:49:e8:9c:04:33:63:c1:71:bd:c8:
                    4a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:91:44:2A:DA:6E:BB:8F:8D:EB:A7:0B:07:E7:D8:25:14:51:42:87
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3ZFEKtpuu4-N66cLB-fYJRRRQoc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:aa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:92:8e:0e:cf:76:b2:61:d2:ef:1d:71:20:1d:fc:fa:02:7e:
         b4:9e:07:42:25:ce:3f:f3:3e:71:be:70:0c:78:67:f9:4b:d6:
         ce:4a:f4:60:0f:82:12:45:e6:fa:17:a9:54:ad:92:f8:85:8b:
         46:86:26:52:99:37:4b:26:10:91:12:ae:a8:76:8e:7a:b4:0a:
         12:8b:50:2b:7c:06:83:2f:32:06:6a:86:7d:97:d4:56:2a:63:
         aa:5e:ce:55:2e:a8:2b:55:39:04:cd:29:b3:66:b6:f4:c6:2e:
         b9:2a:1d:94:dc:59:4b:fd:a1:9c:73:e3:ea:13:c5:73:10:e4:
         40:1e:24:18:99:90:6a:cd:ee:4c:10:53:92:30:f5:c2:5d:ab:
         53:54:46:2a:16:eb:46:0a:09:c6:2a:f4:2d:b0:d5:e4:bc:30:
         8a:b2:7c:6d:85:fc:8f:c9:7d:2a:39:e6:e5:4e:4e:91:8e:ca:
         5f:20:e1:37:f1:cb:02:d2:1f:4d:5c:37:0c:04:84:6e:c3:70:
         8e:e9:8f:5e:07:52:07:fe:cf:ba:c3:1a:db:83:bc:c5:13:5a:
         62:c0:94:f9:e2:d9:ad:2f:eb:58:4f:ee:5a:54:91:7d:ca:d0:
         55:d3:d7:d8:a5:b5:cc:17:cc:88:b9:42:1a:09:7c:2b:9d:34:
         14:2c:eb:e0
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MTI2
MTczQjhENkIzRkYxMEUzRjAzRkIwNTYwRkU2NTUxREVBMkRCMB4XDTIzMDUzMDE2
MDIxMFoXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoREQ5MTQ0MkFEQTZFQkI4
RjhERUJBNzBCMDdFN0Q4MjUxNDUxNDI4NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALQeDh4Zpm+sxHKiZbkCCyyY/dhQG7OIYgrKYxggG/VJ2TaZxuKK
t2vG9bSm1MIwZiEG4t8tTyHZqi4KcxX44kPQaGwYaGofDIJDRJe7+dPrNqmjTMQp
MJ2UlijjVoP61uGTN+tCiCUmnf1e7GjQ+5wTGp5P8i2jXpZ0Y9Ej5oKI5vpOS7uc
MU/pc0rclvvTCa4DJc/Bx04J5eVOXalQJ3TH+dwpO21MqKEeZQ8vX5KVKj55YSsR
S2SX9ycUJSvdin12tm7Lwu/6KdQgYWaa5eLtAvlaCJC8P7NjUG0TiTO5QeKpFe7b
Ps+43scpUsqUogZ4gVpJ6JwEM2PBcb3ISj8CAwEAAaOCAiowggImMB0GA1UdDgQW
BBTdkUQq2m67j43rpwsH59glFFFChzAfBgNVHSMEGDAWgBRRJhc7jWs/8Q4/A/sF
YP5lUd6i2zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMjkvVVNZWE80MXJQX0VPUHdQN0JXRC1aVkhlb3RzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVVNZWE80MXJQX0VPUHdQN0JXRC1a
Vkhlb3RzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTI5LzNaRkVLdHB1dTQtTjY2Y0xCLWZZSlJSUlFvYy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkCgBrqjANBgkqhkiG9w0BAQsFAAOCAQEAo5KODs92smHS7x1xIB38
+gJ+tJ4HQiXOP/M+cb5wDHhn+UvWzkr0YA+CEkXm+hepVK2S+IWLRoYmUpk3SyYQ
kRKuqHaOerQKEotQK3wGgy8yBmqGfZfUVipjql7OVS6oK1U5BM0ps2a29MYuuSod
lNxZS/2hnHPj6hPFcxDkQB4kGJmQas3uTBBTkjD1wl2rU1RGKhbrRgoJxir0LbDV
5LwwirJ8bYX8j8l9Kjnm5U5OkY7KXyDhN/HLAtIfTVw3DASEbsNwjumPXgdSB/7P
usMa24O8xRNaYsCU+eLZrS/rWE/uWlSRfcrQVdPX2KW1zBfMiLlCGgl8K500FCzr
4A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org