Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/45NCaSQ3DQNUmzaL3gdv3mNez20.roa
File:                     45NCaSQ3DQNUmzaL3gdv3mNez20.roa (raw, json)
Hash identifier:          XgfpBPpH9O7+RKKaArBkX+BfFTb6Cif3c982915kGWQ=
Subject key identifier:   E3:93:42:69:24:37:0D:03:54:9B:36:8B:DE:07:6F:DE:63:5E:CF:6D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       010B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/45NCaSQ3DQNUmzaL3gdv3mNez20.roa
Signing time:             Tue 30 May 2023 16:12:34 +0000
ROA not before:           Tue 30 May 2023 16:12:34 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2100::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:34 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=E393426924370D03549B368BDE076FDE635ECF6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:32:4a:9d:93:23:91:93:f1:27:c9:a3:01:e9:
                    66:84:ad:97:6a:a9:c3:36:e9:40:e1:fa:8a:67:3a:
                    51:63:0b:63:e2:4a:a5:c4:46:d2:0d:7e:45:a5:2b:
                    21:19:8f:43:63:20:9e:1e:f0:10:1d:8a:97:f3:7d:
                    b8:3a:32:4b:04:13:f1:9f:3f:8d:90:71:d3:c6:18:
                    5e:39:81:c6:96:0f:f7:bd:43:fa:ff:63:99:d2:a1:
                    7a:bb:1c:8f:49:79:b5:e8:a6:0e:52:01:35:f5:cf:
                    e3:56:4d:c9:41:7b:82:cf:3c:28:ba:6f:bc:65:66:
                    02:e9:a1:bc:21:d9:50:7f:49:7b:aa:8a:75:7f:a2:
                    7f:29:ae:a7:0b:7e:92:ab:54:5b:41:f9:60:0b:4e:
                    0a:c4:4e:e5:48:5e:32:c0:3a:1d:c6:3c:c8:bf:14:
                    8e:8a:bf:78:fa:dd:1d:22:c8:27:9d:60:56:a1:fa:
                    f3:5c:d6:78:a2:c8:fc:3b:b3:69:ce:9a:30:a4:9b:
                    6c:95:a2:e3:8f:6b:13:96:4f:19:99:50:f8:7c:b2:
                    51:a8:de:78:3a:45:50:4c:af:cf:0f:a8:84:5b:3f:
                    2c:c5:5c:b5:3b:58:b9:b7:f6:c5:fe:6c:7b:b0:d6:
                    1a:4d:1e:fa:b7:a2:92:29:54:20:2f:d9:67:f7:7f:
                    73:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:93:42:69:24:37:0D:03:54:9B:36:8B:DE:07:6F:DE:63:5E:CF:6D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/45NCaSQ3DQNUmzaL3gdv3mNez20.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         24:a8:87:31:35:1f:98:71:c9:30:e1:4e:0a:60:f6:48:5c:48:
         c2:02:42:30:a8:ea:0d:f3:2e:bd:fe:38:51:97:a4:65:28:e8:
         33:ee:de:cf:b4:13:82:d3:b7:87:10:f7:d4:55:4a:7c:82:0a:
         b1:f7:8b:f6:d5:ee:c3:97:47:0d:af:a4:38:40:03:8d:46:0f:
         cc:c7:3f:1e:2f:2a:00:5d:75:ca:b4:27:5d:0a:9f:20:8f:c7:
         e2:1c:d7:2f:9f:56:61:7d:e7:58:a9:c6:ab:e4:a3:a7:bb:87:
         e4:aa:cb:19:6e:4d:c0:ea:47:1a:89:0b:82:5f:0c:a2:5d:f5:
         f7:a5:4d:74:da:ff:54:44:51:57:d7:b4:0c:d1:9a:d4:58:52:
         da:aa:2f:af:8b:d5:fd:31:d9:25:1a:65:7d:72:32:ff:9e:5d:
         e4:ec:03:4a:4f:f7:27:72:94:34:65:ef:e7:83:5c:f5:5b:e8:
         a8:6f:1a:b7:60:b1:f1:d7:69:1c:7c:1e:22:ed:cf:60:06:09:
         bd:27:b7:88:c7:c4:e5:e5:63:3c:ca:a5:c6:b6:60:75:4c:98:
         96:3e:f9:54:49:d7:a8:36:14:14:2e:a5:1a:e3:62:52:99:41:
         fd:c7:aa:df:9f:49:89:7d:fb:2c:08:d7:f4:b4:ac:77:6c:df:
         03:0e:0b:10
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAQswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NjEyMzRaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEUzOTM0MjY5MjQzNzBE
MDM1NDlCMzY4QkRFMDc2RkRFNjM1RUNGNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXMkqdkyORk/EnyaMB6WaErZdqqcM26UDh+opnOlFjC2PiSqXE
RtINfkWlKyEZj0NjIJ4e8BAdipfzfbg6MksEE/GfP42QcdPGGF45gcaWD/e9Q/r/
Y5nSoXq7HI9JebXopg5SATX1z+NWTclBe4LPPCi6b7xlZgLpobwh2VB/SXuqinV/
on8prqcLfpKrVFtB+WALTgrETuVIXjLAOh3GPMi/FI6Kv3j63R0iyCedYFah+vNc
1niiyPw7s2nOmjCkm2yVouOPaxOWTxmZUPh8slGo3ng6RVBMr88PqIRbPyzFXLU7
WLm39sX+bHuw1hpNHvq3opIpVCAv2Wf3f3MvAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU45NCaSQ3DQNUmzaL3gdv3mNez20wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS80NU5DYVNRM0RRTlVtemFMM2dkdjNtTmV6MjAu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAayEwDQYJKoZIhvcNAQELBQADggEBACSohzE1H5hxyTDhTgpg
9khcSMICQjCo6g3zLr3+OFGXpGUo6DPu3s+0E4LTt4cQ99RVSnyCCrH3i/bV7sOX
Rw2vpDhAA41GD8zHPx4vKgBddcq0J10KnyCPx+Ic1y+fVmF951ipxqvko6e7h+Sq
yxluTcDqRxqJC4JfDKJd9felTXTa/1REUVfXtAzRmtRYUtqqL6+L1f0x2SUaZX1y
Mv+eXeTsA0pP9ydylDRl7+eDXPVb6KhvGrdgsfHXaRx8HiLtz2AGCb0nt4jHxOXl
YzzKpca2YHVMmJY++VRJ16g2FBQupRrjYlKZQf3Hqt+fSYl9+ywI1/S0rHds3wMO
CxA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org