Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/63lSCA8FIlbcF0bjhplicJdspOI.roa
File:                     63lSCA8FIlbcF0bjhplicJdspOI.roa (raw, json)
Hash identifier:          lIHVJjBpcvCt5I2nJWH2/H7AUB5gdHHm4pixK02KFDs=
Subject key identifier:   EB:79:52:08:0F:05:22:56:DC:17:46:E3:86:99:62:70:97:6C:A4:E2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       11
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/63lSCA8FIlbcF0bjhplicJdspOI.roa
Signing time:             Wed 15 Mar 2023 03:20:22 +0000
ROA not before:           Wed 15 Mar 2023 03:20:22 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f00e::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 15 03:20:22 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=EB7952080F052256DC1746E386996270976CA4E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7d:af:07:05:73:7b:d7:6b:39:a4:2b:4b:fb:
                    97:5a:cf:f9:c2:87:94:30:6d:ab:e2:b8:33:11:af:
                    43:20:a1:1e:8f:8d:f9:08:5d:2a:45:19:72:47:e4:
                    33:be:ea:ce:46:9e:ff:c9:af:eb:b0:a0:2a:bb:ba:
                    0b:57:a4:cf:0c:de:05:94:b4:34:10:e5:a7:15:9c:
                    e5:60:0d:d2:a5:e9:68:8c:35:ec:2e:25:10:07:06:
                    ee:46:cd:29:31:aa:1d:14:8f:df:bd:22:bb:54:24:
                    3e:ee:88:10:9b:f1:5e:fa:52:ba:e7:5b:9f:8b:c6:
                    10:75:74:97:04:81:6b:51:3d:9a:48:b0:cd:14:ce:
                    73:62:62:7f:04:d9:70:0a:10:75:ce:52:d7:ef:35:
                    1c:cd:b6:e3:4b:65:7f:1e:c6:90:57:09:df:49:a6:
                    ae:91:b6:e1:52:7c:82:13:e8:c0:a2:d4:53:f8:b7:
                    be:e6:e8:7a:f9:5c:e2:85:7f:cb:4f:bc:8c:7f:41:
                    dc:42:04:69:a2:3e:a8:87:a0:72:ff:e4:43:2a:96:
                    61:31:ee:fa:28:c3:35:c5:52:d3:75:96:7b:b7:8d:
                    e9:0f:28:04:3f:c3:b2:dd:4a:cf:c4:b0:5d:f0:28:
                    68:0f:88:af:b8:00:98:a8:ca:0b:ec:f4:c4:1f:41:
                    9c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:79:52:08:0F:05:22:56:DC:17:46:E3:86:99:62:70:97:6C:A4:E2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/63lSCA8FIlbcF0bjhplicJdspOI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f00e::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:3e:d4:f8:32:b7:47:75:91:1a:89:b9:40:34:b8:04:d2:3a:
         45:51:da:ca:da:be:73:03:db:22:3c:27:08:16:a5:1e:fa:87:
         46:ba:27:4f:c1:92:2c:c7:2f:d6:2c:16:49:93:46:e1:ff:a6:
         43:4c:6e:08:72:90:18:f5:9e:ba:c9:c9:01:1b:76:b4:8c:8a:
         31:83:18:02:31:f0:b6:94:c1:2f:b9:c6:2d:13:5d:36:cb:b7:
         53:3c:2e:fa:e5:7e:52:fc:04:cd:61:b8:b5:25:95:c6:50:df:
         11:0c:83:aa:15:a6:7d:5e:12:e4:de:79:df:97:3d:93:4d:13:
         e0:c3:6d:e5:6f:8b:2d:1f:0f:7b:16:80:95:4a:fe:e0:71:7f:
         ab:69:0d:12:94:0e:e5:2f:ff:11:ac:cf:02:02:4d:11:d4:0c:
         b3:ab:2c:4d:ca:c1:00:85:77:88:56:b9:9a:8b:fe:15:99:55:
         7e:85:4d:2d:6e:f4:74:38:1e:08:34:5c:49:46:39:63:d1:57:
         e6:0a:5b:d6:80:8a:a3:ef:ef:bf:fa:34:3c:56:97:d5:75:4a:
         0c:87:1a:7c:5b:8e:e6:a1:90:d0:25:f4:d0:62:02:ea:6e:c9:
         c9:3a:c0:c7:ba:4d:2a:49:41:3d:a2:d0:fa:4c:9c:f7:e6:e7:
         fd:e2:4a:c0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MTI2
MTczQjhENkIzRkYxMEUzRjAzRkIwNTYwRkU2NTUxREVBMkRCMB4XDTIzMDMxNTAz
MjAyMloXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoRUI3OTUyMDgwRjA1MjI1
NkRDMTc0NkUzODY5OTYyNzA5NzZDQTRFMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANR9rwcFc3vXazmkK0v7l1rP+cKHlDBtq+K4MxGvQyChHo+N+Qhd
KkUZckfkM77qzkae/8mv67CgKru6C1ekzwzeBZS0NBDlpxWc5WAN0qXpaIw17C4l
EAcG7kbNKTGqHRSP370iu1QkPu6IEJvxXvpSuudbn4vGEHV0lwSBa1E9mkiwzRTO
c2JifwTZcAoQdc5S1+81HM2240tlfx7GkFcJ30mmrpG24VJ8ghPowKLUU/i3vubo
evlc4oV/y0+8jH9B3EIEaaI+qIegcv/kQyqWYTHu+ijDNcVS03WWe7eN6Q8oBD/D
st1Kz8SwXfAoaA+Ir7gAmKjKC+z0xB9BnJcCAwEAAaOCAiswggInMB0GA1UdDgQW
BBTreVIIDwUiVtwXRuOGmWJwl2yk4jAfBgNVHSMEGDAWgBRRJhc7jWs/8Q4/A/sF
YP5lUd6i2zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMjkvVVNZWE80MXJQX0VPUHdQN0JXRC1aVkhlb3RzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVVNZWE80MXJQX0VPUHdQN0JXRC1a
Vkhlb3RzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTI5LzYzbFNDQThGSWxiY0YwYmpocGxpY0pkc3BPSS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAkCgBg8A4wDQYJKoZIhvcNAQELBQADggEBAHo+1Pgyt0d1kRqJuUA0
uATSOkVR2sravnMD2yI8JwgWpR76h0a6J0/BkizHL9YsFkmTRuH/pkNMbghykBj1
nrrJyQEbdrSMijGDGAIx8LaUwS+5xi0TXTbLt1M8LvrlflL8BM1huLUllcZQ3xEM
g6oVpn1eEuTeed+XPZNNE+DDbeVviy0fD3sWgJVK/uBxf6tpDRKUDuUv/xGszwIC
TRHUDLOrLE3KwQCFd4hWuZqL/hWZVX6FTS1u9HQ4Hgg0XElGOWPRV+YKW9aAiqPv
77/6NDxWl9V1SgyHGnxbjuahkNAl9NBiAupuyck6wMe6TSpJQT2i0PpMnPfm5/3i
SsA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org