Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6FsOhp1LKfddYdzVmEVJO4Up2yk.roa
File:                     6FsOhp1LKfddYdzVmEVJO4Up2yk.roa (raw, json)
Hash identifier:          E6b3uvexhbx5j0H5nYrw+2BzM+JBUxTudJwdqLH6uiU=
Subject key identifier:   E8:5B:0E:86:9D:4B:29:F7:5D:61:DC:D5:98:45:49:3B:85:29:DB:29
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01E3
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6FsOhp1LKfddYdzVmEVJO4Up2yk.roa
Signing time:             Tue 30 May 2023 17:38:29 +0000
ROA not before:           Tue 30 May 2023 17:38:29 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6d00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:29 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=E85B0E869D4B29F75D61DCD59845493B8529DB29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f6:10:51:ab:31:b1:98:23:16:35:e4:27:0a:
                    82:4e:3a:4a:1b:13:3b:52:91:91:08:9c:81:d7:95:
                    da:11:80:4b:21:93:54:1c:c6:90:42:ee:88:89:5a:
                    9e:61:78:94:8f:82:d3:ae:63:da:37:0a:c6:2e:a5:
                    be:08:05:20:12:25:82:8d:cb:76:81:88:61:c4:16:
                    8d:73:68:64:7d:af:32:a6:fe:d6:eb:cd:29:25:03:
                    20:a5:bb:33:73:a8:30:3f:b2:45:9b:25:dc:52:1e:
                    e3:25:f5:97:9e:a7:7d:2e:33:ea:01:3b:94:da:58:
                    61:ee:af:52:10:8f:da:b2:b9:77:93:d7:ea:71:8b:
                    a4:f7:a7:8a:04:ce:cb:72:c9:13:75:54:33:5b:30:
                    6f:a6:4a:2e:f3:de:ea:44:f1:43:fd:eb:02:31:d6:
                    3e:1f:4a:cf:fa:19:a4:c7:f6:0c:f5:5c:68:b8:51:
                    0a:f1:c0:a3:f8:ec:aa:7c:4e:9a:4a:98:d1:8a:0d:
                    94:f1:bd:67:08:38:c0:52:11:1c:c5:14:63:82:75:
                    4a:34:9b:b8:c3:9b:fe:77:ee:41:b7:89:93:7f:0d:
                    90:02:23:48:b3:79:a7:5c:93:4c:d6:a2:04:4f:54:
                    83:8c:2d:36:4c:93:c3:49:48:88:8a:9f:13:6b:8b:
                    f3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5B:0E:86:9D:4B:29:F7:5D:61:DC:D5:98:45:49:3B:85:29:DB:29
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6FsOhp1LKfddYdzVmEVJO4Up2yk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         04:c9:35:34:98:80:0d:72:62:86:03:f4:60:d6:11:43:61:59:
         7b:7d:03:88:50:31:84:8b:f5:e4:2a:5a:00:1c:cc:52:71:e6:
         52:f3:04:4b:e4:18:d1:a8:82:fe:41:ac:68:09:81:3b:7d:4d:
         a1:a3:b2:60:c6:55:1d:f0:5b:35:11:97:36:ea:d5:60:9b:96:
         0c:57:4b:ca:73:3b:34:fd:90:6f:65:a2:4b:af:80:c1:66:af:
         c6:1c:7b:27:88:63:e0:3d:f0:d5:dd:d4:d4:22:9c:26:9a:74:
         07:4f:6b:3d:9b:6f:f9:26:91:35:bc:db:0e:ec:e6:ba:cd:86:
         7a:0a:36:50:20:1a:17:00:6c:99:90:b2:e3:7b:a5:f6:05:09:
         34:04:26:73:fb:20:68:eb:70:22:cf:5d:7a:90:c2:50:b1:15:
         b0:8e:0c:49:3c:b4:25:5a:1d:76:d5:bc:23:60:c1:4d:5b:25:
         84:bb:17:65:30:c5:22:48:96:11:28:89:11:fa:ab:2e:cb:5f:
         7e:44:7d:de:f1:f4:a6:92:a8:8b:a0:70:09:4b:21:de:5e:77:
         12:ce:da:d9:d7:d1:c9:f9:f6:40:35:db:66:04:5f:20:88:e9:
         bf:44:32:99:e9:8c:9d:23:59:86:25:91:44:53:e5:2d:59:f8:
         a4:b3:c3:e6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzM4MjlaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEU4NUIwRTg2OUQ0QjI5
Rjc1RDYxRENENTk4NDU0OTNCODUyOURCMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCz9hBRqzGxmCMWNeQnCoJOOkobEztSkZEInIHXldoRgEshk1Qc
xpBC7oiJWp5heJSPgtOuY9o3CsYupb4IBSASJYKNy3aBiGHEFo1zaGR9rzKm/tbr
zSklAyCluzNzqDA/skWbJdxSHuMl9Zeep30uM+oBO5TaWGHur1IQj9qyuXeT1+px
i6T3p4oEzstyyRN1VDNbMG+mSi7z3upE8UP96wIx1j4fSs/6GaTH9gz1XGi4UQrx
wKP47Kp8TppKmNGKDZTxvWcIOMBSERzFFGOCdUo0m7jDm/537kG3iZN/DZACI0iz
eadck0zWogRPVIOMLTZMk8NJSIiKnxNri/NTAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU6FsOhp1LKfddYdzVmEVJO4Up2ykwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS82RnNPaHAxTEtmZGRZZHpWbUVWSk80VXAyeWsu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa20wDQYJKoZIhvcNAQELBQADggEBAATJNTSYgA1yYoYD9GDW
EUNhWXt9A4hQMYSL9eQqWgAczFJx5lLzBEvkGNGogv5BrGgJgTt9TaGjsmDGVR3w
WzURlzbq1WCblgxXS8pzOzT9kG9lokuvgMFmr8YceyeIY+A98NXd1NQinCaadAdP
az2bb/kmkTW82w7s5rrNhnoKNlAgGhcAbJmQsuN7pfYFCTQEJnP7IGjrcCLPXXqQ
wlCxFbCODEk8tCVaHXbVvCNgwU1bJYS7F2UwxSJIlhEoiRH6qy7LX35Efd7x9KaS
qIugcAlLId5edxLO2tnX0cn59kA122YEXyCI6b9EMpnpjJ0jWYYlkURT5S1Z+KSz
w+Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org