Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7M7Ulf3yIknL_5FgppAWKoxflgs.roa
File:                     7M7Ulf3yIknL_5FgppAWKoxflgs.roa (raw, json)
Hash identifier:          UgE9MDbfP9VTnWT5aodrQDtKcHGPj7Bl6n8gZKH5Fag=
Subject key identifier:   EC:CE:D4:95:FD:F2:22:49:CB:FF:91:60:A6:90:16:2A:8C:5F:96:0B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       DE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7M7Ulf3yIknL_5FgppAWKoxflgs.roa
Signing time:             Tue 30 May 2023 16:10:25 +0000
ROA not before:           Tue 30 May 2023 16:10:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=ECCED495FDF22249CBFF9160A690162A8C5F960B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3f:4c:d7:04:0c:5a:5c:e9:c5:68:a6:5e:30:
                    a9:5b:7d:39:19:62:fa:b9:77:c8:44:24:0f:69:f8:
                    65:1f:48:11:ee:0c:3f:7e:e9:f3:3e:93:ce:8d:2f:
                    7c:34:ba:83:99:d3:3c:f9:fc:af:51:e3:55:ae:b0:
                    5a:85:72:19:82:89:10:cf:c6:2d:de:c8:a0:ea:f2:
                    0e:c5:41:df:35:33:57:a5:35:f6:37:de:17:42:b5:
                    09:50:41:76:2d:b0:a3:d1:3d:d7:a0:7d:6b:57:33:
                    a8:3f:a0:13:df:9c:7d:c2:93:a4:e2:b7:24:fe:d1:
                    f0:00:6d:0e:2d:85:3a:52:c1:9c:e5:c8:13:f9:0f:
                    96:2e:0d:97:14:99:79:39:bf:27:0c:a1:94:42:0f:
                    f2:f8:28:d5:c0:e9:ea:dd:1c:10:18:a5:e5:37:3e:
                    58:56:87:2a:42:5f:da:78:f5:31:f7:6a:b4:ae:41:
                    68:0b:1e:e9:e2:88:a2:14:c1:49:8e:64:81:5b:2b:
                    4c:f7:4c:11:f8:79:71:e0:56:e2:c9:62:3d:e0:6c:
                    1b:75:a2:63:89:82:64:02:81:d9:8b:35:28:2c:23:
                    78:9a:77:2c:a7:f3:df:32:4d:10:93:10:40:c9:f9:
                    a8:5f:4e:d2:20:f1:11:a7:8d:42:49:90:44:3c:07:
                    9a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CE:D4:95:FD:F2:22:49:CB:FF:91:60:A6:90:16:2A:8C:5F:96:0B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7M7Ulf3yIknL_5FgppAWKoxflgs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4400::/40

    Signature Algorithm: sha256WithRSAEncryption
         74:1c:88:2e:48:1e:f4:f4:43:48:49:e7:9a:e9:ac:45:12:aa:
         d6:df:f2:96:3d:58:f9:a8:2e:91:1e:30:bd:c5:30:85:3c:67:
         dd:d1:fe:a6:c4:2e:e1:2c:53:7c:da:c5:11:eb:65:80:64:e3:
         4e:b7:16:dd:33:cf:e5:73:fc:02:18:6f:65:28:13:07:ea:98:
         fc:50:07:da:f8:1c:f1:f6:53:39:fb:3e:fc:1a:42:ae:96:df:
         54:f7:11:f7:04:05:e6:d4:98:7d:55:9b:d3:6e:a5:3c:56:4b:
         21:4e:b5:a5:18:5f:58:89:63:fe:ee:62:6a:df:02:c8:99:d7:
         61:e5:95:aa:d3:fb:70:8d:ad:ba:92:9d:97:1b:07:f1:ca:1a:
         08:3b:98:14:36:62:8e:b1:ef:89:4d:b9:b3:2c:f5:65:c3:4c:
         32:46:3f:38:79:50:cb:1b:c7:82:ed:a2:6d:4a:05:b5:12:d9:
         0f:ad:68:59:13:c5:7f:96:d3:74:e3:05:c5:ec:1f:ee:f2:47:
         ea:4e:aa:c1:f0:b8:bc:22:5b:c8:9f:a5:8a:af:1e:a5:78:30:
         51:53:0a:5f:32:8c:ef:7d:2c:54:23:4b:82:78:91:b8:69:3d:
         1f:09:6e:44:2d:62:23:ad:f9:dd:fc:97:62:33:0a:ce:4a:23:
         06:98:58:b8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NjEwMjVaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEVDQ0VENDk1RkRGMjIy
NDlDQkZGOTE2MEE2OTAxNjJBOEM1Rjk2MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXP0zXBAxaXOnFaKZeMKlbfTkZYvq5d8hEJA9p+GUfSBHuDD9+
6fM+k86NL3w0uoOZ0zz5/K9R41WusFqFchmCiRDPxi3eyKDq8g7FQd81M1elNfY3
3hdCtQlQQXYtsKPRPdegfWtXM6g/oBPfnH3Ck6TityT+0fAAbQ4thTpSwZzlyBP5
D5YuDZcUmXk5vycMoZRCD/L4KNXA6erdHBAYpeU3PlhWhypCX9p49TH3arSuQWgL
HuniiKIUwUmOZIFbK0z3TBH4eXHgVuLJYj3gbBt1omOJgmQCgdmLNSgsI3iadyyn
898yTRCTEEDJ+ahfTtIg8RGnjUJJkEQ8B5rLAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU7M7Ulf3yIknL/5FgppAWKoxflgswHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS83TTdVbGYzeUlrbkxfNUZncHBBV0tveGZsZ3Mu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa0QwDQYJKoZIhvcNAQELBQADggEBAHQciC5IHvT0Q0hJ55rp
rEUSqtbf8pY9WPmoLpEeML3FMIU8Z93R/qbELuEsU3zaxRHrZYBk4063Ft0zz+Vz
/AIYb2UoEwfqmPxQB9r4HPH2Uzn7PvwaQq6W31T3EfcEBebUmH1Vm9NupTxWSyFO
taUYX1iJY/7uYmrfAsiZ12HllarT+3CNrbqSnZcbB/HKGgg7mBQ2Yo6x74lNubMs
9WXDTDJGPzh5UMsbx4Ltom1KBbUS2Q+taFkTxX+W03TjBcXsH+7yR+pOqsHwuLwi
W8ifpYqvHqV4MFFTCl8yjO99LFQjS4J4kbhpPR8JbkQtYiOt+d38l2IzCs5KIwaY
WLg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org