Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7X7QxsFh7bBau0VIGaNALjF7bD4.roa
File:                     7X7QxsFh7bBau0VIGaNALjF7bD4.roa (raw, json)
Hash identifier:          O3Wbt0R2aEBlyPkw59JcyY/Q1IolitCcN1UE6xqwkgM=
Subject key identifier:   ED:7E:D0:C6:C1:61:ED:B0:5A:BB:45:48:19:A3:40:2E:31:7B:6C:3E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01D0
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7X7QxsFh7bBau0VIGaNALjF7bD4.roa
Signing time:             Tue 30 May 2023 17:38:24 +0000
ROA not before:           Tue 30 May 2023 17:38:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a100::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=ED7ED0C6C161EDB05ABB454819A3402E317B6C3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:84:89:29:49:e5:02:85:24:ea:73:92:90:0f:
                    5d:ab:1c:13:85:c0:5b:7e:03:13:69:71:97:be:a3:
                    62:a0:5f:8a:a1:d0:87:57:e2:6c:be:ed:12:35:d4:
                    a9:9b:b1:15:ae:d0:df:8f:dc:9e:27:12:b4:74:23:
                    72:23:e5:f1:8c:4a:6d:7a:1e:4e:dd:72:56:c0:a3:
                    d0:cc:bc:d9:d1:3e:20:8d:27:a7:c9:7c:70:6a:87:
                    e1:dd:2d:b5:b9:7f:6f:5a:c6:77:d9:ac:a1:f0:1d:
                    45:be:fa:74:39:71:8d:e5:b5:3d:fc:1d:ee:f5:7d:
                    50:0a:77:e5:72:9c:d8:44:8e:bc:cc:c8:8a:18:00:
                    4b:74:e5:16:2a:1c:c8:84:fe:af:6b:28:8d:11:88:
                    a8:ba:6d:22:d5:76:19:a2:3f:65:1a:7c:2b:16:e8:
                    e7:cd:ad:9a:c8:66:d8:eb:c8:b8:34:fb:56:af:62:
                    c9:22:d4:5d:c3:a2:b4:41:39:2c:f0:ed:05:41:37:
                    b4:01:d8:c6:56:7a:3d:7e:d0:c2:af:0c:f4:b2:bf:
                    63:54:13:c1:46:cb:cc:5d:9e:7c:1b:d1:b0:44:a7:
                    13:65:2a:50:32:7f:ee:b5:01:68:8a:9a:c0:8c:62:
                    dc:47:7b:5a:0b:6b:0e:78:22:98:1c:8f:44:eb:48:
                    82:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7E:D0:C6:C1:61:ED:B0:5A:BB:45:48:19:A3:40:2E:31:7B:6C:3E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7X7QxsFh7bBau0VIGaNALjF7bD4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a100::/40

    Signature Algorithm: sha256WithRSAEncryption
         c9:99:b4:4c:85:2d:a8:36:a5:5d:87:1f:bc:45:0b:ce:0b:28:
         ae:7d:77:a1:83:5c:22:dc:a1:c2:3f:79:0f:e4:0a:77:9a:a2:
         27:9a:8e:fb:73:aa:f9:18:3f:42:04:ee:4b:37:08:30:e5:ae:
         8a:5e:03:3c:c0:22:00:2f:86:90:6a:74:f1:76:fb:f6:b2:b3:
         63:8b:b5:57:8e:19:71:0a:7a:30:46:7f:f6:6a:7e:70:46:c7:
         31:aa:77:f5:71:29:90:1e:83:7d:12:9d:ca:22:5e:2f:59:aa:
         56:65:4c:3e:72:a9:d7:5d:81:38:44:9d:f6:34:af:78:ac:7e:
         ab:59:4f:da:25:8f:2f:d9:ac:6d:61:22:1d:fb:fc:77:c0:5a:
         af:31:21:12:78:0c:41:a1:06:b7:a8:d5:59:c4:80:da:37:97:
         be:d2:a6:50:d0:e9:e4:47:96:41:05:84:04:75:8e:df:db:87:
         88:85:83:ca:23:80:dc:4a:1b:6f:77:fd:5c:32:18:83:21:c9:
         58:f0:b6:77:3a:d8:34:32:ae:06:99:1e:56:89:fe:98:47:3a:
         37:15:ea:cb:29:1e:e2:d8:91:9b:5a:8c:53:d0:84:e0:8a:55:
         ef:86:4d:90:80:f7:58:1f:cc:f5:c4:cd:e0:f7:32:8b:08:d2:
         3b:d5:66:c4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzM4MjRaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEVEN0VEMEM2QzE2MUVE
QjA1QUJCNDU0ODE5QTM0MDJFMzE3QjZDM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDahIkpSeUChSTqc5KQD12rHBOFwFt+AxNpcZe+o2KgX4qh0IdX
4my+7RI11KmbsRWu0N+P3J4nErR0I3Ij5fGMSm16Hk7dclbAo9DMvNnRPiCNJ6fJ
fHBqh+HdLbW5f29axnfZrKHwHUW++nQ5cY3ltT38He71fVAKd+VynNhEjrzMyIoY
AEt05RYqHMiE/q9rKI0RiKi6bSLVdhmiP2UafCsW6OfNrZrIZtjryLg0+1avYski
1F3DorRBOSzw7QVBN7QB2MZWej1+0MKvDPSyv2NUE8FGy8xdnnwb0bBEpxNlKlAy
f+61AWiKmsCMYtxHe1oLaw54Ipgcj0TrSIILAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU7X7QxsFh7bBau0VIGaNALjF7bD4wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS83WDdReHNGaDdiQmF1MFZJR2FOQUxqRjdiRDQu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa6EwDQYJKoZIhvcNAQELBQADggEBAMmZtEyFLag2pV2HH7xF
C84LKK59d6GDXCLcocI/eQ/kCneaoieajvtzqvkYP0IE7ks3CDDlropeAzzAIgAv
hpBqdPF2+/ays2OLtVeOGXEKejBGf/ZqfnBGxzGqd/VxKZAeg30SncoiXi9ZqlZl
TD5yqdddgThEnfY0r3isfqtZT9oljy/ZrG1hIh37/HfAWq8xIRJ4DEGhBreo1VnE
gNo3l77SplDQ6eRHlkEFhAR1jt/bh4iFg8ojgNxKG293/VwyGIMhyVjwtnc62DQy
rgaZHlaJ/phHOjcV6sspHuLYkZtajFPQhOCKVe+GTZCA91gfzPXEzeD3MosI0jvV
ZsQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org