Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7ZWupTNR5liYV6aG3WITvmJ7McI.roa
File:                     7ZWupTNR5liYV6aG3WITvmJ7McI.roa (raw, json)
Hash identifier:          IwsYfxbzZsTr6euIkVdB6dRIsrR7c0w/StcrQiMMrGY=
Subject key identifier:   ED:95:AE:A5:33:51:E6:58:98:57:A6:86:DD:62:13:BE:62:7B:31:C2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01AE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7ZWupTNR5liYV6aG3WITvmJ7McI.roa
Signing time:             Tue 30 May 2023 17:36:27 +0000
ROA not before:           Tue 30 May 2023 17:36:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:500::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=ED95AEA53351E6589857A686DD6213BE627B31C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:71:b9:cc:75:d6:85:59:48:4c:64:fe:fe:5a:
                    89:e8:da:70:80:14:71:29:ed:c9:ec:b6:fd:86:11:
                    7d:1a:35:f0:5c:e2:ff:d0:c8:09:8d:b7:c9:0e:88:
                    63:72:60:92:cc:ce:98:75:25:2d:3e:51:58:b0:37:
                    7e:6d:88:18:99:1a:5c:54:08:6e:3b:9c:e6:0d:bd:
                    e3:f3:43:37:63:0a:82:a4:44:be:38:75:ec:35:6e:
                    ec:f1:f0:72:14:1f:b9:41:31:f6:c5:e3:b6:02:2b:
                    57:9c:dd:d9:19:32:58:00:fc:56:4f:97:07:04:4b:
                    24:7c:4a:47:f1:d3:7d:1c:4b:7a:f4:5d:82:22:e6:
                    b1:3b:26:87:37:fb:95:bd:28:2c:d9:9f:ec:2c:38:
                    fe:a9:2d:72:11:18:c4:bc:1a:08:58:93:c5:a4:9e:
                    27:5d:9d:d0:fa:f9:16:ad:5c:66:10:34:90:05:42:
                    e7:00:10:50:b3:78:c0:c3:7a:fc:f2:c7:3d:3a:fa:
                    b6:20:60:f0:a4:ff:ca:79:6a:18:ea:76:28:0c:41:
                    c6:68:33:a6:8b:1f:6c:a8:26:f0:34:4e:59:c4:e3:
                    39:a8:4a:e0:7e:4c:66:82:58:65:26:5a:7d:ac:06:
                    a0:02:eb:f8:ac:49:c9:ac:90:84:9e:08:28:ee:49:
                    ad:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:95:AE:A5:33:51:E6:58:98:57:A6:86:DD:62:13:BE:62:7B:31:C2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7ZWupTNR5liYV6aG3WITvmJ7McI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         ba:64:3b:07:e8:1a:57:8d:f5:58:1e:7e:1a:23:ee:5e:02:e5:
         db:fe:44:e8:01:01:b9:71:d4:7f:59:a0:ec:88:b5:d3:a3:c5:
         b5:00:b8:9d:dc:9f:ec:47:b1:9d:d8:c1:c1:88:9c:28:74:d3:
         27:af:da:6c:1c:8d:c8:3c:62:15:b3:85:47:31:dc:4d:02:b8:
         dd:62:da:ff:4f:84:3c:40:ba:f2:46:52:86:af:5c:d2:de:11:
         e7:fd:07:2c:10:77:d2:dc:bc:b1:4b:56:6a:93:1c:9f:11:0e:
         69:14:b6:5e:7a:5e:98:81:d8:92:01:92:a9:06:a5:0d:cf:ae:
         c5:8e:f4:53:9d:7e:0a:3b:ac:83:be:98:ef:37:77:12:f7:53:
         6a:50:88:cd:f0:8b:c8:85:35:eb:a4:ea:9b:3c:62:87:b2:01:
         c9:98:f3:bd:0d:6b:20:7f:71:37:c2:a1:62:d0:6a:33:54:b9:
         5a:9d:a1:14:b9:5c:c2:0e:5e:61:bb:2c:0e:70:1f:22:8d:de:
         6d:c3:86:78:bf:7f:21:cd:11:19:76:db:e6:df:e2:b9:92:63:
         01:97:47:af:f4:f2:33:8c:eb:74:7c:88:2d:20:34:89:c5:ad:
         ba:2a:3c:20:d2:e3:a1:07:7a:4f:9c:06:8f:3f:a7:e7:77:20:
         da:13:db:4b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzM2MjdaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEVEOTVBRUE1MzM1MUU2
NTg5ODU3QTY4NkRENjIxM0JFNjI3QjMxQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMcbnMddaFWUhMZP7+Wono2nCAFHEp7cnstv2GEX0aNfBc4v/Q
yAmNt8kOiGNyYJLMzph1JS0+UViwN35tiBiZGlxUCG47nOYNvePzQzdjCoKkRL44
dew1buzx8HIUH7lBMfbF47YCK1ec3dkZMlgA/FZPlwcESyR8Skfx030cS3r0XYIi
5rE7Joc3+5W9KCzZn+wsOP6pLXIRGMS8GghYk8WkniddndD6+RatXGYQNJAFQucA
EFCzeMDDevzyxz06+rYgYPCk/8p5ahjqdigMQcZoM6aLH2yoJvA0TlnE4zmoSuB+
TGaCWGUmWn2sBqAC6/isScmskISeCCjuSa0ZAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU7ZWupTNR5liYV6aG3WITvmJ7McIwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS83Wld1cFROUjVsaVlWNmFHM1dJVHZtSjdNY0ku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAawUwDQYJKoZIhvcNAQELBQADggEBALpkOwfoGleN9Vgefhoj
7l4C5dv+ROgBAblx1H9ZoOyItdOjxbUAuJ3cn+xHsZ3YwcGInCh00yev2mwcjcg8
YhWzhUcx3E0CuN1i2v9PhDxAuvJGUoavXNLeEef9BywQd9LcvLFLVmqTHJ8RDmkU
tl56XpiB2JIBkqkGpQ3PrsWO9FOdfgo7rIO+mO83dxL3U2pQiM3wi8iFNeuk6ps8
YoeyAcmY870NayB/cTfCoWLQajNUuVqdoRS5XMIOXmG7LA5wHyKN3m3Dhni/fyHN
ERl22+bf4rmSYwGXR6/08jOM63R8iC0gNInFrboqPCDS46EHek+cBo8/p+d3INoT
20s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org