Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/80GDEu0as7CSP7vys3TLmu2eylc.roa
File:                     80GDEu0as7CSP7vys3TLmu2eylc.roa (raw, json)
Hash identifier:          OEz55r0yWquZLfbRPU/jWUvQ2XRLK7Nr54OJlNG6RX4=
Subject key identifier:   F3:41:83:12:ED:1A:B3:B0:92:3F:BB:F2:B3:74:CB:9A:ED:9E:CA:57
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       73
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/80GDEu0as7CSP7vys3TLmu2eylc.roa
Signing time:             Tue 30 May 2023 16:06:21 +0000
ROA not before:           Tue 30 May 2023 16:06:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F3418312ED1AB3B0923FBBF2B374CB9AED9ECA57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3e:6b:40:5d:67:69:db:28:01:88:58:23:5d:
                    9d:7c:ab:76:62:1c:fd:4b:e9:66:35:f3:9a:a2:1f:
                    d4:0a:c3:63:3e:20:ee:4f:b7:1e:54:04:2b:0e:60:
                    10:56:db:e2:eb:ea:ce:af:f4:28:a3:66:69:80:25:
                    67:09:5b:9a:91:5f:6a:20:9d:db:a5:db:e1:9c:1e:
                    28:ce:30:7a:c0:d7:bd:c9:1e:cb:b2:0b:77:e5:fe:
                    c7:64:f0:73:f5:41:50:a7:c7:25:ca:ed:4c:9d:52:
                    38:85:77:cb:e3:1c:4b:03:4a:3e:f3:42:d2:8b:ba:
                    df:29:83:5a:83:9a:7e:e5:35:06:da:21:03:f5:68:
                    bc:71:a3:d4:ad:bf:43:4f:a9:c1:48:55:37:42:11:
                    2a:a5:0a:4c:b3:29:65:d1:82:4f:b9:88:28:a3:f6:
                    44:06:99:78:68:2a:d7:10:a8:99:60:32:5f:0a:a4:
                    eb:3c:e0:3f:71:4c:d1:1a:96:88:96:d3:a4:90:05:
                    06:8f:c4:ea:f5:cf:f3:ff:2e:b5:3e:0a:ef:6f:d2:
                    d4:03:18:c1:91:b2:27:32:d9:22:07:13:22:29:b3:
                    3c:5a:45:74:1a:d5:57:de:6a:ab:ff:f5:98:b6:82:
                    5c:ee:e6:61:70:82:2f:5f:b1:2b:33:87:ac:9b:e4:
                    7b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:41:83:12:ED:1A:B3:B0:92:3F:BB:F2:B3:74:CB:9A:ED:9E:CA:57
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/80GDEu0as7CSP7vys3TLmu2eylc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8400::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:74:0b:bb:76:4f:e3:f3:3b:7f:3c:dc:e2:ab:5f:e5:7d:aa:
         f8:2c:a4:26:0a:38:6d:11:3b:9f:f0:f9:c2:c7:72:48:3a:9e:
         93:0b:e8:71:a2:7e:ad:9f:62:d4:8f:eb:28:f8:93:6b:da:7e:
         3f:73:63:cd:25:a8:fd:67:17:d5:bf:e2:2f:86:96:e4:63:eb:
         50:f7:85:a6:a7:d5:c3:c9:7e:00:84:ee:6f:af:d8:64:1c:f1:
         4a:60:97:48:cc:7a:90:ec:66:86:11:07:06:c9:5a:09:bd:cb:
         23:a4:27:b3:d5:bd:bf:4a:7e:23:f8:db:fe:12:20:15:9b:73:
         e4:58:d9:3c:e3:d7:2b:ef:95:90:01:b4:02:f7:92:16:6b:86:
         93:cb:79:59:08:36:92:87:18:51:43:7c:b5:96:55:ee:9a:ce:
         72:bc:f0:ab:07:76:03:fd:26:9b:aa:d3:87:c2:69:48:f7:5b:
         8a:25:29:2f:08:44:b6:45:ad:d6:0e:3b:4f:64:fc:9b:56:d8:
         ae:bd:d0:c1:ee:b4:a4:85:db:46:88:b4:75:8f:1d:e7:56:cc:
         9f:d3:bd:ec:1b:f9:00:ad:29:45:f9:5b:84:64:ba:cb:8c:6a:
         4a:f6:16:d8:2e:56:37:94:dc:87:c8:54:66:64:51:ae:eb:fe:
         71:8e:d0:b2
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MTI2
MTczQjhENkIzRkYxMEUzRjAzRkIwNTYwRkU2NTUxREVBMkRCMB4XDTIzMDUzMDE2
MDYyMVoXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoRjM0MTgzMTJFRDFBQjNC
MDkyM0ZCQkYyQjM3NENCOUFFRDlFQ0E1NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM0+a0BdZ2nbKAGIWCNdnXyrdmIc/UvpZjXzmqIf1ArDYz4g7k+3
HlQEKw5gEFbb4uvqzq/0KKNmaYAlZwlbmpFfaiCd26Xb4ZweKM4wesDXvckey7IL
d+X+x2Twc/VBUKfHJcrtTJ1SOIV3y+McSwNKPvNC0ou63ymDWoOafuU1BtohA/Vo
vHGj1K2/Q0+pwUhVN0IRKqUKTLMpZdGCT7mIKKP2RAaZeGgq1xComWAyXwqk6zzg
P3FM0RqWiJbTpJAFBo/E6vXP8/8utT4K72/S1AMYwZGyJzLZIgcTIimzPFpFdBrV
V95qq//1mLaCXO7mYXCCL1+xKzOHrJvke+kCAwEAAaOCAiowggImMB0GA1UdDgQW
BBTzQYMS7RqzsJI/u/KzdMua7Z7KVzAfBgNVHSMEGDAWgBRRJhc7jWs/8Q4/A/sF
YP5lUd6i2zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMjkvVVNZWE80MXJQX0VPUHdQN0JXRC1aVkhlb3RzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVVNZWE80MXJQX0VPUHdQN0JXRC1a
Vkhlb3RzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTI5LzgwR0RFdTBhczdDU1A3dnlzM1RMbXUyZXlsYy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkCgBrhDANBgkqhkiG9w0BAQsFAAOCAQEAkXQLu3ZP4/M7fzzc4qtf
5X2q+CykJgo4bRE7n/D5wsdySDqekwvocaJ+rZ9i1I/rKPiTa9p+P3NjzSWo/WcX
1b/iL4aW5GPrUPeFpqfVw8l+AITub6/YZBzxSmCXSMx6kOxmhhEHBslaCb3LI6Qn
s9W9v0p+I/jb/hIgFZtz5FjZPOPXK++VkAG0AveSFmuGk8t5WQg2kocYUUN8tZZV
7prOcrzwqwd2A/0mm6rTh8JpSPdbiiUpLwhEtkWt1g47T2T8m1bYrr3Qwe60pIXb
Roi0dY8d51bMn9O97Bv5AK0pRflbhGS6y4xqSvYW2C5WN5Tch8hUZmRRruv+cY7Q
sg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org