Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8baymaoWpwOpFzlKIiaXXduH1z0.roa
File:                     8baymaoWpwOpFzlKIiaXXduH1z0.roa (raw, json)
Hash identifier:          n7L1XmEfjAqOtwTO54kGhtWmIJGS3kFIYXVAyezLHgY=
Subject key identifier:   F1:B6:B2:99:AA:16:A7:03:A9:17:39:4A:22:26:97:5D:DB:87:D7:3D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0235
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8baymaoWpwOpFzlKIiaXXduH1z0.roa
Signing time:             Tue 30 May 2023 17:42:26 +0000
ROA not before:           Tue 30 May 2023 17:42:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8e00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F1B6B299AA16A703A917394A2226975DDB87D73D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:89:b2:c2:7f:3e:ca:d0:eb:9d:dc:c1:51:8e:
                    fb:43:c0:e0:3f:be:aa:fc:93:e6:7f:f2:81:c1:7d:
                    fa:01:85:d1:72:28:04:f0:01:41:b7:71:bf:e8:49:
                    f4:ff:22:9c:6b:bb:d5:08:ea:18:28:04:26:1d:98:
                    09:72:a2:4a:bc:5a:ff:d0:31:7b:2c:7c:27:97:9c:
                    02:c7:c2:69:0c:c6:db:19:e2:5c:4f:f8:d7:a0:f8:
                    3d:10:e3:20:2d:c8:7d:70:0c:2a:a2:5e:c0:21:81:
                    cc:4c:97:9a:f7:09:3f:8a:c0:4b:c4:3c:f9:48:09:
                    f9:90:18:89:d7:ac:ce:6d:08:e9:86:d3:91:7c:7d:
                    76:a2:2d:2f:ef:2f:6e:21:11:f1:26:e8:b6:69:32:
                    ce:8e:4e:a5:d9:06:d7:f9:8e:ab:aa:4b:0d:59:2b:
                    a1:a6:75:02:d8:d6:07:31:28:09:3f:4a:14:43:9a:
                    f5:5a:d5:ea:bc:12:7e:14:8f:52:cb:8b:50:37:fd:
                    70:a0:fe:1a:9c:0f:ad:65:b6:ba:5a:31:16:f2:8e:
                    50:9e:71:db:1b:aa:60:e0:62:14:be:33:6d:ce:29:
                    6b:ff:b8:0a:19:7c:d1:12:16:d5:e3:5f:02:55:31:
                    ff:43:e9:f5:d1:bf:cc:5a:c4:e8:92:d1:ec:62:26:
                    29:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B6:B2:99:AA:16:A7:03:A9:17:39:4A:22:26:97:5D:DB:87:D7:3D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8baymaoWpwOpFzlKIiaXXduH1z0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b8:85:fc:5d:6a:46:a1:92:38:71:bc:5c:74:45:75:25:ab:0b:
         ad:23:9f:21:78:43:d7:e2:b3:e1:cd:02:dc:4b:a8:27:52:ed:
         55:09:9c:fa:37:52:d3:35:92:ee:ca:0d:8f:d5:cb:31:c9:bb:
         25:c6:29:80:32:8e:0d:04:79:c3:6c:bb:45:15:99:ac:1e:58:
         d6:87:a5:60:1c:52:a5:78:34:6b:c0:8f:22:46:75:33:a1:50:
         60:62:5c:71:a1:0e:3c:0a:d7:1f:1c:d0:da:8c:e7:12:dc:74:
         5f:73:3a:cd:be:8e:85:41:db:cd:ce:1c:1b:15:c4:0f:18:22:
         7c:a2:1e:63:d5:d0:b4:72:84:24:f1:9a:91:c6:0b:f3:dc:8e:
         95:68:8f:0f:f6:82:f1:1a:77:18:69:f1:9b:92:e1:d0:54:5f:
         77:50:6d:5d:36:68:65:f7:0e:84:26:c3:f3:d3:f8:8c:80:14:
         e8:22:9f:c9:bd:50:dc:74:25:9e:e5:79:4e:b3:d3:8b:31:1b:
         35:cf:a0:c8:fc:8e:05:60:ad:21:68:12:33:f5:41:66:53:fa:
         0e:2c:ba:74:2c:7e:f6:86:38:60:e8:5d:ec:f0:f2:ed:20:35:
         31:af:d0:18:b8:56:ba:c8:5d:c8:42:8c:a7:b0:36:7e:d5:46:
         ed:1d:b6:ee
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzQyMjZaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEYxQjZCMjk5QUExNkE3
MDNBOTE3Mzk0QTIyMjY5NzVEREI4N0Q3M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVibLCfz7K0Oud3MFRjvtDwOA/vqr8k+Z/8oHBffoBhdFyKATw
AUG3cb/oSfT/Ipxru9UI6hgoBCYdmAlyokq8Wv/QMXssfCeXnALHwmkMxtsZ4lxP
+Neg+D0Q4yAtyH1wDCqiXsAhgcxMl5r3CT+KwEvEPPlICfmQGInXrM5tCOmG05F8
fXaiLS/vL24hEfEm6LZpMs6OTqXZBtf5jquqSw1ZK6GmdQLY1gcxKAk/ShRDmvVa
1eq8En4Uj1LLi1A3/XCg/hqcD61ltrpaMRbyjlCecdsbqmDgYhS+M23OKWv/uAoZ
fNESFtXjXwJVMf9D6fXRv8xaxOiS0exiJinzAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU8baymaoWpwOpFzlKIiaXXduH1z0wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS84YmF5bWFvV3B3T3BGemxLSWlhWFhkdUgxejAu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa44wDQYJKoZIhvcNAQELBQADggEBALiF/F1qRqGSOHG8XHRF
dSWrC60jnyF4Q9fis+HNAtxLqCdS7VUJnPo3UtM1ku7KDY/VyzHJuyXGKYAyjg0E
ecNsu0UVmaweWNaHpWAcUqV4NGvAjyJGdTOhUGBiXHGhDjwK1x8c0NqM5xLcdF9z
Os2+joVB283OHBsVxA8YInyiHmPV0LRyhCTxmpHGC/PcjpVojw/2gvEadxhp8ZuS
4dBUX3dQbV02aGX3DoQmw/PT+IyAFOgin8m9UNx0JZ7leU6z04sxGzXPoMj8jgVg
rSFoEjP1QWZT+g4sunQsfvaGOGDoXezw8u0gNTGv0Bi4VrrIXchCjKewNn7VRu0d
tu4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org