Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/96qs9FJvTkviJ6d92XgGq8QtFpc.roa
File:                     96qs9FJvTkviJ6d92XgGq8QtFpc.roa (raw, json)
Hash identifier:          Fb5WN+LFTpvFVqwU+a+HuoD0b86rEDDZdxAo7nh3XJE=
Subject key identifier:   F7:AA:AC:F4:52:6F:4E:4B:E2:27:A7:7D:D9:78:06:AB:C4:2D:16:97
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       AE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/96qs9FJvTkviJ6d92XgGq8QtFpc.roa
Signing time:             Tue 30 May 2023 16:08:23 +0000
ROA not before:           Tue 30 May 2023 16:08:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9f00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F7AAACF4526F4E4BE227A77DD97806ABC42D1697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:12:32:e8:30:ac:f2:7d:c3:4c:06:66:ac:63:
                    58:04:61:b2:9d:b2:35:c5:64:8f:3a:53:be:0f:ea:
                    aa:be:ef:e6:54:1d:c7:ec:07:c3:57:8d:16:9d:2c:
                    b9:6a:25:80:54:43:16:d7:b9:59:2c:7f:90:cc:99:
                    68:9f:84:e6:95:96:84:39:b4:df:cc:8e:80:4d:65:
                    54:05:0e:17:1b:8e:00:12:9c:c1:3c:ee:1a:d6:62:
                    32:14:54:66:5d:18:14:82:a9:40:5d:82:d4:d0:ac:
                    d8:7c:53:d8:76:69:51:0a:08:a4:c1:bf:ae:3b:3c:
                    58:49:44:1b:57:42:e3:00:f4:ad:6c:60:ab:ac:39:
                    d1:68:d2:40:84:a1:28:4d:4b:4a:24:3b:12:83:9f:
                    62:2e:13:a2:2a:70:77:aa:f3:e4:21:02:60:5c:66:
                    bd:8e:53:48:63:f8:76:ad:fb:14:91:2e:89:ef:4e:
                    08:8c:fa:80:e1:00:7e:10:00:f6:4a:6a:df:14:32:
                    b9:a3:1b:30:cc:2a:8c:09:04:3e:e6:1a:6b:13:19:
                    59:6b:25:46:84:55:25:44:0f:ee:44:20:2a:ff:f6:
                    2b:e8:ef:1d:d8:2d:0f:9f:39:2d:7b:c0:61:1d:5c:
                    4d:97:77:04:a9:10:49:95:a8:99:8e:4d:4c:98:43:
                    37:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AA:AC:F4:52:6F:4E:4B:E2:27:A7:7D:D9:78:06:AB:C4:2D:16:97
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/96qs9FJvTkviJ6d92XgGq8QtFpc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:44:0b:b6:3a:29:db:65:cc:1d:d0:2e:cf:4a:2d:bf:57:16:
         1f:5f:d4:59:d4:d7:fd:91:6c:90:55:27:d2:de:b7:f5:6f:fa:
         38:ec:e0:f1:c3:d8:6d:66:48:a1:b0:2d:8c:66:08:49:cf:04:
         60:6a:fa:af:2c:09:30:c4:0d:88:fc:71:21:f2:51:6e:1a:5d:
         0a:65:ca:27:57:51:0c:88:ba:9d:fc:7a:5d:b5:ab:0b:00:15:
         23:4e:f3:4b:42:c4:a9:7f:09:6b:57:fd:8d:d6:39:36:3d:7e:
         14:59:d3:d3:de:cf:a8:64:da:d4:10:d4:18:f8:3b:1c:2d:66:
         b0:f7:03:6c:bf:25:43:01:ad:e6:c8:ef:51:5e:6e:46:c8:07:
         e9:53:79:76:1d:d5:97:64:ec:11:5e:f3:11:ba:ea:b2:67:ff:
         ee:fd:97:69:1a:1a:f4:5c:55:c7:82:66:bd:be:f3:ad:a5:36:
         82:0b:50:15:1c:da:59:76:47:10:fb:d6:59:7c:fe:4a:39:40:
         ac:cc:c5:b5:70:df:7c:f0:85:3f:46:39:8e:2f:7e:64:80:81:
         13:01:fb:59:18:7d:c8:83:00:69:d7:34:f2:57:41:2e:71:b2:
         a8:7c:2f:3f:88:b4:d6:47:99:b4:dd:e8:d3:60:67:53:1e:bc:
         5f:b7:79:b4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NjA4MjNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEY3QUFBQ0Y0NTI2RjRF
NEJFMjI3QTc3REQ5NzgwNkFCQzQyRDE2OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNEjLoMKzyfcNMBmasY1gEYbKdsjXFZI86U74P6qq+7+ZUHcfs
B8NXjRadLLlqJYBUQxbXuVksf5DMmWifhOaVloQ5tN/MjoBNZVQFDhcbjgASnME8
7hrWYjIUVGZdGBSCqUBdgtTQrNh8U9h2aVEKCKTBv647PFhJRBtXQuMA9K1sYKus
OdFo0kCEoShNS0okOxKDn2IuE6IqcHeq8+QhAmBcZr2OU0hj+Hat+xSRLonvTgiM
+oDhAH4QAPZKat8UMrmjGzDMKowJBD7mGmsTGVlrJUaEVSVED+5EICr/9ivo7x3Y
LQ+fOS17wGEdXE2XdwSpEEmVqJmOTUyYQzejAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU96qs9FJvTkviJ6d92XgGq8QtFpcwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS85NnFzOUZKdlRrdmlKNmQ5MlhnR3E4UXRGcGMu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa58wDQYJKoZIhvcNAQELBQADggEBADlEC7Y6KdtlzB3QLs9K
Lb9XFh9f1FnU1/2RbJBVJ9Let/Vv+jjs4PHD2G1mSKGwLYxmCEnPBGBq+q8sCTDE
DYj8cSHyUW4aXQplyidXUQyIup38el21qwsAFSNO80tCxKl/CWtX/Y3WOTY9fhRZ
09Pez6hk2tQQ1Bj4OxwtZrD3A2y/JUMBrebI71FebkbIB+lTeXYd1Zdk7BFe8xG6
6rJn/+79l2kaGvRcVceCZr2+862lNoILUBUc2ll2RxD71ll8/ko5QKzMxbVw33zw
hT9GOY4vfmSAgRMB+1kYfciDAGnXNPJXQS5xsqh8Lz+ItNZHmbTd6NNgZ1MevF+3
ebQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org