Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9K9zsK6pxpefC9KedgCHLgW1oOc.roa
File:                     9K9zsK6pxpefC9KedgCHLgW1oOc.roa (raw, json)
Hash identifier:          0b6sDQGPH18ZeQ7skcHx+Hoy/X5Bcf2BGGDEinzaKsg=
Subject key identifier:   F4:AF:73:B0:AE:A9:C6:97:9F:0B:D2:9E:76:00:87:2E:05:B5:A0:E7
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       38
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9K9zsK6pxpefC9KedgCHLgW1oOc.roa
Signing time:             Tue 30 May 2023 16:02:12 +0000
ROA not before:           Tue 30 May 2023 16:02:12 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ec00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:02:12 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F4AF73B0AEA9C6979F0BD29E7600872E05B5A0E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e8:24:0f:e3:bc:e4:8d:6b:95:3e:76:45:22:
                    f5:69:df:de:a8:15:d7:3c:a6:8a:0c:72:a7:5a:42:
                    ef:1f:c2:8a:27:39:1f:c4:71:c1:5f:09:c0:7b:12:
                    68:82:13:78:35:9d:7e:98:75:f2:af:f4:cf:96:11:
                    8b:bc:e6:55:bd:47:65:6c:52:ce:57:66:d6:42:e9:
                    20:ef:8a:17:d0:48:b0:19:cb:32:5f:e9:f3:66:a6:
                    fa:c4:e0:55:cf:88:9b:81:8d:fd:60:de:55:d7:cc:
                    b0:fa:a4:c3:53:84:d8:58:36:99:e6:7c:65:4a:ea:
                    88:90:ed:12:7c:fc:3a:93:56:4b:5d:ce:d4:f0:0c:
                    62:bf:40:4a:db:32:ea:d0:80:53:8e:be:3e:5e:84:
                    66:e1:67:c2:99:2f:46:98:10:74:99:ce:0b:4f:ca:
                    07:17:1b:bd:5b:63:34:fc:98:53:cc:ea:00:4c:ba:
                    65:24:d6:89:40:82:82:66:b4:29:ef:03:0d:40:c7:
                    fd:bd:fc:55:ee:2a:2d:f7:3d:22:22:26:28:98:b9:
                    24:87:ac:09:6a:b4:03:05:e3:27:08:29:21:f1:79:
                    fa:93:ee:2f:26:b4:24:8e:cc:2e:e1:ff:cf:40:81:
                    ef:12:eb:06:88:31:0b:ee:79:b7:c9:30:9c:b2:12:
                    93:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AF:73:B0:AE:A9:C6:97:9F:0B:D2:9E:76:00:87:2E:05:B5:A0:E7
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9K9zsK6pxpefC9KedgCHLgW1oOc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ec00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a6:93:1b:7f:10:17:6d:cf:5e:ff:b5:22:bc:48:87:4b:ae:15:
         95:dc:ac:48:10:53:ff:6a:5b:56:9e:b8:5c:b3:95:11:73:4b:
         99:8f:36:6f:e0:3e:94:56:e7:da:d5:65:7c:2e:5f:e5:e9:44:
         a9:94:d9:e9:96:c0:3f:77:b6:d7:8a:63:f0:12:d1:ba:ea:c0:
         cc:73:46:9e:d8:ce:96:23:6f:0b:54:cf:4f:46:cf:5f:7d:c0:
         19:d6:cb:ea:38:4c:72:04:40:90:bf:df:ae:1c:f5:cb:24:ba:
         b6:fe:7a:58:6c:7c:6a:a2:a5:f5:a6:7b:45:34:31:d8:f9:46:
         6f:fd:54:94:db:55:c0:0e:89:cd:83:08:e9:74:7e:93:3c:c1:
         dc:3a:c6:96:51:ac:ab:cd:40:ca:c6:07:28:13:89:31:be:4c:
         d5:5d:b1:8c:75:70:44:95:80:2e:26:f1:35:ef:f3:53:9c:a0:
         bd:05:44:25:8e:3f:41:35:a7:54:4d:b5:02:17:28:d8:59:14:
         c7:8a:2d:08:aa:da:47:4b:e6:ba:d4:57:d6:d5:42:f6:37:e7:
         ea:30:8a:78:c1:4c:eb:78:45:b0:5f:a8:61:e7:82:7a:fc:fc:
         a2:29:dd:fd:f2:4c:f1:6e:b1:f9:15:d8:ef:aa:9f:f4:e6:6a:
         b8:0c:cf:f9
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MTI2
MTczQjhENkIzRkYxMEUzRjAzRkIwNTYwRkU2NTUxREVBMkRCMB4XDTIzMDUzMDE2
MDIxMloXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoRjRBRjczQjBBRUE5QzY5
NzlGMEJEMjlFNzYwMDg3MkUwNUI1QTBFNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKDoJA/jvOSNa5U+dkUi9Wnf3qgV1zymigxyp1pC7x/Ciic5H8Rx
wV8JwHsSaIITeDWdfph18q/0z5YRi7zmVb1HZWxSzldm1kLpIO+KF9BIsBnLMl/p
82am+sTgVc+Im4GN/WDeVdfMsPqkw1OE2Fg2meZ8ZUrqiJDtEnz8OpNWS13O1PAM
Yr9AStsy6tCAU46+Pl6EZuFnwpkvRpgQdJnOC0/KBxcbvVtjNPyYU8zqAEy6ZSTW
iUCCgma0Ke8DDUDH/b38Ve4qLfc9IiImKJi5JIesCWq0AwXjJwgpIfF5+pPuLya0
JI7MLuH/z0CB7xLrBogxC+55t8kwnLISkz8CAwEAAaOCAiowggImMB0GA1UdDgQW
BBT0r3OwrqnGl58L0p52AIcuBbWg5zAfBgNVHSMEGDAWgBRRJhc7jWs/8Q4/A/sF
YP5lUd6i2zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMjkvVVNZWE80MXJQX0VPUHdQN0JXRC1aVkhlb3RzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVVNZWE80MXJQX0VPUHdQN0JXRC1a
Vkhlb3RzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTI5LzlLOXpzSzZweHBlZkM5S2VkZ0NITGdXMW9PYy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkCgBr7DANBgkqhkiG9w0BAQsFAAOCAQEAppMbfxAXbc9e/7UivEiH
S64VldysSBBT/2pbVp64XLOVEXNLmY82b+A+lFbn2tVlfC5f5elEqZTZ6ZbAP3e2
14pj8BLRuurAzHNGntjOliNvC1TPT0bPX33AGdbL6jhMcgRAkL/frhz1yyS6tv56
WGx8aqKl9aZ7RTQx2PlGb/1UlNtVwA6JzYMI6XR+kzzB3DrGllGsq81AysYHKBOJ
Mb5M1V2xjHVwRJWALibxNe/zU5ygvQVEJY4/QTWnVE21Ahco2FkUx4otCKraR0vm
utRX1tVC9jfn6jCKeMFM63hFsF+oYeeCevz8oind/fJM8W6x+RXY76qf9OZquAzP
+Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org