Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AgT5HVkP76ahTkizwgAGoI4MIcw.roa
File:                     AgT5HVkP76ahTkizwgAGoI4MIcw.roa (raw, json)
Hash identifier:          XCUMEs69n/0oSsLcD2tYULR9inRfizIdLT1mhwOEkg8=
Subject key identifier:   02:04:F9:1D:59:0F:EF:A6:A1:4E:48:B3:C2:00:06:A0:8E:0C:21:CC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0246
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AgT5HVkP76ahTkizwgAGoI4MIcw.roa
Signing time:             Thu 01 Jun 2023 16:30:55 +0000
ROA not before:           Thu 01 Jun 2023 16:30:55 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:2c00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 582 (0x246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun  1 16:30:55 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=0204F91D590FEFA6A14E48B3C20006A08E0C21CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b1:9a:03:b5:55:59:7f:28:fd:18:6f:8c:28:
                    03:2f:42:27:ab:e1:fb:d0:6a:2f:c7:64:b3:36:c0:
                    af:a2:68:99:56:7b:45:52:4e:a1:91:f6:f3:12:f0:
                    0e:23:24:88:7a:96:42:23:c0:46:bd:23:e4:a0:ad:
                    98:f0:c4:b0:85:97:87:6d:2f:0b:cb:b0:04:7f:ef:
                    11:73:5f:de:0a:3a:8e:a1:32:ee:d2:4d:07:ee:52:
                    9b:e4:e1:8f:39:6b:fd:85:01:eb:e1:80:a2:52:f7:
                    52:ca:5b:3a:13:b5:8f:90:46:71:e9:45:9c:65:89:
                    25:a0:7c:f1:e4:6f:71:b7:da:b1:a1:34:82:4e:e5:
                    31:a8:a4:f8:d5:37:8b:2e:ea:58:05:8f:c6:66:9c:
                    c5:8c:f1:65:a3:b5:63:0e:8d:ca:15:c3:d2:82:d7:
                    69:a9:d6:5e:50:0e:01:f3:ef:31:4b:2b:e8:dc:a4:
                    ab:35:c3:d8:4b:3e:db:e9:81:3e:25:f7:16:e6:06:
                    f0:56:91:72:9a:38:96:b2:11:4e:59:61:32:2e:cc:
                    b3:5b:2d:ae:27:29:fb:42:28:e1:ed:0e:12:fe:44:
                    02:1a:b4:fa:4f:9a:6d:79:a2:a1:2b:55:9c:6b:ba:
                    22:49:36:f7:25:0b:02:29:b5:2d:f8:c9:bb:76:35:
                    82:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:04:F9:1D:59:0F:EF:A6:A1:4E:48:B3:C2:00:06:A0:8E:0C:21:CC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AgT5HVkP76ahTkizwgAGoI4MIcw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:2c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:5f:a4:0b:27:61:76:86:b9:35:5c:d0:24:f5:67:bd:29:d5:
         11:d3:6c:b7:c5:be:f9:87:b6:5f:93:25:25:11:70:f0:5c:8c:
         1b:87:6d:e0:c7:b3:1f:19:db:70:25:f6:7b:90:d7:ec:33:a2:
         70:67:b8:89:4e:b1:7b:09:a4:42:0a:cb:1e:09:35:23:43:cc:
         cc:30:22:5f:83:01:20:06:d5:07:96:68:ec:85:85:6d:05:5e:
         42:ee:57:77:65:6b:f8:b2:b5:b6:b2:76:12:aa:f0:6a:cb:80:
         41:32:1b:f0:af:3a:b6:bc:a9:0b:56:60:0a:14:dc:d4:1e:65:
         1d:fd:ce:89:bd:4b:d0:46:94:6c:82:51:ca:f1:33:99:02:e6:
         aa:47:3b:d5:08:4a:cc:3a:5b:7b:8e:5c:26:cb:f1:ce:fa:51:
         9a:f0:7a:f8:3b:02:1b:2f:b4:98:db:50:4e:45:88:81:bf:82:
         db:ca:ca:6d:ed:5f:dc:8b:34:d5:28:32:fb:3a:9b:d5:f0:0d:
         8d:35:46:f7:cd:50:c9:20:5f:03:62:5d:e7:97:55:d3:93:ed:
         36:7b:dc:e2:5f:21:14:58:e4:67:c2:78:87:f8:8c:b0:6a:d8:
         19:23:00:00:6c:97:b9:43:fd:f2:62:34:a4:2a:7a:dc:c7:a7:
         65:1b:db:84
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA2MDEx
NjMwNTVaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDAyMDRGOTFENTkwRkVG
QTZBMTRFNDhCM0MyMDAwNkEwOEUwQzIxQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCWsZoDtVVZfyj9GG+MKAMvQier4fvQai/HZLM2wK+iaJlWe0VS
TqGR9vMS8A4jJIh6lkIjwEa9I+SgrZjwxLCFl4dtLwvLsAR/7xFzX94KOo6hMu7S
TQfuUpvk4Y85a/2FAevhgKJS91LKWzoTtY+QRnHpRZxliSWgfPHkb3G32rGhNIJO
5TGopPjVN4su6lgFj8ZmnMWM8WWjtWMOjcoVw9KC12mp1l5QDgHz7zFLK+jcpKs1
w9hLPtvpgT4l9xbmBvBWkXKaOJayEU5ZYTIuzLNbLa4nKftCKOHtDhL+RAIatPpP
mm15oqErVZxruiJJNvclCwIptS34ybt2NYKJAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUAgT5HVkP76ahTkizwgAGoI4MIcwwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9BZ1Q1SFZrUDc2YWhUa2l6d2dBR29JNE1JY3cu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAYSwwDQYJKoZIhvcNAQELBQADggEBAEVfpAsnYXaGuTVc0CT1
Z70p1RHTbLfFvvmHtl+TJSURcPBcjBuHbeDHsx8Z23Al9nuQ1+wzonBnuIlOsXsJ
pEIKyx4JNSNDzMwwIl+DASAG1QeWaOyFhW0FXkLuV3dla/iytbaydhKq8GrLgEEy
G/CvOra8qQtWYAoU3NQeZR39zom9S9BGlGyCUcrxM5kC5qpHO9UISsw6W3uOXCbL
8c76UZrwevg7AhsvtJjbUE5FiIG/gtvKym3tX9yLNNUoMvs6m9XwDY01RvfNUMkg
XwNiXeeXVdOT7TZ73OJfIRRY5GfCeIf4jLBq2BkjAABsl7lD/fJiNKQqetzHp2Ub
24Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org