Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Gordjhn8kKYyxiepSpamUaKxbi4.roa
File:                     Gordjhn8kKYyxiepSpamUaKxbi4.roa (raw, json)
Hash identifier:          nfDG2sVZj3hkaSjtKEti+Y14rqQIurgX+f2AEVnQia8=
Subject key identifier:   1A:8A:DD:8E:19:FC:90:A6:32:C6:27:A9:4A:96:A6:51:A2:B1:6E:2E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0105
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Gordjhn8kKYyxiepSpamUaKxbi4.roa
Signing time:             Tue 30 May 2023 16:12:33 +0000
ROA not before:           Tue 30 May 2023 16:12:33 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5300::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:33 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=1A8ADD8E19FC90A632C627A94A96A651A2B16E2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5d:c5:cb:c9:0d:b8:66:53:e5:a6:3c:c4:93:
                    40:10:09:7f:30:bc:d3:ca:dc:1a:b4:e3:66:25:13:
                    b4:45:47:ef:ca:d1:02:30:37:2c:45:df:94:e3:f4:
                    70:08:59:d7:28:33:33:79:c5:c4:cf:5c:ff:10:0e:
                    39:ac:a1:27:f6:9e:fd:c6:98:37:92:88:26:83:58:
                    9f:66:a6:1b:47:17:8f:34:c6:a4:50:18:f2:fb:31:
                    1c:c4:31:bc:06:d2:bd:34:a0:45:8e:55:e2:f4:56:
                    a3:71:58:57:d6:cb:1f:e2:dc:de:06:09:dc:f1:9b:
                    79:1e:d9:ce:d4:0f:05:8b:8f:1e:29:f9:b6:70:fa:
                    59:c8:70:d7:31:f5:79:7b:13:ea:86:34:12:9f:49:
                    3d:28:ed:b4:55:e0:0d:04:c2:86:da:b1:6c:6c:04:
                    c8:4c:59:a9:4e:6f:21:ca:b5:15:df:aa:47:55:d2:
                    67:a1:78:ee:c0:53:bb:6d:48:18:b0:0d:74:6f:33:
                    46:f3:5b:13:92:cf:ba:51:3b:8f:73:e0:28:45:45:
                    32:be:76:4a:11:44:09:bc:6e:fb:1f:cf:ee:10:68:
                    71:4e:d8:1e:9f:7d:b4:83:16:9b:35:f1:c2:46:f3:
                    5f:a3:68:b1:5a:3a:8c:ca:dd:2d:0e:9f:fb:b3:cb:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8A:DD:8E:19:FC:90:A6:32:C6:27:A9:4A:96:A6:51:A2:B1:6E:2E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Gordjhn8kKYyxiepSpamUaKxbi4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5300::/40

    Signature Algorithm: sha256WithRSAEncryption
         b8:54:21:4f:75:5a:67:c6:fa:72:1c:80:2c:8e:5d:bf:69:4f:
         fe:e2:2d:dc:4d:18:8a:e9:a1:7d:6d:62:70:83:7e:35:63:cb:
         e3:c8:5f:57:6b:c1:72:c0:05:78:5c:d3:b1:ce:0a:a8:ab:26:
         5c:56:e0:b7:9c:da:be:42:3b:be:13:fe:c1:5c:03:42:e4:c2:
         13:4b:5f:85:87:01:d9:8b:b1:9d:f8:48:45:f0:43:5a:65:33:
         01:90:82:3e:92:b0:79:18:08:fc:3d:dd:0b:74:58:73:92:b1:
         bb:78:71:8b:84:f4:2b:67:4e:8f:45:82:f0:f3:24:bd:90:30:
         57:88:f3:b6:a0:0a:d0:86:44:c0:4a:c2:b9:e3:d1:4a:a2:c5:
         a0:98:cd:1c:70:f2:6a:3e:04:33:97:58:79:c4:f7:c3:0b:a1:
         fd:5b:3b:28:b2:86:59:1d:21:74:4e:c4:ee:c4:fb:c3:b1:6c:
         dc:4f:db:ad:10:14:e0:05:bf:06:e0:25:49:4d:24:8a:ed:9d:
         eb:17:0e:e0:68:6a:bf:05:13:dc:03:39:3c:f3:50:f3:21:a0:
         b5:37:88:e7:0d:ec:a1:6e:c0:88:69:33:1c:e5:63:b0:c5:3b:
         89:71:8e:98:54:de:71:e8:0f:8c:ef:23:f2:6d:9b:75:04:de:
         48:4b:f0:f7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NjEyMzNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDFBOEFERDhFMTlGQzkw
QTYzMkM2MjdBOTRBOTZBNjUxQTJCMTZFMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLXcXLyQ24ZlPlpjzEk0AQCX8wvNPK3Bq042YlE7RFR+/K0QIw
NyxF35Tj9HAIWdcoMzN5xcTPXP8QDjmsoSf2nv3GmDeSiCaDWJ9mphtHF480xqRQ
GPL7MRzEMbwG0r00oEWOVeL0VqNxWFfWyx/i3N4GCdzxm3ke2c7UDwWLjx4p+bZw
+lnIcNcx9Xl7E+qGNBKfST0o7bRV4A0EwobasWxsBMhMWalObyHKtRXfqkdV0meh
eO7AU7ttSBiwDXRvM0bzWxOSz7pRO49z4ChFRTK+dkoRRAm8bvsfz+4QaHFO2B6f
fbSDFps18cJG81+jaLFaOozK3S0On/uzy64BAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUGordjhn8kKYyxiepSpamUaKxbi4wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9Hb3JkamhuOGtLWXl4aWVwU3BhbVVhS3hiaTQu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa1MwDQYJKoZIhvcNAQELBQADggEBALhUIU91WmfG+nIcgCyO
Xb9pT/7iLdxNGIrpoX1tYnCDfjVjy+PIX1drwXLABXhc07HOCqirJlxW4Lec2r5C
O74T/sFcA0LkwhNLX4WHAdmLsZ34SEXwQ1plMwGQgj6SsHkYCPw93Qt0WHOSsbt4
cYuE9CtnTo9FgvDzJL2QMFeI87agCtCGRMBKwrnj0UqixaCYzRxw8mo+BDOXWHnE
98MLof1bOyiyhlkdIXROxO7E+8OxbNxP260QFOAFvwbgJUlNJIrtnesXDuBoar8F
E9wDOTzzUPMhoLU3iOcN7KFuwIhpMxzlY7DFO4lxjphU3nHoD4zvI/Jtm3UE3khL
8Pc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org