Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HlY-9OZGB6h1UoEGir4uIqnl7vs.roa
File:                     HlY-9OZGB6h1UoEGir4uIqnl7vs.roa (raw, json)
Hash identifier:          /t2TzIr+gCoAvrW+VFJ+onR3rU0BiAnLc3mYqFJgutA=
Subject key identifier:   1E:56:3E:F4:E6:46:07:A8:75:52:81:06:8A:BE:2E:22:A9:E5:EE:FB
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0225
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HlY-9OZGB6h1UoEGir4uIqnl7vs.roa
Signing time:             Tue 30 May 2023 17:42:21 +0000
ROA not before:           Tue 30 May 2023 17:42:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7500::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=1E563EF4E64607A8755281068ABE2E22A9E5EEFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:43:8d:97:aa:60:1c:3c:35:ba:e0:dd:ae:4a:
                    ce:8a:ff:12:34:30:4e:a9:40:26:d6:3c:84:a1:ff:
                    ea:b2:b0:fe:ff:06:06:de:9b:77:6b:25:d9:13:68:
                    d0:b5:6d:2e:58:4e:a8:0c:f9:84:64:a4:d9:ce:43:
                    6b:c2:cc:38:fa:3f:1a:bf:95:df:bf:31:24:6c:f3:
                    d6:40:27:bf:54:1a:4f:aa:78:d2:31:69:dc:b3:fa:
                    d3:ad:76:e7:9a:09:ff:da:f3:a7:77:71:53:9a:20:
                    30:cf:74:24:63:c1:ce:3c:e2:16:2c:57:b6:88:13:
                    4e:e4:03:ec:fc:d6:b3:41:83:35:52:f8:bf:71:67:
                    13:72:03:de:2d:e6:21:7d:b5:34:ad:94:74:f8:f6:
                    fd:54:df:a7:49:23:1e:25:49:46:f1:47:15:e3:c6:
                    ab:d4:82:78:37:e7:73:85:0f:d1:d6:f9:73:18:91:
                    40:8d:74:b0:5b:68:ed:e2:2b:76:cd:55:9a:b1:95:
                    ef:90:fc:f3:96:b4:8f:cc:06:5f:14:f6:15:05:b2:
                    59:d7:97:13:bd:1e:38:5e:aa:bf:d7:14:8f:f3:a4:
                    29:84:86:e7:7a:22:dd:03:08:c6:b9:49:47:b2:12:
                    0c:1e:9b:c4:dc:f7:f6:28:0b:85:4b:a1:c7:62:6e:
                    7f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:56:3E:F4:E6:46:07:A8:75:52:81:06:8A:BE:2E:22:A9:E5:EE:FB
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HlY-9OZGB6h1UoEGir4uIqnl7vs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7500::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:34:6f:ed:3e:1d:79:44:1f:ae:72:8c:d7:e6:18:d2:57:b1:
         91:39:29:aa:1d:a6:ce:de:ec:d7:84:6a:8a:3e:9a:64:6b:de:
         cd:0b:73:21:20:13:12:d2:b7:90:45:35:8b:0b:7c:af:70:c3:
         0d:55:34:29:5a:00:24:a2:0e:69:34:6e:43:41:fd:22:2d:7b:
         ca:80:46:56:3b:d0:6b:f9:6d:60:d9:aa:ea:3b:0a:7a:82:e0:
         05:05:bf:44:2a:87:36:4f:33:c2:43:75:9f:8a:1e:15:9b:ad:
         05:79:ca:98:e5:f3:ff:e3:3d:9e:c8:ee:26:7a:d8:a1:22:1d:
         f7:f3:e1:bb:c4:62:87:75:ac:a0:72:56:3a:44:12:6b:1a:10:
         2f:e6:18:c4:a9:60:da:17:7d:af:a4:08:c9:1f:c1:47:ba:8f:
         d1:46:b3:a0:4e:f5:a1:74:81:c4:83:44:f0:08:51:75:cc:a4:
         a7:19:7f:5e:d0:f4:97:6d:b5:9f:0a:01:1c:0d:5e:49:f2:85:
         bb:7c:ca:1f:f2:38:51:17:88:6d:a9:d0:4d:85:b6:01:57:bd:
         ae:0f:53:07:b2:2b:c6:3c:88:f3:3e:eb:d4:22:5b:91:58:fc:
         c7:a1:fa:57:2f:70:35:2e:9a:11:5f:76:46:d0:c0:25:d2:4f:
         f1:3c:bd:8c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzQyMjFaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDFFNTYzRUY0RTY0NjA3
QTg3NTUyODEwNjhBQkUyRTIyQTlFNUVFRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD1Q42XqmAcPDW64N2uSs6K/xI0ME6pQCbWPISh/+qysP7/Bgbe
m3drJdkTaNC1bS5YTqgM+YRkpNnOQ2vCzDj6Pxq/ld+/MSRs89ZAJ79UGk+qeNIx
adyz+tOtdueaCf/a86d3cVOaIDDPdCRjwc484hYsV7aIE07kA+z81rNBgzVS+L9x
ZxNyA94t5iF9tTStlHT49v1U36dJIx4lSUbxRxXjxqvUgng353OFD9HW+XMYkUCN
dLBbaO3iK3bNVZqxle+Q/POWtI/MBl8U9hUFslnXlxO9Hjheqr/XFI/zpCmEhud6
It0DCMa5SUeyEgwem8Tc9/YoC4VLocdibn8DAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUHlY+9OZGB6h1UoEGir4uIqnl7vswHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9IbFktOU9aR0I2aDFVb0VHaXI0dUlxbmw3dnMu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa3UwDQYJKoZIhvcNAQELBQADggEBAH00b+0+HXlEH65yjNfm
GNJXsZE5Kaodps7e7NeEaoo+mmRr3s0LcyEgExLSt5BFNYsLfK9www1VNClaACSi
Dmk0bkNB/SIte8qARlY70Gv5bWDZquo7CnqC4AUFv0QqhzZPM8JDdZ+KHhWbrQV5
ypjl8//jPZ7I7iZ62KEiHffz4bvEYod1rKByVjpEEmsaEC/mGMSpYNoXfa+kCMkf
wUe6j9FGs6BO9aF0gcSDRPAIUXXMpKcZf17Q9JdttZ8KARwNXknyhbt8yh/yOFEX
iG2p0E2FtgFXva4PUweyK8Y8iPM+69QiW5FY/Meh+lcvcDUumhFfdkbQwCXST/E8
vYw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org