Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/J-1U7sJz09Fz2g14TQ_pht8c8nA.roa
File:                     J-1U7sJz09Fz2g14TQ_pht8c8nA.roa (raw, json)
Hash identifier:          hqPVrGaM5fGbUR23o4fU/3vQCZGcgnDJbTxC0hKt4Zg=
Subject key identifier:   27:ED:54:EE:C2:73:D3:D1:73:DA:0D:78:4D:0F:E9:86:DF:1C:F2:70
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01CA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/J-1U7sJz09Fz2g14TQ_pht8c8nA.roa
Signing time:             Tue 30 May 2023 17:38:22 +0000
ROA not before:           Tue 30 May 2023 17:38:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:2:d90::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=27ED54EEC273D3D173DA0D784D0FE986DF1CF270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:29:c8:ed:cb:25:57:d3:5b:89:35:6e:5a:
                    10:8b:de:ce:bc:07:ba:a1:6d:52:3d:63:08:93:48:
                    8a:3c:85:6a:bf:1f:7d:3b:3f:ea:12:a7:43:ab:1f:
                    85:56:e0:ae:97:ff:07:24:cc:57:55:28:c5:71:e2:
                    cf:17:e4:d9:7d:20:ac:ba:81:b3:73:7f:47:b9:89:
                    c7:5f:70:74:21:56:fc:05:40:ec:3e:61:35:93:e4:
                    93:20:73:4d:d2:e1:29:3a:70:ca:4f:ba:fe:ad:fc:
                    1c:f3:43:c4:ce:98:af:8a:ff:96:0f:c1:a5:96:7e:
                    0b:9c:27:6e:77:24:a3:e6:90:6f:55:1c:91:19:ee:
                    48:7e:dc:b3:d4:b7:2c:0f:85:85:20:b0:0a:83:ab:
                    c1:fc:18:55:99:77:5e:9e:81:73:d2:f7:2e:ab:a4:
                    30:e3:ad:58:b0:f1:d5:11:66:e5:e9:78:4a:a8:d1:
                    fe:92:02:89:eb:5d:5a:91:48:fd:d7:98:11:45:99:
                    fe:6d:b1:06:75:2f:4d:88:10:df:74:01:fb:a7:c1:
                    7d:81:b6:ba:36:93:29:82:a2:28:94:23:9f:fe:cd:
                    d3:f6:38:ea:0d:65:77:95:ec:8a:b5:c4:04:65:27:
                    2e:39:95:fe:49:25:b3:c5:ba:72:55:86:3c:51:f1:
                    9e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:ED:54:EE:C2:73:D3:D1:73:DA:0D:78:4D:0F:E9:86:DF:1C:F2:70
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/J-1U7sJz09Fz2g14TQ_pht8c8nA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:2:d90::/44

    Signature Algorithm: sha256WithRSAEncryption
         2a:ef:12:d1:d5:c2:50:bd:28:42:62:4c:5f:62:f6:50:eb:ef:
         3d:22:f6:61:2f:30:fd:5e:a9:32:da:35:bf:6c:6c:a5:eb:22:
         e0:61:11:e6:91:ad:a9:4a:75:a0:6b:3d:0b:8c:48:f5:a9:d0:
         8d:f9:28:3a:95:d7:88:24:1c:a6:d9:9b:af:60:3b:dd:dd:e3:
         91:87:87:3f:10:b3:01:17:20:b0:5a:7b:d9:03:c1:1c:b8:5f:
         40:ec:00:d9:9e:52:21:56:8f:26:02:00:50:06:7e:a4:b8:45:
         98:d2:18:dd:31:dc:e5:6f:50:34:97:2f:6e:97:52:3c:1e:32:
         f5:db:f5:a8:d5:29:95:a6:cd:5b:7c:4c:e2:f9:81:b1:77:74:
         e7:1d:59:1c:19:b7:c6:12:0d:8b:b3:0c:1f:33:19:6d:1e:27:
         95:3b:cc:23:00:b9:9b:dd:ec:1c:ec:c8:ec:07:05:e2:4b:2c:
         6d:30:fd:3e:ae:08:05:aa:e5:34:ae:34:9a:7d:f9:79:dd:f6:
         b2:1d:19:63:83:7f:14:21:58:59:07:39:7b:6b:46:29:bd:66:
         33:4b:83:d5:25:f0:41:70:9c:48:a1:56:fd:d3:1f:44:e4:d2:
         49:84:5b:70:10:76:97:0b:d5:8d:c4:1a:cd:06:8a:f4:b1:e1:
         8b:57:c3:49
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgICAcowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzM4MjJaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDI3RUQ1NEVFQzI3M0Qz
RDE3M0RBMEQ3ODREMEZFOTg2REYxQ0YyNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzQynI7cslV9NbiTVuWhCL3s68B7qhbVI9YwiTSIo8hWq/H307
P+oSp0OrH4VW4K6X/wckzFdVKMVx4s8X5Nl9IKy6gbNzf0e5icdfcHQhVvwFQOw+
YTWT5JMgc03S4Sk6cMpPuv6t/BzzQ8TOmK+K/5YPwaWWfgucJ253JKPmkG9VHJEZ
7kh+3LPUtywPhYUgsAqDq8H8GFWZd16egXPS9y6rpDDjrViw8dURZuXpeEqo0f6S
AonrXVqRSP3XmBFFmf5tsQZ1L02IEN90AfunwX2Btro2kymCoiiUI5/+zdP2OOoN
ZXeV7Iq1xARlJy45lf5JJbPFunJVhjxR8Z6LAgMBAAGjggIrMIICJzAdBgNVHQ4E
FgQUJ+1U7sJz09Fz2g14TQ/pht8c8nAwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9KLTFVN3NKejA5RnoyZzE0VFFfcGh0OGM4bkEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcEJAoAAg2QMA0GCSqGSIb3DQEBCwUAA4IBAQAq7xLR1cJQvShCYkxf
YvZQ6+89IvZhLzD9Xqky2jW/bGyl6yLgYRHmka2pSnWgaz0LjEj1qdCN+Sg6ldeI
JBym2ZuvYDvd3eORh4c/ELMBFyCwWnvZA8EcuF9A7ADZnlIhVo8mAgBQBn6kuEWY
0hjdMdzlb1A0ly9ul1I8HjL12/Wo1SmVps1bfEzi+YGxd3TnHVkcGbfGEg2Lswwf
MxltHieVO8wjALmb3ewc7MjsBwXiSyxtMP0+rggFquU0rjSaffl53fayHRljg38U
IVhZBzl7a0YpvWYzS4PVJfBBcJxIoVb90x9E5NJJhFtwEHaXC9WNxBrNBor0seGL
V8NJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org