Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JRlSlrAx3DxOye5BUuyGTT3hQ8I.roa
File:                     JRlSlrAx3DxOye5BUuyGTT3hQ8I.roa (raw, json)
Hash identifier:          EGX5kJBmMlsSnVy8ye4y1oH31XqBD8KTDsTKtv6Ajwo=
Subject key identifier:   25:19:52:96:B0:31:DC:3C:4E:C9:EE:41:52:EC:86:4D:3D:E1:43:C2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       CB
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JRlSlrAx3DxOye5BUuyGTT3hQ8I.roa
Signing time:             Tue 30 May 2023 16:10:18 +0000
ROA not before:           Tue 30 May 2023 16:10:18 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2a00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:18 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=25195296B031DC3C4EC9EE4152EC864D3DE143C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9c:2e:4b:86:bb:d0:98:c8:82:d9:78:e7:c5:
                    78:be:19:d6:87:1b:96:8b:c2:c6:78:7e:e8:1e:95:
                    34:78:f3:aa:2b:ef:0b:df:de:b8:b2:79:e9:50:3a:
                    45:4c:c9:f0:0c:7e:3e:70:b1:a5:09:94:88:71:5a:
                    35:05:9e:4f:09:47:51:5b:41:cc:b3:86:94:c3:d0:
                    86:9c:3b:cd:e3:b9:4c:9e:d9:ee:8c:69:bb:0f:f9:
                    90:78:41:8d:a4:4c:91:ce:dc:ba:75:9c:90:ab:a8:
                    4c:b5:5b:74:2e:9f:c9:39:54:ae:25:ab:07:36:6e:
                    0f:03:f0:48:20:0d:47:bb:27:1e:f8:cd:d3:ef:cd:
                    93:d2:62:45:7d:1d:db:37:76:67:05:61:89:c7:fb:
                    48:0e:da:c8:35:d4:75:8f:44:da:71:79:59:49:c6:
                    f0:d0:f4:9b:a3:0b:ff:f5:06:1f:63:94:da:ad:11:
                    9a:22:0b:74:b2:42:48:29:cf:73:8e:40:3e:5e:97:
                    47:7c:13:dd:48:c3:54:1f:32:48:2b:ed:a0:4d:ea:
                    76:91:9e:7e:71:cb:ae:ff:6c:96:88:ef:ba:24:65:
                    d4:fc:15:37:2d:0a:62:5d:38:0e:a0:92:6f:47:44:
                    8e:a5:27:43:47:b3:e5:2c:e5:4a:fb:9b:3c:6e:ff:
                    fc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:19:52:96:B0:31:DC:3C:4E:C9:EE:41:52:EC:86:4D:3D:E1:43:C2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JRlSlrAx3DxOye5BUuyGTT3hQ8I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:a5:6a:9a:e6:2c:d6:43:27:ea:0e:92:be:21:5b:a4:c3:40:
         2e:b1:09:fa:6e:cf:bc:70:f6:63:73:5e:ed:f0:1d:45:b9:4e:
         dc:a0:90:f0:91:0d:55:55:d7:08:eb:c1:81:ca:96:24:07:d7:
         7c:9f:69:c5:94:f3:dd:1a:94:5b:14:ee:a8:93:cc:6c:f4:71:
         4d:52:1d:19:18:9e:d0:3f:b3:89:0e:3f:48:ff:13:79:51:b9:
         77:bb:50:d5:cb:25:71:59:47:00:4b:86:96:5c:c1:aa:87:56:
         7d:40:e0:d1:e9:98:57:ea:62:18:5c:73:ce:4b:30:93:87:88:
         bc:47:85:3d:9c:ba:03:7b:12:c6:0b:30:fe:69:3e:92:b6:ec:
         7a:c7:cc:33:8e:7d:7b:c0:80:16:5e:22:17:0c:0a:bd:2d:7f:
         e7:ec:48:7e:ca:4f:04:59:d8:2a:b1:82:c6:aa:0c:32:df:96:
         4c:cb:da:30:d3:d5:21:69:81:15:fb:1c:1b:0f:1a:49:79:c3:
         b6:84:f9:59:42:57:aa:9d:33:19:19:c6:32:ba:5e:f7:6b:7c:
         9d:10:a4:d7:96:d9:6d:b3:b1:3a:10:ce:a4:d8:0e:47:5d:2d:
         76:6c:be:bf:76:bd:0e:8b:bb:c5:87:8a:2d:d8:fe:df:60:91:
         0d:a4:86:95
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAMswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NjEwMThaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDI1MTk1Mjk2QjAzMURD
M0M0RUM5RUU0MTUyRUM4NjREM0RFMTQzQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBnC5LhrvQmMiC2XjnxXi+GdaHG5aLwsZ4fugelTR486or7wvf
3riyeelQOkVMyfAMfj5wsaUJlIhxWjUFnk8JR1FbQcyzhpTD0IacO83juUye2e6M
absP+ZB4QY2kTJHO3Lp1nJCrqEy1W3Qun8k5VK4lqwc2bg8D8EggDUe7Jx74zdPv
zZPSYkV9Hds3dmcFYYnH+0gO2sg11HWPRNpxeVlJxvDQ9JujC//1Bh9jlNqtEZoi
C3SyQkgpz3OOQD5el0d8E91Iw1QfMkgr7aBN6naRnn5xy67/bJaI77okZdT8FTct
CmJdOA6gkm9HRI6lJ0NHs+Us5Ur7mzxu//z1AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUJRlSlrAx3DxOye5BUuyGTT3hQ8IwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9KUmxTbHJBeDNEeE95ZTVCVXV5R1RUM2hROEku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAayowDQYJKoZIhvcNAQELBQADggEBAHylaprmLNZDJ+oOkr4h
W6TDQC6xCfpuz7xw9mNzXu3wHUW5TtygkPCRDVVV1wjrwYHKliQH13yfacWU890a
lFsU7qiTzGz0cU1SHRkYntA/s4kOP0j/E3lRuXe7UNXLJXFZRwBLhpZcwaqHVn1A
4NHpmFfqYhhcc85LMJOHiLxHhT2cugN7EsYLMP5pPpK27HrHzDOOfXvAgBZeIhcM
Cr0tf+fsSH7KTwRZ2CqxgsaqDDLflkzL2jDT1SFpgRX7HBsPGkl5w7aE+VlCV6qd
MxkZxjK6XvdrfJ0QpNeW2W2zsToQzqTYDkddLXZsvr92vQ6Lu8WHii3Y/t9gkQ2k
hpU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org