Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JsOa80nbW566ACwraSxiYWBL-bw.roa
File:                     JsOa80nbW566ACwraSxiYWBL-bw.roa (raw, json)
Hash identifier:          1Sw5muz2HZsBxenSdcRzfVsrYW4jZAvTkLKdBnPr050=
Subject key identifier:   26:C3:9A:F3:49:DB:5B:9E:BA:00:2C:2B:69:2C:62:61:60:4B:F9:BC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       59
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JsOa80nbW566ACwraSxiYWBL-bw.roa
Signing time:             Tue 30 May 2023 16:04:23 +0000
ROA not before:           Tue 30 May 2023 16:04:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2200::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=26C39AF349DB5B9EBA002C2B692C6261604BF9BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1a:79:e1:9e:56:a7:1c:ba:e2:a4:8a:d4:f7:
                    c7:c4:04:da:61:15:24:38:75:40:a3:a3:1b:a3:b8:
                    a9:8e:69:41:2f:90:a7:5c:bf:4d:3a:af:ab:3e:71:
                    45:35:a7:e6:af:5b:c0:84:60:b0:2a:eb:95:79:d0:
                    d8:84:90:04:81:37:c1:3f:0b:8f:9f:18:81:47:80:
                    e6:e7:71:e4:d1:bd:16:c0:e9:ab:37:e3:b8:ae:9f:
                    5f:04:e1:05:35:85:59:2a:a5:a4:aa:92:04:4a:04:
                    20:83:82:2b:0e:19:46:2c:16:4f:da:88:66:7e:04:
                    3e:4e:a6:c2:e5:99:2d:e8:4a:2a:e3:5e:11:42:d0:
                    4c:b9:33:1f:bd:74:5b:48:c9:ba:2b:b7:79:aa:33:
                    f1:92:45:86:3e:e5:26:13:d1:d3:88:a0:ab:74:b6:
                    05:de:78:73:7d:e8:e7:c8:77:f8:d8:cf:52:69:22:
                    85:38:b4:51:66:38:e4:b4:63:d5:19:d6:a9:aa:2f:
                    a9:f0:00:28:d3:6e:5c:43:b9:6c:06:eb:10:c7:d5:
                    15:f2:87:1e:bd:9f:b2:17:a0:d5:a4:0c:c6:c0:6c:
                    d2:57:67:3d:1e:9f:83:72:f5:80:6b:a6:19:99:6a:
                    55:b3:c9:4c:38:70:e8:da:3e:b5:31:48:4e:23:63:
                    49:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C3:9A:F3:49:DB:5B:9E:BA:00:2C:2B:69:2C:62:61:60:4B:F9:BC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JsOa80nbW566ACwraSxiYWBL-bw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2200::/40

    Signature Algorithm: sha256WithRSAEncryption
         b6:14:2e:d7:ba:8c:6e:9f:e4:41:47:c7:b3:de:66:3b:73:b0:
         de:c4:bf:39:67:59:df:56:65:dc:66:c7:71:0f:a2:80:56:cc:
         2e:d6:e5:d3:10:cd:9e:58:c0:f0:8d:59:e9:4a:17:73:f7:f3:
         7a:f3:eb:d8:ca:16:be:f8:26:19:dc:cf:1b:d8:db:f3:1a:97:
         b1:f1:e5:ad:5e:a8:54:6a:b0:29:1f:29:4e:0e:1d:c4:e2:a3:
         67:d8:5e:27:30:98:b5:67:91:b6:b0:21:42:fd:f2:18:d3:d0:
         a9:bc:1e:63:40:2f:df:fb:29:3f:e3:50:e3:4c:04:ff:68:2d:
         ae:68:ce:46:30:14:a6:62:86:db:4d:28:9e:23:82:2d:47:83:
         44:97:45:db:00:08:40:ee:f9:ea:6c:75:60:25:c2:a1:82:1f:
         2d:6e:c1:45:ff:8b:b9:42:66:fa:0b:6f:1d:ef:d3:2d:23:57:
         fe:b6:bc:a3:6d:12:25:9c:b8:91:84:dd:7e:2c:d3:bf:55:77:
         a0:12:86:08:59:f4:92:68:b1:c9:39:36:fd:a8:4f:8b:ad:a3:
         b0:f5:3c:a0:7c:87:bc:be:67:a6:a7:b7:73:73:34:df:a7:89:
         8a:88:3f:a8:10:8f:6f:7a:18:f1:b3:0a:90:c8:00:21:c2:43:
         d0:8e:82:7a
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MTI2
MTczQjhENkIzRkYxMEUzRjAzRkIwNTYwRkU2NTUxREVBMkRCMB4XDTIzMDUzMDE2
MDQyM1oXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoMjZDMzlBRjM0OURCNUI5
RUJBMDAyQzJCNjkyQzYyNjE2MDRCRjlCQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANYaeeGeVqccuuKkitT3x8QE2mEVJDh1QKOjG6O4qY5pQS+Qp1y/
TTqvqz5xRTWn5q9bwIRgsCrrlXnQ2ISQBIE3wT8Lj58YgUeA5udx5NG9FsDpqzfj
uK6fXwThBTWFWSqlpKqSBEoEIIOCKw4ZRiwWT9qIZn4EPk6mwuWZLehKKuNeEULQ
TLkzH710W0jJuiu3eaoz8ZJFhj7lJhPR04igq3S2Bd54c33o58h3+NjPUmkihTi0
UWY45LRj1RnWqaovqfAAKNNuXEO5bAbrEMfVFfKHHr2fsheg1aQMxsBs0ldnPR6f
g3L1gGumGZlqVbPJTDhw6No+tTFITiNjSZMCAwEAAaOCAiowggImMB0GA1UdDgQW
BBQmw5rzSdtbnroALCtpLGJhYEv5vDAfBgNVHSMEGDAWgBRRJhc7jWs/8Q4/A/sF
YP5lUd6i2zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMjkvVVNZWE80MXJQX0VPUHdQN0JXRC1aVkhlb3RzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVVNZWE80MXJQX0VPUHdQN0JXRC1a
Vkhlb3RzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTI5L0pzT2E4MG5iVzU2NkFDd3JhU3hpWVdCTC1idy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkCgBrIjANBgkqhkiG9w0BAQsFAAOCAQEAthQu17qMbp/kQUfHs95m
O3Ow3sS/OWdZ31Zl3GbHcQ+igFbMLtbl0xDNnljA8I1Z6UoXc/fzevPr2MoWvvgm
GdzPG9jb8xqXsfHlrV6oVGqwKR8pTg4dxOKjZ9heJzCYtWeRtrAhQv3yGNPQqbwe
Y0Av3/spP+NQ40wE/2gtrmjORjAUpmKG200oniOCLUeDRJdF2wAIQO756mx1YCXC
oYIfLW7BRf+LuUJm+gtvHe/TLSNX/ra8o20SJZy4kYTdfizTv1V3oBKGCFn0kmix
yTk2/ahPi62jsPU8oHyHvL5npqe3c3M036eJiog/qBCPb3oY8bMKkMgAIcJD0I6C
eg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org