Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/KPzhVQc0Iom595f-1V0tHTHnyBY.roa
File:                     KPzhVQc0Iom595f-1V0tHTHnyBY.roa (raw, json)
Hash identifier:          a4CiUivAvqRaFH1sZYbbjdjsYk8KFDscFKTH4r4LGjY=
Subject key identifier:   28:FC:E1:55:07:34:22:89:B9:F7:97:FE:D5:5D:2D:1D:31:E7:C8:16
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0233
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/KPzhVQc0Iom595f-1V0tHTHnyBY.roa
Signing time:             Tue 30 May 2023 17:42:26 +0000
ROA not before:           Tue 30 May 2023 17:42:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7f00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=28FCE15507342289B9F797FED55D2D1D31E7C816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:53:dc:47:b0:ff:97:7d:55:4c:7b:b3:46:bb:
                    2d:c7:f1:87:62:26:a9:1e:70:87:36:60:16:ec:f6:
                    47:20:f8:e5:52:3f:c4:d5:88:f1:e2:8b:be:71:00:
                    36:f7:c9:a8:d1:d3:50:0b:a7:2b:20:aa:bc:10:cd:
                    50:0f:d9:35:94:b3:e8:31:f9:4f:7c:66:71:1c:f0:
                    93:68:77:d8:44:fc:e9:b7:68:1f:18:c5:09:32:fd:
                    c0:cc:99:d5:8b:f7:af:a9:9c:61:5b:a1:63:5d:e9:
                    91:c8:79:32:9d:9f:0b:25:c5:03:a9:d3:93:fa:f8:
                    de:59:d9:1a:ad:f4:5d:3c:eb:a1:24:ef:ec:3f:68:
                    33:f9:66:aa:ae:06:80:8a:6b:c7:63:26:00:30:1a:
                    90:b8:8b:2f:e1:3f:39:45:ee:3a:5f:e3:c5:d3:70:
                    e5:7d:3b:16:12:cd:72:c7:35:17:71:e7:07:6c:b2:
                    fb:b1:1f:97:c2:ff:ba:cc:7f:8d:a8:b1:89:8c:13:
                    3a:10:83:c3:ba:27:fb:b9:2c:ad:4f:11:fe:19:6f:
                    0b:ba:c9:76:bf:be:73:bb:17:74:7f:98:7a:2d:74:
                    b2:61:4b:c4:48:61:b5:28:83:81:5e:9e:a2:a6:30:
                    cd:70:75:3b:0e:0f:ac:69:70:43:10:e5:20:4f:10:
                    b3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FC:E1:55:07:34:22:89:B9:F7:97:FE:D5:5D:2D:1D:31:E7:C8:16
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/KPzhVQc0Iom595f-1V0tHTHnyBY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1d:c9:47:6b:87:be:af:19:61:02:82:cf:37:ef:fc:ca:28:59:
         6e:2f:ad:46:1c:f0:b4:23:ae:de:66:05:bc:c0:27:63:15:fa:
         04:2f:94:d7:89:92:8a:48:6f:0a:54:04:4e:0c:fd:04:94:d3:
         02:18:ee:66:44:61:c9:da:dd:b1:e1:e5:57:09:cd:ba:0f:cb:
         97:7c:26:f5:70:3f:cd:a5:3f:f7:a3:bf:2a:30:86:fe:41:b6:
         23:f5:4c:ce:0d:d6:ee:33:21:e4:a3:dd:a9:32:79:cd:c6:46:
         09:20:bd:78:0a:5f:63:50:6b:da:48:f9:0f:bd:ed:ae:c8:f4:
         2b:6b:30:7a:b9:6d:64:10:12:88:e3:fb:a2:5f:95:ab:e2:0c:
         b0:6a:f5:ac:15:0b:06:55:60:11:fc:e1:97:62:43:17:07:7f:
         5a:21:90:81:cd:1f:f0:43:ff:d8:54:51:97:13:e2:2e:42:74:
         72:27:49:11:5e:d9:af:8f:61:ec:56:40:00:f4:5f:2d:15:07:
         24:f0:20:b9:52:89:a5:c5:f1:d3:0b:70:64:56:33:95:3d:e6:
         30:8d:4e:c5:84:1e:1d:8e:73:e4:f1:c3:f7:70:6c:6a:fe:3e:
         e1:d9:f7:91:b7:2e:44:67:c8:6a:09:6c:28:9c:60:e1:8e:60:
         1f:53:aa:d0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzQyMjZaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDI4RkNFMTU1MDczNDIy
ODlCOUY3OTdGRUQ1NUQyRDFEMzFFN0M4MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWU9xHsP+XfVVMe7NGuy3H8YdiJqkecIc2YBbs9kcg+OVSP8TV
iPHii75xADb3yajR01ALpysgqrwQzVAP2TWUs+gx+U98ZnEc8JNod9hE/Om3aB8Y
xQky/cDMmdWL96+pnGFboWNd6ZHIeTKdnwslxQOp05P6+N5Z2Rqt9F0866Ek7+w/
aDP5ZqquBoCKa8djJgAwGpC4iy/hPzlF7jpf48XTcOV9OxYSzXLHNRdx5wdssvux
H5fC/7rMf42osYmMEzoQg8O6J/u5LK1PEf4Zbwu6yXa/vnO7F3R/mHotdLJhS8RI
YbUog4FenqKmMM1wdTsOD6xpcEMQ5SBPELP7AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUKPzhVQc0Iom595f+1V0tHTHnyBYwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9LUHpoVlFjMElvbTU5NWYtMVYwdEhUSG55Qlku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa38wDQYJKoZIhvcNAQELBQADggEBAB3JR2uHvq8ZYQKCzzfv
/MooWW4vrUYc8LQjrt5mBbzAJ2MV+gQvlNeJkopIbwpUBE4M/QSU0wIY7mZEYcna
3bHh5VcJzboPy5d8JvVwP82lP/ejvyowhv5BtiP1TM4N1u4zIeSj3akyec3GRgkg
vXgKX2NQa9pI+Q+97a7I9CtrMHq5bWQQEojj+6JflaviDLBq9awVCwZVYBH84Zdi
QxcHf1ohkIHNH/BD/9hUUZcT4i5CdHInSRFe2a+PYexWQAD0Xy0VByTwILlSiaXF
8dMLcGRWM5U95jCNTsWEHh2Oc+Txw/dwbGr+PuHZ95G3LkRnyGoJbCicYOGOYB9T
qtA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org