Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ky5059GsOdYdJq3xrkRT7nTX0cg.roa
File:                     Ky5059GsOdYdJq3xrkRT7nTX0cg.roa (raw, json)
Hash identifier:          Gi5FfWc3fNx6QOlKb+LlAgKD8Xp+QlwKec25N+qiIRI=
Subject key identifier:   2B:2E:74:E7:D1:AC:39:D6:1D:26:AD:F1:AE:44:53:EE:74:D7:D1:C8
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0101
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ky5059GsOdYdJq3xrkRT7nTX0cg.roa
Signing time:             Tue 30 May 2023 16:12:31 +0000
ROA not before:           Tue 30 May 2023 16:12:31 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9b00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:31 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=2B2E74E7D1AC39D61D26ADF1AE4453EE74D7D1C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6a:89:16:71:82:da:b1:7d:fe:5a:a6:93:30:
                    13:a7:46:00:5f:c0:93:ce:4f:37:30:c8:f6:c7:ea:
                    ed:11:3d:81:51:bc:c1:7b:40:8d:d2:63:42:f5:01:
                    99:b8:1e:9e:91:a6:3d:c5:40:5b:a6:a6:d2:64:f5:
                    d9:49:94:2d:db:95:71:c3:42:b6:3c:55:1c:a1:b1:
                    e7:2c:73:fe:8e:e6:d9:7a:d3:4a:56:cb:e5:17:1b:
                    ff:d6:ce:dd:73:97:ef:02:cd:fc:67:6b:54:74:1d:
                    c5:03:b2:34:36:7a:e6:74:10:e8:f8:47:23:6f:c3:
                    c2:9b:9b:5a:28:ac:81:30:26:14:61:e5:05:e1:3d:
                    21:92:d5:4e:ed:30:60:b0:51:14:6c:50:9e:32:4a:
                    c3:18:df:b9:70:47:f5:10:2f:cf:57:45:9c:70:27:
                    c3:8e:6b:7b:52:c3:cd:d7:71:71:71:54:6c:81:d8:
                    10:a1:ed:35:86:2b:f0:06:e2:cc:19:11:e1:b8:5b:
                    15:56:00:3d:ad:92:e2:7a:0d:47:39:48:b9:2e:85:
                    ca:31:9e:51:93:73:cb:5e:db:e7:a3:ad:bc:94:02:
                    c4:1f:45:b8:8d:72:4e:22:6f:85:5e:3e:48:e1:d6:
                    be:54:19:ee:e7:af:12:3b:56:2c:de:61:e8:0c:33:
                    de:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2E:74:E7:D1:AC:39:D6:1D:26:AD:F1:AE:44:53:EE:74:D7:D1:C8
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ky5059GsOdYdJq3xrkRT7nTX0cg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:b4:b1:b5:0d:d2:05:2b:71:80:a5:d0:89:96:1d:38:a6:8b:
         7d:b7:66:b9:b1:c1:79:58:c1:cd:1b:53:bf:a6:ad:56:45:ae:
         56:a4:4b:c7:8e:49:6c:f1:57:11:a6:9d:b1:19:bf:1d:32:5d:
         43:cf:94:28:08:00:90:4d:04:95:41:2a:e1:c1:0b:36:47:55:
         93:d2:dc:6c:52:73:d9:5f:2d:6b:2a:10:9f:90:b6:62:2d:6a:
         51:76:98:45:16:00:c8:df:f0:4a:1f:7b:7e:d7:c0:f7:da:b7:
         f2:65:1b:1d:f5:a8:f8:9c:7e:4f:4c:8d:07:83:57:a6:d9:70:
         34:37:24:3d:9f:17:61:f5:23:f1:6c:ea:fb:78:93:c0:a6:c7:
         2f:2d:db:dd:f7:a5:18:45:fe:43:85:8b:bc:bb:32:8a:84:78:
         1f:f0:06:f6:14:62:1c:ea:eb:e0:69:fc:97:9b:15:2c:28:2a:
         a8:d0:be:d7:d9:14:8b:2d:97:05:8e:88:d5:c3:da:49:de:ce:
         ba:46:6a:14:04:e7:a5:8c:91:22:0f:4a:a5:cc:e8:e9:ac:db:
         9f:ba:af:a1:cb:49:87:2c:e0:0b:f1:64:a9:4f:f8:1a:99:7e:
         42:ca:03:4b:07:a6:96:53:ed:18:61:0a:0a:03:45:f0:fa:88:
         58:52:e5:a5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NjEyMzFaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDJCMkU3NEU3RDFBQzM5
RDYxRDI2QURGMUFFNDQ1M0VFNzREN0QxQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcaokWcYLasX3+WqaTMBOnRgBfwJPOTzcwyPbH6u0RPYFRvMF7
QI3SY0L1AZm4Hp6Rpj3FQFumptJk9dlJlC3blXHDQrY8VRyhsecsc/6O5tl600pW
y+UXG//Wzt1zl+8Czfxna1R0HcUDsjQ2euZ0EOj4RyNvw8Kbm1oorIEwJhRh5QXh
PSGS1U7tMGCwURRsUJ4ySsMY37lwR/UQL89XRZxwJ8OOa3tSw83XcXFxVGyB2BCh
7TWGK/AG4swZEeG4WxVWAD2tkuJ6DUc5SLkuhcoxnlGTc8te2+ejrbyUAsQfRbiN
ck4ib4VePkjh1r5UGe7nrxI7VizeYegMM96fAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUKy5059GsOdYdJq3xrkRT7nTX0cgwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9LeTUwNTlHc09kWWRKcTN4cmtSVDduVFgwY2cu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa5swDQYJKoZIhvcNAQELBQADggEBAIa0sbUN0gUrcYCl0ImW
HTimi323ZrmxwXlYwc0bU7+mrVZFrlakS8eOSWzxVxGmnbEZvx0yXUPPlCgIAJBN
BJVBKuHBCzZHVZPS3GxSc9lfLWsqEJ+QtmItalF2mEUWAMjf8Eofe37XwPfat/Jl
Gx31qPicfk9MjQeDV6bZcDQ3JD2fF2H1I/Fs6vt4k8Cmxy8t2933pRhF/kOFi7y7
MoqEeB/wBvYUYhzq6+Bp/JebFSwoKqjQvtfZFIstlwWOiNXD2knezrpGahQE56WM
kSIPSqXM6Oms25+6r6HLSYcs4AvxZKlP+BqZfkLKA0sHppZT7RhhCgoDRfD6iFhS
5aU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org