Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Lc6XKLCJs14xafuluyYUuLXqgHc.roa
File:                     Lc6XKLCJs14xafuluyYUuLXqgHc.roa (raw, json)
Hash identifier:          oWuH6R4dhLMG/pP2iOicxc/o9vApr7GoJJ/SbFZD8ZA=
Subject key identifier:   2D:CE:97:28:B0:89:B3:5E:31:69:FB:A5:BB:26:14:B8:B5:EA:80:77
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01BE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Lc6XKLCJs14xafuluyYUuLXqgHc.roa
Signing time:             Tue 30 May 2023 17:36:33 +0000
ROA not before:           Tue 30 May 2023 17:36:33 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2e00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:33 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=2DCE9728B089B35E3169FBA5BB2614B8B5EA8077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bc:f1:df:0a:5b:3a:2f:f5:07:27:fe:7c:c8:
                    57:9c:92:8f:a3:62:d0:53:44:1f:12:fb:46:89:e2:
                    05:cf:a8:0e:16:56:c9:77:c4:e1:5e:1f:b3:7d:20:
                    14:94:d4:20:77:5e:c0:95:64:fa:08:ac:6c:04:d6:
                    42:d6:10:ae:df:c1:23:dc:6c:e7:34:17:2c:2c:38:
                    ef:d3:39:9b:21:5a:bf:9b:8e:61:97:21:7a:68:57:
                    40:a3:13:cc:0f:01:5a:89:0e:a7:5f:3e:c1:eb:d8:
                    9d:d5:18:45:db:7d:a2:a6:47:34:10:46:dc:27:4d:
                    a6:95:4f:bf:3d:f4:8a:7c:98:52:25:57:87:8b:95:
                    3e:a7:7f:a5:f9:dd:d4:e5:4e:6a:07:aa:d2:37:38:
                    67:c6:9b:fd:7e:ba:84:e1:f6:9c:5e:65:fc:64:b2:
                    93:f4:89:fd:20:a2:c4:d7:18:5a:6b:55:05:e4:e3:
                    ca:ec:bc:38:b5:c0:c8:bd:aa:57:b7:28:7c:9d:43:
                    eb:f0:35:cc:a2:cc:8b:5d:15:13:c2:42:ad:35:51:
                    de:60:42:97:04:67:c8:9b:a7:4b:90:99:2d:53:81:
                    eb:77:75:3b:a3:35:64:84:54:ef:13:dc:ec:a4:95:
                    4d:6f:05:68:d6:b4:09:30:00:ae:ae:33:ad:22:22:
                    ad:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CE:97:28:B0:89:B3:5E:31:69:FB:A5:BB:26:14:B8:B5:EA:80:77
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Lc6XKLCJs14xafuluyYUuLXqgHc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:67:8d:8e:c8:f9:12:37:b6:66:b4:b8:85:d4:8b:b5:0b:98:
         55:d9:c0:1a:ad:2b:d7:a0:24:c2:d1:6f:c5:21:98:7f:92:4d:
         f1:16:77:88:5a:cb:c3:af:ed:13:95:68:74:49:de:a4:e7:24:
         66:7d:42:c6:ad:9a:84:a5:7b:5b:22:42:0f:2d:a9:6c:c1:bb:
         0e:51:df:47:88:2d:f1:35:63:cc:12:43:fe:36:b0:d5:c8:c6:
         6f:cf:f2:61:ee:7c:63:37:d3:dc:02:a9:cf:f7:04:de:51:07:
         fb:bc:41:b4:c3:f8:1d:16:73:23:96:a9:df:60:d5:e2:71:d3:
         97:d4:87:ea:52:20:28:5f:99:1c:c1:b2:b0:f6:3f:e9:32:9f:
         88:30:20:dc:86:fc:9b:5c:c3:80:be:b4:95:95:5a:39:64:37:
         5f:92:b5:3e:19:1c:a7:9d:2c:b8:3a:5e:08:c4:96:e1:26:eb:
         4b:45:40:59:e4:e5:0c:d2:36:72:49:40:f8:80:fc:42:7f:8a:
         52:06:b5:cb:0f:3a:28:15:21:a8:5b:f5:d9:1d:b3:d2:d3:7e:
         59:6d:0f:1e:d2:d3:eb:4a:93:ba:8f:f9:89:aa:1f:66:97:a9:
         30:22:b7:48:f7:ff:ba:97:c3:f2:39:ca:62:88:79:55:fb:3d:
         17:8c:b4:dd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzM2MzNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDJEQ0U5NzI4QjA4OUIz
NUUzMTY5RkJBNUJCMjYxNEI4QjVFQTgwNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvvPHfCls6L/UHJ/58yFecko+jYtBTRB8S+0aJ4gXPqA4WVsl3
xOFeH7N9IBSU1CB3XsCVZPoIrGwE1kLWEK7fwSPcbOc0FywsOO/TOZshWr+bjmGX
IXpoV0CjE8wPAVqJDqdfPsHr2J3VGEXbfaKmRzQQRtwnTaaVT7899Ip8mFIlV4eL
lT6nf6X53dTlTmoHqtI3OGfGm/1+uoTh9pxeZfxkspP0if0gosTXGFprVQXk48rs
vDi1wMi9qle3KHydQ+vwNcyizItdFRPCQq01Ud5gQpcEZ8ibp0uQmS1Tget3dTuj
NWSEVO8T3OyklU1vBWjWtAkwAK6uM60iIq0bAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQULc6XKLCJs14xafuluyYUuLXqgHcwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9MYzZYS0xDSnMxNHhhZnVsdXlZVXVMWHFnSGMu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAay4wDQYJKoZIhvcNAQELBQADggEBABJnjY7I+RI3tma0uIXU
i7ULmFXZwBqtK9egJMLRb8UhmH+STfEWd4hay8Ov7ROVaHRJ3qTnJGZ9QsatmoSl
e1siQg8tqWzBuw5R30eILfE1Y8wSQ/42sNXIxm/P8mHufGM309wCqc/3BN5RB/u8
QbTD+B0WcyOWqd9g1eJx05fUh+pSIChfmRzBsrD2P+kyn4gwINyG/Jtcw4C+tJWV
WjlkN1+StT4ZHKedLLg6XgjEluEm60tFQFnk5QzSNnJJQPiA/EJ/ilIGtcsPOigV
Iahb9dkds9LTflltDx7S0+tKk7qP+YmqH2aXqTAit0j3/7qXw/I5ymKIeVX7PReM
tN0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org