Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MNdcLDCp-tzR6a16QsyCpPDocdA.roa
File:                     MNdcLDCp-tzR6a16QsyCpPDocdA.roa (raw, json)
Hash identifier:          wbPOatIVWm0nZHyu4uTaEgxcV8ijE8ZMGCRQg3S6Zjo=
Subject key identifier:   30:D7:5C:2C:30:A9:FA:DC:D1:E9:AD:7A:42:CC:82:A4:F0:E8:71:D0
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       013B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MNdcLDCp-tzR6a16QsyCpPDocdA.roa
Signing time:             Tue 30 May 2023 17:30:05 +0000
ROA not before:           Tue 30 May 2023 17:30:05 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:100::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:30:05 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=30D75C2C30A9FADCD1E9AD7A42CC82A4F0E871D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3d:34:23:0e:4c:df:97:32:8b:e3:00:f9:e5:
                    a8:b3:02:1e:db:6f:26:a6:c2:e1:b9:b8:a9:49:5a:
                    de:d6:5c:2b:04:82:fc:3e:36:44:9b:80:cf:f8:ee:
                    51:71:5d:e2:4a:19:ea:3e:81:2c:6b:13:13:95:c6:
                    c3:8c:68:6d:3a:c0:53:23:ed:4b:69:04:08:9a:77:
                    10:a6:3b:a0:8f:2d:66:02:0f:01:96:99:2c:eb:15:
                    80:0b:47:48:f0:05:08:17:da:4d:86:34:87:b7:a0:
                    8e:67:83:9e:c8:d0:7c:9e:42:87:4b:e2:d6:e6:1d:
                    56:e7:70:e2:9e:0b:a0:5b:8d:0e:1f:be:4f:de:0a:
                    39:41:f8:93:6a:22:89:00:a4:c7:6b:e2:6b:5f:dd:
                    65:32:cb:cc:cd:07:b3:c2:c9:09:f9:1f:7b:53:f3:
                    eb:66:49:29:4b:2e:64:5d:bb:01:64:3f:f6:64:fd:
                    0a:03:67:19:f0:37:b4:b6:c9:71:1a:24:f8:f4:a1:
                    24:4a:36:cd:19:5b:b6:22:e5:0d:af:ff:3d:c2:42:
                    69:d6:06:53:32:8b:90:8f:e2:cb:5e:da:c7:fa:01:
                    57:23:90:a7:8b:43:d2:d0:7e:37:7a:37:28:22:c5:
                    78:fa:d1:d0:c5:b4:b1:0b:3a:73:7d:35:d4:88:c6:
                    52:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D7:5C:2C:30:A9:FA:DC:D1:E9:AD:7A:42:CC:82:A4:F0:E8:71:D0
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MNdcLDCp-tzR6a16QsyCpPDocdA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         94:f9:46:c5:fc:fa:45:7e:5e:93:06:4f:30:78:01:13:2a:6e:
         4f:47:5b:57:7c:71:1e:74:91:d6:27:b6:94:2b:8c:12:14:dc:
         28:9d:b6:dc:8f:b0:4b:57:46:8a:0b:1f:fb:65:b6:d0:13:76:
         18:02:65:15:51:6d:18:37:81:c5:d1:bf:94:09:27:77:bd:79:
         d2:0c:32:c4:0d:61:8b:19:9e:31:0d:67:c0:60:56:52:96:46:
         32:1b:85:b7:e3:40:38:0e:cc:2b:75:f9:a2:09:ef:df:ea:0f:
         94:47:67:04:9e:a2:51:ee:bb:97:bb:91:72:5e:c4:ea:59:bb:
         55:82:ae:7d:9e:d4:4a:ed:68:74:e4:03:eb:e0:a3:c5:bd:3d:
         61:75:65:96:c7:4d:a7:16:4a:8c:f2:98:38:f9:42:26:59:95:
         e7:e0:9a:48:a1:94:cd:ad:b8:52:d8:12:1d:70:96:18:52:1f:
         f1:46:69:71:45:79:58:02:47:90:4d:0c:73:a6:e1:01:4a:aa:
         c7:c3:47:3f:ce:a7:d0:ce:06:c6:23:9e:e3:be:2d:52:0c:b9:
         fe:98:c3:c6:79:5e:56:90:ac:b7:58:1c:63:7a:6c:5e:40:c2:
         55:b0:26:b6:12:e3:e6:84:59:21:17:51:fc:22:35:b2:72:40:
         28:42:9f:e9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICATswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzMwMDVaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDMwRDc1QzJDMzBBOUZB
RENEMUU5QUQ3QTQyQ0M4MkE0RjBFODcxRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPPTQjDkzflzKL4wD55aizAh7bbyamwuG5uKlJWt7WXCsEgvw+
NkSbgM/47lFxXeJKGeo+gSxrExOVxsOMaG06wFMj7UtpBAiadxCmO6CPLWYCDwGW
mSzrFYALR0jwBQgX2k2GNIe3oI5ng57I0HyeQodL4tbmHVbncOKeC6BbjQ4fvk/e
CjlB+JNqIokApMdr4mtf3WUyy8zNB7PCyQn5H3tT8+tmSSlLLmRduwFkP/Zk/QoD
ZxnwN7S2yXEaJPj0oSRKNs0ZW7Yi5Q2v/z3CQmnWBlMyi5CP4ste2sf6AVcjkKeL
Q9LQfjd6NygixXj60dDFtLELOnN9NdSIxlLHAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUMNdcLDCp+tzR6a16QsyCpPDocdAwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9NTmRjTERDcC10elI2YTE2UXN5Q3BQRG9jZEEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAawEwDQYJKoZIhvcNAQELBQADggEBAJT5RsX8+kV+XpMGTzB4
ARMqbk9HW1d8cR50kdYntpQrjBIU3CidttyPsEtXRooLH/tlttATdhgCZRVRbRg3
gcXRv5QJJ3e9edIMMsQNYYsZnjENZ8BgVlKWRjIbhbfjQDgOzCt1+aIJ79/qD5RH
ZwSeolHuu5e7kXJexOpZu1WCrn2e1ErtaHTkA+vgo8W9PWF1ZZbHTacWSozymDj5
QiZZlefgmkihlM2tuFLYEh1wlhhSH/FGaXFFeVgCR5BNDHOm4QFKqsfDRz/Op9DO
BsYjnuO+LVIMuf6Yw8Z5XlaQrLdYHGN6bF5AwlWwJrYS4+aEWSEXUfwiNbJyQChC
n+k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org