Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MSQDCbSyhbc7ZZQjXD0PijF8x98.roa
File:                     MSQDCbSyhbc7ZZQjXD0PijF8x98.roa (raw, json)
Hash identifier:          C0VF6750GeqMNXzpkgXj2AxX83KeE/jVpta1pHS4NC4=
Subject key identifier:   31:24:03:09:B4:B2:85:B7:3B:65:94:23:5C:3D:0F:8A:31:7C:C7:DF
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0186
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MSQDCbSyhbc7ZZQjXD0PijF8x98.roa
Signing time:             Tue 30 May 2023 17:34:26 +0000
ROA not before:           Tue 30 May 2023 17:34:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:bc00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=31240309B4B285B73B6594235C3D0F8A317CC7DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a4:60:27:54:e9:be:3a:36:5c:57:05:33:94:
                    23:9d:01:95:ba:dd:6a:14:cd:65:b3:1e:51:e9:42:
                    7c:45:e0:6c:bf:6d:af:1b:80:d2:65:80:92:c3:47:
                    61:dc:fd:ff:c1:f0:78:ca:1f:06:4d:d9:70:f3:20:
                    76:59:c8:16:a5:11:b4:87:bd:f1:cd:e2:e4:45:3a:
                    b8:af:a7:3e:d7:5c:e5:60:4d:17:e2:2f:3d:7b:89:
                    0e:a1:c8:44:1b:d7:3c:a9:2b:fb:d2:32:ca:70:39:
                    ac:fd:03:5f:cc:22:a5:ff:bd:54:63:82:d7:7f:83:
                    60:48:f3:1a:87:c0:ba:15:5b:8f:02:68:20:9e:21:
                    49:1e:d4:c5:bd:a0:20:6e:eb:53:a0:1e:c0:ad:64:
                    12:18:24:a7:31:92:3d:a0:8a:91:f2:60:b4:f9:3c:
                    7d:33:56:85:59:70:95:ba:f9:b7:a6:a6:9f:f8:bd:
                    18:af:fd:02:ca:4d:53:f6:41:c2:e4:35:bf:d1:ef:
                    c3:b4:47:1d:a0:0f:12:e2:6b:8c:8a:81:46:a4:cd:
                    39:c5:39:01:cf:f3:2f:b3:85:66:21:73:92:f1:2c:
                    72:1a:80:25:72:d8:1f:60:3c:41:41:76:ce:5e:9a:
                    9f:bd:9d:f9:81:6a:cd:2d:ce:a3:da:c8:41:6f:fd:
                    29:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:24:03:09:B4:B2:85:B7:3B:65:94:23:5C:3D:0F:8A:31:7C:C7:DF
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MSQDCbSyhbc7ZZQjXD0PijF8x98.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:bc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         54:eb:82:a9:a7:6d:d9:9d:9f:1a:21:df:8c:6a:75:71:25:fb:
         b0:e3:e7:1a:6e:5c:4e:6f:ed:2e:4b:f0:23:18:ed:7c:dd:50:
         11:52:9d:62:fc:cf:24:f4:d3:58:0d:bf:9b:0c:df:a5:5f:76:
         f4:91:0f:f5:03:dd:59:8a:3c:ff:ec:7b:48:fc:11:84:c4:b0:
         8d:b4:69:24:74:eb:d8:a7:87:29:54:53:8f:46:0e:21:85:d7:
         9d:36:e2:e8:de:57:b6:29:81:22:6c:a5:75:47:09:1a:ac:7a:
         b0:1e:2a:83:0c:75:fa:9b:98:1a:31:3f:e2:d4:01:c3:d6:6d:
         4e:6d:da:63:49:bb:e1:d0:63:be:a9:ab:6a:ed:ea:3b:c9:6e:
         b3:0d:45:b8:f3:48:ed:da:9f:97:c5:fe:42:e2:46:ec:7b:e6:
         3f:d0:1b:cd:9d:21:06:94:35:b7:c1:46:ed:46:88:34:7d:81:
         61:d6:fe:2a:8d:ad:05:c5:98:76:69:b6:e6:da:2a:35:11:55:
         47:26:94:78:ed:7f:6a:55:10:91:61:22:31:24:c5:1c:23:40:
         97:ae:d2:22:70:07:7c:c9:14:60:36:6d:ef:28:47:f3:cb:6c:
         c3:3d:bf:46:7f:13:07:ce:74:6c:1a:10:f4:c0:e1:55:ef:a8:
         d9:5f:5d:c7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzM0MjZaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDMxMjQwMzA5QjRCMjg1
QjczQjY1OTQyMzVDM0QwRjhBMzE3Q0M3REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDpGAnVOm+OjZcVwUzlCOdAZW63WoUzWWzHlHpQnxF4Gy/ba8b
gNJlgJLDR2Hc/f/B8HjKHwZN2XDzIHZZyBalEbSHvfHN4uRFOrivpz7XXOVgTRfi
Lz17iQ6hyEQb1zypK/vSMspwOaz9A1/MIqX/vVRjgtd/g2BI8xqHwLoVW48CaCCe
IUke1MW9oCBu61OgHsCtZBIYJKcxkj2gipHyYLT5PH0zVoVZcJW6+bempp/4vRiv
/QLKTVP2QcLkNb/R78O0Rx2gDxLia4yKgUakzTnFOQHP8y+zhWYhc5LxLHIagCVy
2B9gPEFBds5emp+9nfmBas0tzqPayEFv/SkhAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUMSQDCbSyhbc7ZZQjXD0PijF8x98wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9NU1FEQ2JTeWhiYzdaWlFqWEQwUGlqRjh4OTgu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa7wwDQYJKoZIhvcNAQELBQADggEBAFTrgqmnbdmdnxoh34xq
dXEl+7Dj5xpuXE5v7S5L8CMY7XzdUBFSnWL8zyT001gNv5sM36VfdvSRD/UD3VmK
PP/se0j8EYTEsI20aSR069inhylUU49GDiGF15024ujeV7YpgSJspXVHCRqserAe
KoMMdfqbmBoxP+LUAcPWbU5t2mNJu+HQY76pq2rt6jvJbrMNRbjzSO3an5fF/kLi
Rux75j/QG82dIQaUNbfBRu1GiDR9gWHW/iqNrQXFmHZptubaKjURVUcmlHjtf2pV
EJFhIjEkxRwjQJeu0iJwB3zJFGA2be8oR/PLbMM9v0Z/EwfOdGwaEPTA4VXvqNlf
Xcc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org