Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NKhgFdf2yJWH3FsW0xrVcrdYEiI.roa
File:                     NKhgFdf2yJWH3FsW0xrVcrdYEiI.roa (raw, json)
Hash identifier:          mc6Fc0hYbqwhxKpZQrxOLE2hoeY3Hd27J8eqSv+DgkY=
Subject key identifier:   34:A8:60:15:D7:F6:C8:95:87:DC:5B:16:D3:1A:D5:72:B7:58:12:22
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01AF
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NKhgFdf2yJWH3FsW0xrVcrdYEiI.roa
Signing time:             Tue 30 May 2023 17:36:27 +0000
ROA not before:           Tue 30 May 2023 17:36:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9900::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431 (0x1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=34A86015D7F6C89587DC5B16D31AD572B7581222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:44:5f:18:38:58:83:99:39:39:65:41:d9:28:
                    ca:c0:1b:a0:55:8b:a3:fa:74:7a:36:8a:5b:55:24:
                    87:34:3c:35:af:49:89:ab:ac:31:4f:78:b7:fa:5a:
                    e4:97:36:45:e3:7b:91:37:af:0f:6f:6b:4f:71:c9:
                    47:2e:a7:86:b0:0f:d3:c8:6e:f9:40:33:2b:7c:50:
                    33:44:2a:e8:e2:ce:47:cc:ca:73:16:bf:a5:d3:d2:
                    7b:23:01:fd:f7:c9:ff:be:84:2e:39:9d:59:20:6f:
                    60:c0:88:8d:7e:70:04:34:9c:40:be:db:5c:3d:80:
                    af:cc:43:59:10:bd:18:99:11:5f:bb:8b:a3:3f:da:
                    a5:8d:e8:b5:06:b1:5c:61:20:e5:2c:b1:25:ce:e4:
                    88:05:90:95:78:58:42:ef:bc:c7:d6:88:5a:72:9a:
                    3f:1d:c5:33:89:80:da:cf:84:b2:8e:a0:6e:a8:d2:
                    03:86:63:bb:49:0a:4f:f0:23:ae:e4:6a:eb:1e:53:
                    38:40:5a:a7:92:31:61:72:4e:e1:2f:1f:9e:41:fb:
                    6c:34:54:e4:31:85:b9:06:96:40:ee:02:50:b1:da:
                    ef:1b:a8:65:5b:0e:90:44:73:c3:e4:62:91:66:30:
                    48:52:e4:fd:a7:79:b1:fd:08:cf:a1:7f:78:cb:56:
                    79:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A8:60:15:D7:F6:C8:95:87:DC:5B:16:D3:1A:D5:72:B7:58:12:22
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NKhgFdf2yJWH3FsW0xrVcrdYEiI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9900::/40

    Signature Algorithm: sha256WithRSAEncryption
         49:b1:0b:51:ff:cc:3d:80:9f:78:87:66:3d:49:15:00:b7:63:
         8f:b6:af:de:c7:c1:74:2c:f7:b9:9d:13:21:37:35:17:54:cc:
         2a:3b:79:0f:02:8a:f1:8c:34:82:0c:07:40:4b:eb:77:78:e1:
         5b:dc:d0:1a:3c:12:64:42:4c:f5:7b:6d:cc:db:a5:de:fb:63:
         f9:9c:15:ff:e0:d7:0e:2f:54:57:5c:ae:aa:9c:c7:d3:22:89:
         30:1f:73:46:54:7c:51:6d:c4:31:96:7c:42:00:d9:6c:7d:c9:
         e1:50:6b:54:fd:b7:4b:ea:9b:46:88:34:43:99:ae:a4:3f:27:
         44:88:ca:c3:c0:dc:e2:b3:c9:64:b2:ce:db:6e:db:c7:e4:d4:
         58:ea:12:62:5d:8b:95:be:ad:16:8e:ba:77:2e:66:f7:75:0c:
         e9:1b:64:a8:7d:0c:fb:83:dd:76:9c:c8:9e:14:83:2d:2c:e2:
         bf:b0:08:d2:db:44:90:b9:e8:71:ab:17:ff:84:ef:d4:55:8a:
         ff:d6:e8:9a:ae:c5:ea:f7:5f:26:71:96:ad:b0:2d:2b:fe:7d:
         df:d0:35:1f:27:c6:f8:e7:4f:f5:2b:d0:62:2f:30:e5:08:6c:
         8e:68:47:34:7c:62:59:4c:dd:06:b4:4a:48:ef:97:32:ee:19:
         42:46:b3:9f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzM2MjdaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDM0QTg2MDE1RDdGNkM4
OTU4N0RDNUIxNkQzMUFENTcyQjc1ODEyMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDORF8YOFiDmTk5ZUHZKMrAG6BVi6P6dHo2iltVJIc0PDWvSYmr
rDFPeLf6WuSXNkXje5E3rw9va09xyUcup4awD9PIbvlAMyt8UDNEKujizkfMynMW
v6XT0nsjAf33yf++hC45nVkgb2DAiI1+cAQ0nEC+21w9gK/MQ1kQvRiZEV+7i6M/
2qWN6LUGsVxhIOUssSXO5IgFkJV4WELvvMfWiFpymj8dxTOJgNrPhLKOoG6o0gOG
Y7tJCk/wI67kauseUzhAWqeSMWFyTuEvH55B+2w0VOQxhbkGlkDuAlCx2u8bqGVb
DpBEc8PkYpFmMEhS5P2nebH9CM+hf3jLVnnbAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUNKhgFdf2yJWH3FsW0xrVcrdYEiIwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9OS2hnRmRmMnlKV0gzRnNXMHhyVmNyZFlFaUku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa5kwDQYJKoZIhvcNAQELBQADggEBAEmxC1H/zD2An3iHZj1J
FQC3Y4+2r97HwXQs97mdEyE3NRdUzCo7eQ8CivGMNIIMB0BL63d44Vvc0Bo8EmRC
TPV7bczbpd77Y/mcFf/g1w4vVFdcrqqcx9MiiTAfc0ZUfFFtxDGWfEIA2Wx9yeFQ
a1T9t0vqm0aINEOZrqQ/J0SIysPA3OKzyWSyzttu28fk1FjqEmJdi5W+rRaOuncu
Zvd1DOkbZKh9DPuD3XacyJ4Ugy0s4r+wCNLbRJC56HGrF/+E79RViv/W6Jquxer3
XyZxlq2wLSv+fd/QNR8nxvjnT/Ur0GIvMOUIbI5oRzR8YllM3Qa0SkjvlzLuGUJG
s58=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org