Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OMoG23ox7TILvNKz0bcl5tfIz6c.roa
File:                     OMoG23ox7TILvNKz0bcl5tfIz6c.roa (raw, json)
Hash identifier:          U68HAchoYM4tdLyUiSAHBlImqhlgMhKohL2XFnF0sgM=
Subject key identifier:   38:CA:06:DB:7A:31:ED:32:0B:BC:D2:B3:D1:B7:25:E6:D7:C8:CF:A7
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OMoG23ox7TILvNKz0bcl5tfIz6c.roa
Signing time:             Wed 15 Mar 2023 03:20:21 +0000
ROA not before:           Wed 15 Mar 2023 03:20:21 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f000::/45 maxlen: 45

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 15 03:20:21 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=38CA06DB7A31ED320BBCD2B3D1B725E6D7C8CFA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:e5:e0:0b:44:4f:a3:7b:5e:76:ef:e9:61:
                    cf:5a:bb:86:c3:6f:89:78:b5:87:bb:3b:9c:ad:07:
                    25:09:4d:20:95:a3:c4:af:68:7b:fd:c6:dc:d1:65:
                    c8:41:11:79:35:03:9f:f0:60:79:5e:fb:55:6b:eb:
                    b3:7b:e7:2e:12:dc:9b:ea:2f:cd:92:ac:cd:f1:18:
                    16:05:22:6f:ec:5b:ef:0e:01:51:cd:a9:16:cb:ce:
                    41:0e:2f:8a:7e:6b:93:74:5e:2e:b7:b2:ad:3e:ad:
                    98:ed:08:f7:c7:fc:3f:c4:be:8b:6f:e7:9e:ec:bc:
                    9f:94:8b:dd:2e:bb:98:44:38:e8:8e:90:11:a7:25:
                    3f:2d:4a:df:9e:a5:ea:46:a3:c5:36:d3:71:ca:e8:
                    d9:51:5a:e6:c8:46:79:26:52:63:bc:3f:42:9d:c3:
                    8a:d0:0f:e5:72:5c:96:25:8f:d7:7c:d6:21:25:57:
                    ff:73:53:93:ca:c5:fb:a9:22:7b:76:ef:06:65:39:
                    c1:05:68:52:e9:d2:f3:0f:00:ce:ea:eb:39:e1:88:
                    10:6d:05:62:4d:a7:b4:94:d5:94:0b:c7:6d:ff:44:
                    03:26:15:c2:92:14:fe:c8:b2:b8:88:89:4c:55:be:
                    3d:52:1a:9c:e5:ff:0d:fe:90:51:d9:ab:da:e5:c0:
                    21:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CA:06:DB:7A:31:ED:32:0B:BC:D2:B3:D1:B7:25:E6:D7:C8:CF:A7
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OMoG23ox7TILvNKz0bcl5tfIz6c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f000::/45

    Signature Algorithm: sha256WithRSAEncryption
         b1:ee:58:dd:6d:8b:af:57:be:31:61:8c:44:f6:5a:85:b3:0f:
         ef:65:56:17:d3:36:1f:23:55:b5:00:59:13:91:ba:23:3c:3e:
         8e:6f:65:7d:e7:55:d9:cd:3a:ca:6b:71:94:b6:07:0c:7c:c7:
         67:3d:24:31:c1:7b:44:a4:80:d8:c9:98:8f:0b:fb:fc:a0:8b:
         5c:bb:a7:08:6f:b8:ec:3d:d4:88:55:92:86:8b:01:ed:4e:40:
         50:a3:63:ac:1d:30:89:88:4a:99:bc:1e:5c:64:94:19:0e:1c:
         57:b4:5c:38:68:0d:80:8a:13:bc:d6:01:b6:8c:17:92:96:f0:
         38:28:7d:28:f6:e4:ef:ed:40:52:37:d1:ea:ac:1b:52:6a:be:
         65:2a:e6:85:6f:42:63:b2:95:ad:83:c1:52:46:3d:5a:35:b6:
         92:65:87:d5:36:53:27:29:f2:67:8c:7f:18:ea:8f:15:84:ad:
         7c:2b:b7:ab:16:3e:d1:40:e9:af:b5:ce:59:72:36:62:d3:84:
         b6:8f:a5:3b:83:0b:19:d5:03:f7:13:fd:58:d2:48:6b:c3:16:
         3f:65:3f:22:b2:b3:9a:37:b9:10:69:66:d8:ee:99:e9:96:2a:
         70:d2:0d:e3:f5:69:a2:9d:c4:4c:06:11:d0:0b:a7:3b:10:bf:
         4f:26:ba:ec
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MTI2
MTczQjhENkIzRkYxMEUzRjAzRkIwNTYwRkU2NTUxREVBMkRCMB4XDTIzMDMxNTAz
MjAyMVoXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoMzhDQTA2REI3QTMxRUQz
MjBCQkNEMkIzRDFCNzI1RTZEN0M4Q0ZBNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALR15eALRE+je1527+lhz1q7hsNviXi1h7s7nK0HJQlNIJWjxK9o
e/3G3NFlyEEReTUDn/BgeV77VWvrs3vnLhLcm+ovzZKszfEYFgUib+xb7w4BUc2p
FsvOQQ4vin5rk3ReLreyrT6tmO0I98f8P8S+i2/nnuy8n5SL3S67mEQ46I6QEacl
Py1K356l6kajxTbTccro2VFa5shGeSZSY7w/Qp3DitAP5XJcliWP13zWISVX/3NT
k8rF+6kie3bvBmU5wQVoUunS8w8AzurrOeGIEG0FYk2ntJTVlAvHbf9EAyYVwpIU
/siyuIiJTFW+PVIanOX/Df6QUdmr2uXAIQ8CAwEAAaOCAiswggInMB0GA1UdDgQW
BBQ4ygbbejHtMgu80rPRtyXm18jPpzAfBgNVHSMEGDAWgBRRJhc7jWs/8Q4/A/sF
YP5lUd6i2zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMjkvVVNZWE80MXJQX0VPUHdQN0JXRC1aVkhlb3RzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVVNZWE80MXJQX0VPUHdQN0JXRC1a
Vkhlb3RzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTI5L09Nb0cyM294N1RJTHZOS3owYmNsNXRmSXo2Yy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwMkCgBg8AAwDQYJKoZIhvcNAQELBQADggEBALHuWN1ti69XvjFhjET2
WoWzD+9lVhfTNh8jVbUAWRORuiM8Po5vZX3nVdnNOsprcZS2Bwx8x2c9JDHBe0Sk
gNjJmI8L+/ygi1y7pwhvuOw91IhVkoaLAe1OQFCjY6wdMImISpm8HlxklBkOHFe0
XDhoDYCKE7zWAbaMF5KW8DgofSj25O/tQFI30eqsG1JqvmUq5oVvQmOyla2DwVJG
PVo1tpJlh9U2Uycp8meMfxjqjxWErXwrt6sWPtFA6a+1zllyNmLThLaPpTuDCxnV
A/cT/VjSSGvDFj9lPyKys5o3uRBpZtjumemWKnDSDeP1aaKdxEwGEdALpzsQv08m
uuw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org