Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QM1xBvoE-2dLa79_1hDt-lBktEo.roa
File:                     QM1xBvoE-2dLa79_1hDt-lBktEo.roa (raw, json)
Hash identifier:          rWGuNSYzqh9hO6RylApaUGW9+C63w44HB/Q0Gesiny0=
Subject key identifier:   40:CD:71:06:FA:04:FB:67:4B:6B:BF:7F:D6:10:ED:FA:50:64:B4:4A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0126
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QM1xBvoE-2dLa79_1hDt-lBktEo.roa
Signing time:             Tue 30 May 2023 17:29:54 +0000
ROA not before:           Tue 30 May 2023 17:29:54 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ab00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:29:54 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=40CD7106FA04FB674B6BBF7FD610EDFA5064B44A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:21:cd:b9:dc:c5:a9:6c:f9:96:80:05:4b:70:
                    f8:58:f7:97:e6:3d:f2:44:ce:e6:93:18:9a:8e:fb:
                    6e:a9:82:a5:51:d5:0f:55:47:2f:9f:bf:09:cc:4c:
                    ff:ba:6f:1f:82:c4:36:f2:9d:d8:98:87:4b:d4:1e:
                    ee:82:99:62:de:10:9f:94:a3:3b:47:d3:35:56:09:
                    26:3d:a7:11:77:fa:08:72:1c:69:cd:a5:f0:2f:07:
                    43:66:43:d7:b2:c7:3f:4e:f8:c4:75:de:a0:c6:96:
                    77:63:cf:c0:a0:65:fa:47:5f:b6:75:87:ee:a5:ad:
                    98:f9:ad:4b:fd:f5:20:ef:e7:c2:fe:68:95:07:a8:
                    14:6d:6b:f6:2b:01:90:7f:5f:1d:81:87:4b:99:eb:
                    6f:ff:9f:a2:88:b8:f7:36:e4:d7:be:d1:aa:85:8f:
                    aa:5e:fe:07:2a:56:db:9a:ee:53:39:3f:a3:33:19:
                    f0:05:ef:85:51:cb:1f:a2:e7:4b:99:59:09:d5:a2:
                    61:f5:d0:c1:46:2d:6d:78:2d:6e:e5:84:3d:39:25:
                    c7:02:db:a7:bc:a1:3b:52:b2:b4:c0:59:6d:5b:38:
                    61:12:75:b7:74:2d:db:32:82:2b:95:5f:e9:b2:fc:
                    9f:4b:33:3c:b6:fc:2c:c9:fb:d3:38:e4:6d:2f:25:
                    0a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CD:71:06:FA:04:FB:67:4B:6B:BF:7F:D6:10:ED:FA:50:64:B4:4A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QM1xBvoE-2dLa79_1hDt-lBktEo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ab00::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:0d:6c:48:09:aa:36:ff:df:e0:cf:0a:09:6b:a3:b6:62:64:
         05:20:2e:51:fc:89:0c:d7:8d:f6:9d:ab:45:38:69:19:36:f1:
         41:41:d5:0d:fe:08:19:ba:17:df:7f:3b:bc:c5:a9:a2:12:3e:
         5b:c5:fc:73:db:5e:18:cb:a6:31:db:35:26:9b:54:16:e4:cd:
         77:48:ca:32:90:49:60:0a:fd:f6:70:7a:ce:8c:80:bb:13:7f:
         62:6d:2b:25:4b:be:ca:96:39:43:f2:70:bb:23:a2:ce:ef:7c:
         da:f2:51:5c:af:65:2d:95:8d:44:53:d5:ce:bb:cc:d4:fe:bc:
         0d:6d:f6:39:ee:45:a9:9b:38:9c:94:9e:07:ae:f6:73:03:1d:
         d2:50:62:58:a4:4c:31:15:24:31:3b:ec:46:55:44:ce:bc:c6:
         58:a5:3a:87:8b:58:38:27:b9:3e:61:d0:79:90:af:9a:f9:1f:
         d8:01:b1:3f:cd:a0:e8:14:97:36:63:8c:c6:44:09:2b:06:34:
         08:07:47:47:15:20:0b:e4:bb:f2:a4:88:f8:24:72:bb:b4:1e:
         59:dc:f5:f8:a6:95:58:31:fb:ed:58:aa:75:86:74:0b:b4:2b:
         76:17:0e:a2:dc:91:9b:15:82:dd:91:4e:c3:f1:7e:6a:7c:e3:
         15:12:f1:8a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICASYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzI5NTRaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDQwQ0Q3MTA2RkEwNEZC
Njc0QjZCQkY3RkQ2MTBFREZBNTA2NEI0NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZIc253MWpbPmWgAVLcPhY95fmPfJEzuaTGJqO+26pgqVR1Q9V
Ry+fvwnMTP+6bx+CxDbyndiYh0vUHu6CmWLeEJ+UoztH0zVWCSY9pxF3+ghyHGnN
pfAvB0NmQ9eyxz9O+MR13qDGlndjz8CgZfpHX7Z1h+6lrZj5rUv99SDv58L+aJUH
qBRta/YrAZB/Xx2Bh0uZ62//n6KIuPc25Ne+0aqFj6pe/gcqVtua7lM5P6MzGfAF
74VRyx+i50uZWQnVomH10MFGLW14LW7lhD05JccC26e8oTtSsrTAWW1bOGESdbd0
LdsygiuVX+my/J9LMzy2/CzJ+9M45G0vJQr1AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUQM1xBvoE+2dLa79/1hDt+lBktEowHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9RTTF4QnZvRS0yZExhNzlfMWhEdC1sQmt0RW8u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa6swDQYJKoZIhvcNAQELBQADggEBAJENbEgJqjb/3+DPCglr
o7ZiZAUgLlH8iQzXjfadq0U4aRk28UFB1Q3+CBm6F99/O7zFqaISPlvF/HPbXhjL
pjHbNSabVBbkzXdIyjKQSWAK/fZwes6MgLsTf2JtKyVLvsqWOUPycLsjos7vfNry
UVyvZS2VjURT1c67zNT+vA1t9jnuRambOJyUngeu9nMDHdJQYlikTDEVJDE77EZV
RM68xlilOoeLWDgnuT5h0HmQr5r5H9gBsT/NoOgUlzZjjMZECSsGNAgHR0cVIAvk
u/KkiPgkcru0Hlnc9fimlVgx++1YqnWGdAu0K3YXDqLckZsVgt2RTsPxfmp84xUS
8Yo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org