Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RBtTW63HliyImKofVlYLLPSgwtM.roa
File:                     RBtTW63HliyImKofVlYLLPSgwtM.roa (raw, json)
Hash identifier:          oSHUWAZkg5lRobX73FTc8z1gx236ZKGPuRe1nHJYJhw=
Subject key identifier:   44:1B:53:5B:AD:C7:96:2C:88:98:AA:1F:56:56:0B:2C:F4:A0:C2:D3
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       22
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RBtTW63HliyImKofVlYLLPSgwtM.roa
Signing time:             Tue 30 May 2023 16:02:05 +0000
ROA not before:           Tue 30 May 2023 16:02:05 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9e00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:02:05 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=441B535BADC7962C8898AA1F56560B2CF4A0C2D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f3:48:32:ad:40:ef:e6:d7:4a:45:51:0f:2e:
                    7d:d1:c7:f4:9c:d8:b2:f9:0f:83:01:78:14:27:72:
                    26:6a:9e:ce:71:70:d8:5e:6e:46:ba:9e:3b:f2:be:
                    7a:77:5b:81:ec:f3:a3:4d:31:43:f0:9e:20:a2:68:
                    d2:4f:88:7a:f5:02:70:8a:17:e6:56:f8:c8:21:49:
                    c7:d5:85:d4:df:cd:62:fe:17:e5:1f:96:7f:18:20:
                    de:34:f0:ac:a1:ae:52:58:a5:fa:0e:48:07:08:3b:
                    de:c8:87:4a:bf:9e:1b:cb:f2:05:29:f6:84:22:35:
                    ad:80:a7:08:11:07:d1:3b:44:a0:a0:10:a6:d8:2b:
                    1b:78:2f:ec:76:c7:fe:ad:f9:17:e7:3f:ae:e5:cf:
                    27:40:c9:f2:70:cd:c2:18:b6:b1:4e:78:ab:bf:27:
                    31:18:b8:ea:c3:59:df:cb:87:7a:17:22:8c:37:5f:
                    3e:36:4f:a1:cc:a6:bc:54:5e:c5:09:d5:2f:c0:c9:
                    01:94:b1:9d:6e:22:77:de:f1:a0:38:56:19:73:f9:
                    5f:d6:8d:de:1c:40:be:53:03:bc:fc:99:ff:a4:9c:
                    7b:d1:64:cc:e2:a4:d0:ac:9a:c2:ff:e1:a1:02:ed:
                    89:0d:ad:36:5b:05:00:fd:0b:63:ef:f7:41:87:fe:
                    36:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1B:53:5B:AD:C7:96:2C:88:98:AA:1F:56:56:0B:2C:F4:A0:C2:D3
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RBtTW63HliyImKofVlYLLPSgwtM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:ea:a3:ce:3d:14:00:fb:ae:dc:b0:5b:f1:42:6a:bf:b8:61:
         85:eb:9d:5a:68:0f:48:24:34:8b:85:14:36:74:2c:f2:4a:ca:
         3f:10:14:b1:56:3f:bf:f3:80:d3:5b:d1:36:1d:88:08:5c:04:
         85:ac:0c:25:3b:ce:17:60:aa:76:d7:41:45:88:d6:e4:0c:c6:
         21:2b:44:ae:4d:3f:13:28:7d:ad:ce:25:f4:bd:bf:0f:37:04:
         71:35:03:8a:e8:ad:19:af:b2:87:71:72:43:a8:58:c6:f1:6e:
         79:54:92:94:f4:63:a0:92:54:ea:05:51:f4:39:dc:44:5d:f7:
         e8:70:f0:79:ea:82:d6:bb:b2:f4:2c:af:af:e6:2f:92:a4:f0:
         35:4b:f1:00:0d:58:04:62:62:6e:08:5d:fc:47:57:cd:30:d8:
         a5:9a:8d:a5:cd:de:94:bd:9e:09:4e:6a:ac:e9:ef:0b:ee:cd:
         8c:55:5c:da:5b:72:37:f2:5d:f5:4d:7f:6e:0a:f3:ff:6b:37:
         c5:06:43:87:4a:23:2e:b0:2d:58:19:c6:93:38:16:52:d4:df:
         36:41:c2:14:66:c0:c0:9e:4a:5d:4b:0e:32:04:fa:bc:cf:d9:
         75:71:25:cb:0c:08:d1:47:fd:6b:94:24:aa:dd:ef:9d:c0:56:
         9e:99:6f:dd
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MTI2
MTczQjhENkIzRkYxMEUzRjAzRkIwNTYwRkU2NTUxREVBMkRCMB4XDTIzMDUzMDE2
MDIwNVoXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoNDQxQjUzNUJBREM3OTYy
Qzg4OThBQTFGNTY1NjBCMkNGNEEwQzJEMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOLzSDKtQO/m10pFUQ8ufdHH9JzYsvkPgwF4FCdyJmqeznFw2F5u
RrqeO/K+endbgezzo00xQ/CeIKJo0k+IevUCcIoX5lb4yCFJx9WF1N/NYv4X5R+W
fxgg3jTwrKGuUlil+g5IBwg73siHSr+eG8vyBSn2hCI1rYCnCBEH0TtEoKAQptgr
G3gv7HbH/q35F+c/ruXPJ0DJ8nDNwhi2sU54q78nMRi46sNZ38uHehcijDdfPjZP
ocymvFRexQnVL8DJAZSxnW4id97xoDhWGXP5X9aN3hxAvlMDvPyZ/6Sce9FkzOKk
0Kyawv/hoQLtiQ2tNlsFAP0LY+/3QYf+NrUCAwEAAaOCAiowggImMB0GA1UdDgQW
BBREG1NbrceWLIiYqh9WVgss9KDC0zAfBgNVHSMEGDAWgBRRJhc7jWs/8Q4/A/sF
YP5lUd6i2zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMjkvVVNZWE80MXJQX0VPUHdQN0JXRC1aVkhlb3RzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVVNZWE80MXJQX0VPUHdQN0JXRC1a
Vkhlb3RzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTI5L1JCdFRXNjNIbGl5SW1Lb2ZWbFlMTFBTZ3d0TS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkCgBrnjANBgkqhkiG9w0BAQsFAAOCAQEAb+qjzj0UAPuu3LBb8UJq
v7hhheudWmgPSCQ0i4UUNnQs8krKPxAUsVY/v/OA01vRNh2ICFwEhawMJTvOF2Cq
dtdBRYjW5AzGIStErk0/Eyh9rc4l9L2/DzcEcTUDiuitGa+yh3FyQ6hYxvFueVSS
lPRjoJJU6gVR9DncRF336HDweeqC1ruy9Cyvr+YvkqTwNUvxAA1YBGJibghd/EdX
zTDYpZqNpc3elL2eCU5qrOnvC+7NjFVc2ltyN/Jd9U1/bgrz/2s3xQZDh0ojLrAt
WBnGkzgWUtTfNkHCFGbAwJ5KXUsOMgT6vM/ZdXElywwI0Uf9a5Qkqt3vncBWnplv
3Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org