Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UPzJlLi6-kuIotnM6qMk6NQMvzE.roa
File:                     UPzJlLi6-kuIotnM6qMk6NQMvzE.roa (raw, json)
Hash identifier:          uyJW6S4oinpdiLD+v4TVKIEHmHnctBWKKSBEA6x3IGc=
Subject key identifier:   50:FC:C9:94:B8:BA:FA:4B:88:A2:D9:CC:EA:A3:24:E8:D4:0C:BF:31
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       2B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UPzJlLi6-kuIotnM6qMk6NQMvzE.roa
Signing time:             Tue 30 May 2023 16:02:08 +0000
ROA not before:           Tue 30 May 2023 16:02:08 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:02:08 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=50FCC994B8BAFA4B88A2D9CCEAA324E8D40CBF31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:91:1b:29:c1:19:e8:8e:71:b0:33:91:dd:
                    32:c9:18:9b:3a:de:16:00:22:f5:c1:97:56:dc:8f:
                    24:42:37:d3:21:e5:84:5e:69:d3:21:45:db:b9:8d:
                    39:ac:e8:60:11:c4:e9:40:2c:58:1b:98:9b:0c:94:
                    68:8f:da:0d:68:43:28:1c:ce:ad:93:4e:05:34:4e:
                    0f:6c:9e:24:94:29:32:b0:3d:33:fa:99:fa:a6:18:
                    2f:d2:11:a4:7e:53:d0:72:fa:62:83:8c:1c:e1:86:
                    87:36:f0:a7:1b:39:df:64:68:98:22:c3:c3:0b:ac:
                    7c:55:65:42:1a:41:87:71:36:a2:b5:30:a3:0a:3c:
                    cd:5f:46:d2:f8:24:1f:76:4e:a6:a3:43:b5:2a:a4:
                    58:9d:d9:e5:82:3b:a2:d7:4d:91:3c:98:47:4a:7f:
                    c9:1c:4f:d4:41:a8:ca:6a:e8:ea:5a:56:3e:e3:65:
                    d2:51:2f:df:d9:99:82:47:29:43:8c:82:28:7e:6f:
                    20:6c:ce:1e:19:3e:29:cd:79:eb:83:75:bd:4d:34:
                    c9:9a:06:d7:31:4c:fd:76:f8:da:56:3b:96:16:1f:
                    54:5c:5a:31:ee:e4:58:b4:91:95:09:5a:7d:60:ff:
                    60:e3:03:8a:e5:7d:3f:37:99:e7:58:3e:d5:ce:25:
                    fd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FC:C9:94:B8:BA:FA:4B:88:A2:D9:CC:EA:A3:24:E8:D4:0C:BF:31
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UPzJlLi6-kuIotnM6qMk6NQMvzE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         74:6d:30:33:38:c6:4c:ac:bb:cc:45:24:a7:0a:88:65:ca:12:
         d2:10:e9:fb:27:c9:52:15:57:26:1a:92:bb:da:be:60:4a:73:
         f4:e9:a0:f5:15:60:53:4c:aa:25:d1:d8:66:95:ae:d4:26:e8:
         49:bd:49:b7:b7:57:68:6c:9c:31:0a:e6:3e:08:d2:26:bc:f4:
         6e:4d:41:12:d8:63:be:62:a5:3f:49:61:48:bf:1f:d7:78:37:
         27:6d:b7:18:3d:eb:8c:70:85:68:fc:39:80:12:50:55:84:52:
         f8:09:d8:3f:9d:99:2e:02:8a:00:f5:fa:02:8f:d4:06:4b:24:
         63:bc:ec:64:23:4c:46:64:15:2f:4a:b2:de:4c:c6:8f:61:08:
         63:f7:69:a6:be:05:17:fa:01:6f:da:7c:57:b7:e7:85:14:30:
         14:05:17:98:6c:4f:ca:c5:1b:18:80:f3:33:11:f0:6a:6f:80:
         ff:fa:65:4c:11:43:aa:9e:46:24:c4:64:77:3a:15:ec:aa:33:
         d9:c0:06:65:9a:a7:ad:84:3e:60:d9:0d:88:59:78:f4:af:ee:
         e6:7a:53:73:a0:c7:5b:60:d0:79:eb:01:fa:c6:c6:49:4c:ae:
         62:32:35:67:4a:5e:78:26:fa:d3:a0:38:77:4b:45:38:e6:d1:
         a3:b7:96:9c
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MTI2
MTczQjhENkIzRkYxMEUzRjAzRkIwNTYwRkU2NTUxREVBMkRCMB4XDTIzMDUzMDE2
MDIwOFoXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoNTBGQ0M5OTRCOEJBRkE0
Qjg4QTJEOUNDRUFBMzI0RThENDBDQkYzMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL23kRspwRnojnGwM5HdMskYmzreFgAi9cGXVtyPJEI30yHlhF5p
0yFF27mNOazoYBHE6UAsWBuYmwyUaI/aDWhDKBzOrZNOBTROD2yeJJQpMrA9M/qZ
+qYYL9IRpH5T0HL6YoOMHOGGhzbwpxs532RomCLDwwusfFVlQhpBh3E2orUwowo8
zV9G0vgkH3ZOpqNDtSqkWJ3Z5YI7otdNkTyYR0p/yRxP1EGoymro6lpWPuNl0lEv
39mZgkcpQ4yCKH5vIGzOHhk+Kc1564N1vU00yZoG1zFM/Xb42lY7lhYfVFxaMe7k
WLSRlQlafWD/YOMDiuV9PzeZ51g+1c4l/TMCAwEAAaOCAiowggImMB0GA1UdDgQW
BBRQ/MmUuLr6S4ii2czqoyTo1Ay/MTAfBgNVHSMEGDAWgBRRJhc7jWs/8Q4/A/sF
YP5lUd6i2zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMjkvVVNZWE80MXJQX0VPUHdQN0JXRC1aVkhlb3RzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVVNZWE80MXJQX0VPUHdQN0JXRC1a
Vkhlb3RzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTI5L1VQekpsTGk2LWt1SW90bk02cU1rNk5RTXZ6RS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkCgBrSDANBgkqhkiG9w0BAQsFAAOCAQEAdG0wMzjGTKy7zEUkpwqI
ZcoS0hDp+yfJUhVXJhqSu9q+YEpz9Omg9RVgU0yqJdHYZpWu1CboSb1Jt7dXaGyc
MQrmPgjSJrz0bk1BEthjvmKlP0lhSL8f13g3J223GD3rjHCFaPw5gBJQVYRS+AnY
P52ZLgKKAPX6Ao/UBkskY7zsZCNMRmQVL0qy3kzGj2EIY/dppr4FF/oBb9p8V7fn
hRQwFAUXmGxPysUbGIDzMxHwam+A//plTBFDqp5GJMRkdzoV7Koz2cAGZZqnrYQ+
YNkNiFl49K/u5npTc6DHW2DQeesB+sbGSUyuYjI1Z0peeCb606A4d0tFOObRo7eW
nA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org