Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Uum5D6zHH3tp6jAIHbi1LltdCXI.roa
File:                     Uum5D6zHH3tp6jAIHbi1LltdCXI.roa (raw, json)
Hash identifier:          6E4plel4WXOuYmcyPGrnMw4Lrtv5avMqrBPhE/0rOsY=
Subject key identifier:   52:E9:B9:0F:AC:C7:1F:7B:69:EA:30:08:1D:B8:B5:2E:5B:5D:09:72
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       F7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Uum5D6zHH3tp6jAIHbi1LltdCXI.roa
Signing time:             Tue 30 May 2023 16:12:29 +0000
ROA not before:           Tue 30 May 2023 16:12:29 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:29 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=52E9B90FACC71F7B69EA30081DB8B52E5B5D0972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c2:4b:bb:bb:95:b6:2a:c2:ae:a6:e4:a2:93:
                    d8:9f:ee:8c:a7:b9:55:8e:6d:60:dd:5c:96:80:49:
                    81:e0:f8:26:41:c2:cc:37:10:d8:2d:47:f1:50:ba:
                    18:96:58:66:a5:c5:28:3d:bf:bc:a3:a8:87:2f:5f:
                    a3:c6:ac:96:60:d0:e2:af:d3:c4:f8:7b:67:02:d4:
                    4b:2e:8b:ec:2e:64:67:2f:8a:b2:e4:b1:c3:ba:88:
                    6b:01:4f:91:6f:a9:22:09:72:f6:ae:9b:cb:88:38:
                    85:4d:94:fd:14:cc:cf:f7:c0:d7:a0:d6:36:4b:9a:
                    22:33:8d:b0:f2:35:ed:ed:c1:cc:65:3a:3d:ee:eb:
                    27:8c:cd:ca:9a:e4:44:14:dd:a8:dc:a6:d5:65:db:
                    dc:03:51:bd:ab:94:e4:87:19:6c:ed:0b:c3:08:69:
                    c5:de:d8:6e:a3:e6:e8:60:34:9e:3e:30:ba:7b:89:
                    db:13:82:e8:06:e1:61:f3:7f:f5:21:c7:65:57:04:
                    d6:ca:f5:f0:07:d0:7a:87:5e:f8:04:d0:2a:60:82:
                    70:f9:99:33:00:92:43:75:13:35:1c:97:18:97:5a:
                    82:63:e1:2e:3c:52:b4:83:d8:c2:83:9e:63:a5:72:
                    49:b1:36:d7:89:10:0f:25:1e:78:ef:93:41:d2:cf:
                    2a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E9:B9:0F:AC:C7:1F:7B:69:EA:30:08:1D:B8:B5:2E:5B:5D:09:72
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Uum5D6zHH3tp6jAIHbi1LltdCXI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2400::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:22:bd:8b:76:64:44:98:e4:a4:b4:56:3a:33:10:51:d8:ae:
         65:d5:3a:83:d5:69:e5:a9:18:0c:7e:0e:05:16:80:41:68:25:
         d9:fa:d8:e9:53:59:b7:03:41:ab:e7:f5:db:ad:1c:65:ec:53:
         8b:bc:40:8e:c1:0c:20:5b:2c:fb:b4:4c:2e:3e:7a:8f:76:4d:
         d2:4d:4d:13:94:f5:51:32:5b:c8:86:8a:84:51:d0:33:a5:3f:
         b0:49:86:90:e9:10:18:79:e1:5b:56:30:63:24:95:31:44:07:
         8b:11:06:0d:1f:80:e7:1d:52:e0:12:64:f8:8c:ec:0d:e1:b4:
         21:b5:91:77:7a:25:54:ab:fe:ea:8f:75:e0:ca:05:9f:b0:07:
         3e:db:ed:a4:19:28:3e:4c:29:98:29:0b:5d:8e:c4:f9:84:54:
         ec:05:41:f6:27:0d:3f:70:0b:df:3d:72:03:ca:f6:da:91:f2:
         27:e0:ab:c9:21:91:fe:38:93:6f:78:68:65:c9:79:b8:6d:af:
         3e:b8:24:3e:44:42:65:a9:39:dd:74:ba:63:20:ec:cd:49:cc:
         ec:08:26:5e:09:04:30:8c:da:2a:5b:e1:28:8a:e9:9e:f3:6a:
         42:87:71:03:33:ef:23:0a:56:e8:ab:d0:a8:e1:be:02:61:1e:
         f4:b6:4c:6d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NjEyMjlaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDUyRTlCOTBGQUNDNzFG
N0I2OUVBMzAwODFEQjhCNTJFNUI1RDA5NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChwku7u5W2KsKupuSik9if7oynuVWObWDdXJaASYHg+CZBwsw3
ENgtR/FQuhiWWGalxSg9v7yjqIcvX6PGrJZg0OKv08T4e2cC1Esui+wuZGcvirLk
scO6iGsBT5FvqSIJcvaum8uIOIVNlP0UzM/3wNeg1jZLmiIzjbDyNe3twcxlOj3u
6yeMzcqa5EQU3ajcptVl29wDUb2rlOSHGWztC8MIacXe2G6j5uhgNJ4+MLp7idsT
gugG4WHzf/Uhx2VXBNbK9fAH0HqHXvgE0CpggnD5mTMAkkN1EzUclxiXWoJj4S48
UrSD2MKDnmOlckmxNteJEA8lHnjvk0HSzypHAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUUum5D6zHH3tp6jAIHbi1LltdCXIwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9VdW01RDZ6SEgzdHA2akFJSGJpMUxsdGRDWEku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAayQwDQYJKoZIhvcNAQELBQADggEBAFcivYt2ZESY5KS0Vjoz
EFHYrmXVOoPVaeWpGAx+DgUWgEFoJdn62OlTWbcDQavn9dutHGXsU4u8QI7BDCBb
LPu0TC4+eo92TdJNTROU9VEyW8iGioRR0DOlP7BJhpDpEBh54VtWMGMklTFEB4sR
Bg0fgOcdUuASZPiM7A3htCG1kXd6JVSr/uqPdeDKBZ+wBz7b7aQZKD5MKZgpC12O
xPmEVOwFQfYnDT9wC989cgPK9tqR8ifgq8khkf44k294aGXJebhtrz64JD5EQmWp
Od10umMg7M1JzOwIJl4JBDCM2ipb4SiK6Z7zakKHcQMz7yMKVuir0KjhvgJhHvS2
TG0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org