Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/V2W9pRBEUDf0mkEWdFsqQozdAeM.roa
File:                     V2W9pRBEUDf0mkEWdFsqQozdAeM.roa (raw, json)
Hash identifier:          b81YC+l8DddeAYxCCJoR+TF14uQQaDsrb393EyW0/Z0=
Subject key identifier:   57:65:BD:A5:10:44:50:37:F4:9A:41:16:74:5B:2A:42:8C:DD:01:E3
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0180
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/V2W9pRBEUDf0mkEWdFsqQozdAeM.roa
Signing time:             Tue 30 May 2023 17:34:23 +0000
ROA not before:           Tue 30 May 2023 17:34:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5765BDA510445037F49A4116745B2A428CDD01E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:f3:f1:3f:f0:0c:5c:10:2d:8d:4d:e3:78:
                    b8:de:1a:f8:46:41:81:c9:7d:58:f0:b1:50:c0:f9:
                    cc:1d:8b:fe:0a:ba:95:b9:b3:ab:38:c9:fc:b0:78:
                    73:a4:a9:41:fa:18:ea:6b:ec:88:74:de:80:d3:ce:
                    a1:73:a1:dd:64:65:d2:22:84:bc:de:e9:43:66:51:
                    c6:23:d3:04:02:89:ba:05:d6:f4:1a:4f:38:a8:f4:
                    ab:cd:1e:f6:2d:1c:f2:c7:30:d4:2f:30:1f:21:0a:
                    6e:67:47:d7:d9:07:e1:80:e0:70:d1:2e:2d:9e:1a:
                    e7:33:86:f5:13:bf:9a:47:44:c5:5c:56:a0:3e:25:
                    91:de:ba:d6:37:aa:4d:bf:4c:ea:33:6f:f6:ec:08:
                    31:62:4f:27:dc:00:02:67:5e:f6:db:69:ef:06:c0:
                    b5:07:e7:fd:f6:e1:4b:56:fd:6e:95:31:da:d4:20:
                    76:7e:ea:62:f6:b9:29:76:58:14:b5:0c:f8:76:fa:
                    55:9a:54:66:4c:65:40:e2:3b:82:92:35:ad:bb:5c:
                    da:06:ef:73:b0:96:b7:fa:d8:a6:05:c7:86:89:65:
                    41:1a:d5:60:39:9e:45:0b:d0:e0:d5:5b:96:c0:e7:
                    f2:70:52:73:d2:ec:7f:8d:05:12:76:fb:80:07:cc:
                    bc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:65:BD:A5:10:44:50:37:F4:9A:41:16:74:5B:2A:42:8C:DD:01:E3
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/V2W9pRBEUDf0mkEWdFsqQozdAeM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:8d:6c:0c:0f:37:e6:e5:27:02:a7:9a:18:af:d6:6b:9e:7e:
         76:ca:da:bc:7c:fc:35:95:1e:d6:0e:90:8f:e5:0f:4f:e4:33:
         ca:e6:10:e9:d0:94:3d:fe:1a:3f:e5:81:62:ff:de:f5:77:75:
         bb:9e:a6:54:01:e6:d5:21:73:46:ce:13:cd:3a:d4:dc:7c:7c:
         8a:72:fa:4d:9c:fa:e9:f3:16:1e:7f:62:64:ea:bd:f3:8b:ea:
         87:88:5f:ab:4b:cd:04:f9:fa:11:41:d2:b9:f8:5d:48:e0:c4:
         e6:82:eb:7d:13:d3:82:fb:7e:d9:fe:0b:ca:fc:88:5f:8e:26:
         af:54:fd:05:57:41:86:7f:9e:12:fa:0b:fb:d7:37:b3:04:3d:
         f4:42:18:d1:ce:c3:dd:7c:39:d7:ea:e5:07:de:c3:89:c3:49:
         2c:e1:a4:46:44:a4:be:0f:48:1e:9f:33:02:70:93:2f:53:5b:
         b0:43:6b:3e:fd:a9:3c:62:bc:a0:4c:d9:25:f6:28:9f:b6:d9:
         e8:ab:7f:17:64:67:97:fa:09:42:d1:8d:5e:96:3c:d5:00:dd:
         dd:76:fa:a5:ec:ea:1d:63:65:3b:92:23:f5:9d:41:96:1a:62:
         e9:a9:8f:99:08:98:a4:4f:7f:dd:30:b4:cc:2b:e5:26:1a:93:
         02:56:40:c4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzM0MjNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDU3NjVCREE1MTA0NDUw
MzdGNDlBNDExNjc0NUIyQTQyOENERDAxRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCfPPxP/AMXBAtjU3jeLjeGvhGQYHJfVjwsVDA+cwdi/4KupW5
s6s4yfyweHOkqUH6GOpr7Ih03oDTzqFzod1kZdIihLze6UNmUcYj0wQCiboF1vQa
Tzio9KvNHvYtHPLHMNQvMB8hCm5nR9fZB+GA4HDRLi2eGuczhvUTv5pHRMVcVqA+
JZHeutY3qk2/TOozb/bsCDFiTyfcAAJnXvbbae8GwLUH5/324UtW/W6VMdrUIHZ+
6mL2uSl2WBS1DPh2+lWaVGZMZUDiO4KSNa27XNoG73Owlrf62KYFx4aJZUEa1WA5
nkUL0ODVW5bA5/JwUnPS7H+NBRJ2+4AHzLxfAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUV2W9pRBEUDf0mkEWdFsqQozdAeMwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9WMlc5cFJCRVVEZjBta0VXZEZzcVFvemRBZU0u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAawwwDQYJKoZIhvcNAQELBQADggEBAI+NbAwPN+blJwKnmhiv
1muefnbK2rx8/DWVHtYOkI/lD0/kM8rmEOnQlD3+Gj/lgWL/3vV3dbueplQB5tUh
c0bOE8061Nx8fIpy+k2c+unzFh5/YmTqvfOL6oeIX6tLzQT5+hFB0rn4XUjgxOaC
630T04L7ftn+C8r8iF+OJq9U/QVXQYZ/nhL6C/vXN7MEPfRCGNHOw918Odfq5Qfe
w4nDSSzhpEZEpL4PSB6fMwJwky9TW7BDaz79qTxivKBM2SX2KJ+22eirfxdkZ5f6
CULRjV6WPNUA3d12+qXs6h1jZTuSI/WdQZYaYumpj5kImKRPf90wtMwr5SYakwJW
QMQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org