Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/VGMfQ85x81u59Eh0dVUEMlDMwgk.roa
File:                     VGMfQ85x81u59Eh0dVUEMlDMwgk.roa (raw, json)
Hash identifier:          oATTqnmj7srw+g1vdmMsWMe75u/Jh2BRh2lNm43CZ30=
Subject key identifier:   54:63:1F:43:CE:71:F3:5B:B9:F4:48:74:75:55:04:32:50:CC:C2:09
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01ED
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/VGMfQ85x81u59Eh0dVUEMlDMwgk.roa
Signing time:             Tue 30 May 2023 17:38:32 +0000
ROA not before:           Tue 30 May 2023 17:38:32 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:d800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:32 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=54631F43CE71F35BB9F448747555043250CCC209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:f7:b2:01:94:33:38:3b:02:2c:92:61:cd:
                    5e:3b:69:79:67:2a:12:f5:e0:37:63:ae:0a:d7:9f:
                    e9:1c:b2:56:80:cf:c3:d7:27:ae:a3:70:a6:d0:a9:
                    85:63:53:13:0d:0d:23:c3:b8:ad:d6:87:af:c1:d8:
                    9f:74:80:24:a3:9b:74:7d:5c:84:51:5d:8a:23:95:
                    0d:27:cf:18:ba:78:77:85:25:df:8b:6f:25:a6:64:
                    a4:9d:16:53:f3:52:13:d5:8e:00:ca:33:8a:08:61:
                    38:ff:39:29:55:e9:fd:e9:9a:d3:a1:5f:42:58:a3:
                    4f:f4:e7:69:b1:14:1f:ce:c0:d2:eb:9f:e2:73:9e:
                    62:b0:cd:d1:5a:e4:a0:60:ba:b8:e5:6e:ee:2a:f7:
                    5a:64:a4:88:22:b9:0c:3c:5b:5b:7f:8c:60:6a:fd:
                    4c:74:c8:ab:67:7d:32:ec:4a:a7:c7:92:2e:08:39:
                    51:e0:81:31:c5:ab:2b:8b:d4:c9:99:10:2d:b9:73:
                    68:e5:e5:33:87:e6:97:5d:67:44:40:63:51:3f:e1:
                    96:ea:f0:6e:80:f6:d8:21:98:57:ba:c8:d0:13:7d:
                    c7:cf:2e:65:90:e4:5d:77:6b:36:81:d1:a4:11:f8:
                    27:f4:88:a7:42:4a:e9:68:09:6e:32:3e:d8:a3:9a:
                    bd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:63:1F:43:CE:71:F3:5B:B9:F4:48:74:75:55:04:32:50:CC:C2:09
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/VGMfQ85x81u59Eh0dVUEMlDMwgk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d800::/40

    Signature Algorithm: sha256WithRSAEncryption
         a5:b2:cb:a5:96:50:d7:4b:16:aa:a0:ec:7f:5b:3f:bd:60:cc:
         6a:a2:52:f3:b4:d9:fc:c9:22:6a:28:1a:a4:95:25:50:c0:a5:
         a5:50:b1:fc:1c:a9:87:ff:fe:ac:8b:a2:7c:0a:b8:ba:cd:24:
         8c:46:7b:36:1a:f3:52:e8:c3:4d:52:a3:04:01:67:8c:a3:a1:
         cc:ce:5b:19:17:6a:c0:13:d2:c6:6f:60:3b:a4:99:3b:32:71:
         32:76:cd:b1:8d:97:76:fd:13:03:bd:bc:b6:81:3e:e5:75:d9:
         13:47:eb:b8:ad:6c:79:b2:b2:82:82:37:cf:3c:1a:05:b0:35:
         fe:0e:7b:c7:15:ea:31:4e:87:da:96:8b:98:1c:d7:58:3f:84:
         ab:78:1b:8d:d1:55:b7:9c:7a:06:a8:93:8e:f0:2c:b8:44:e7:
         00:b5:75:81:d7:48:27:27:2c:5a:a3:02:7c:c1:a7:d3:9d:32:
         a3:94:e0:b0:91:db:62:6c:19:3f:9d:44:f7:f8:e9:d3:60:1f:
         d1:c8:a9:7e:ee:dd:5d:70:e4:47:12:5f:27:08:7f:0c:43:d3:
         8b:ee:60:0b:fb:d8:1c:72:51:68:c7:d6:48:97:13:66:8f:87:
         54:cb:6f:12:dd:0a:22:80:79:d3:69:57:16:71:d5:1a:0d:35:
         3d:ae:fe:71
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzM4MzJaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDU0NjMxRjQzQ0U3MUYz
NUJCOUY0NDg3NDc1NTUwNDMyNTBDQ0MyMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuTfeyAZQzODsCLJJhzV47aXlnKhL14DdjrgrXn+kcslaAz8PX
J66jcKbQqYVjUxMNDSPDuK3Wh6/B2J90gCSjm3R9XIRRXYojlQ0nzxi6eHeFJd+L
byWmZKSdFlPzUhPVjgDKM4oIYTj/OSlV6f3pmtOhX0JYo0/052mxFB/OwNLrn+Jz
nmKwzdFa5KBgurjlbu4q91pkpIgiuQw8W1t/jGBq/Ux0yKtnfTLsSqfHki4IOVHg
gTHFqyuL1MmZEC25c2jl5TOH5pddZ0RAY1E/4Zbq8G6A9tghmFe6yNATfcfPLmWQ
5F13azaB0aQR+Cf0iKdCSuloCW4yPtijmr0JAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUVGMfQ85x81u59Eh0dVUEMlDMwgkwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9WR01mUTg1eDgxdTU5RWgwZFZVRU1sRE13Z2su
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa9gwDQYJKoZIhvcNAQELBQADggEBAKWyy6WWUNdLFqqg7H9b
P71gzGqiUvO02fzJImooGqSVJVDApaVQsfwcqYf//qyLonwKuLrNJIxGezYa81Lo
w01SowQBZ4yjoczOWxkXasAT0sZvYDukmTsycTJ2zbGNl3b9EwO9vLaBPuV12RNH
67itbHmysoKCN888GgWwNf4Oe8cV6jFOh9qWi5gc11g/hKt4G43RVbecegaok47w
LLhE5wC1dYHXSCcnLFqjAnzBp9OdMqOU4LCR22JsGT+dRPf46dNgH9HIqX7u3V1w
5EcSXycIfwxD04vuYAv72BxyUWjH1kiXE2aPh1TLbxLdCiKAedNpVxZx1RoNNT2u
/nE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org