Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/W7w2GEKXiFOaX0HRppCinHTbYKI.roa
File:                     W7w2GEKXiFOaX0HRppCinHTbYKI.roa (raw, json)
Hash identifier:          u3TaXeewwMSTToMahzXDpKX+h0AGOgwOR/v+6fUd6xw=
Subject key identifier:   5B:BC:36:18:42:97:88:53:9A:5F:41:D1:A6:90:A2:9C:74:DB:60:A2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       84
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/W7w2GEKXiFOaX0HRppCinHTbYKI.roa
Signing time:             Tue 30 May 2023 16:06:26 +0000
ROA not before:           Tue 30 May 2023 16:06:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5BBC3618429788539A5F41D1A690A29C74DB60A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:58:85:e9:22:dc:b9:25:4e:c2:47:40:af:50:
                    19:fc:93:51:d9:ac:91:1b:5f:d4:75:71:d3:23:2d:
                    c9:59:b0:74:87:bd:d8:8a:fc:a0:1a:78:86:de:14:
                    76:f4:7d:17:31:e1:43:98:6a:7b:85:77:1a:97:4f:
                    a7:44:3e:6d:0c:47:0d:12:4f:de:09:18:17:0f:bd:
                    2c:b2:0d:fa:83:0f:a2:0b:63:c3:56:45:7b:e9:fe:
                    0f:a8:ff:37:09:a3:58:48:bd:00:ae:67:fb:20:f2:
                    93:d4:70:88:fd:47:a8:45:17:0b:36:cb:05:b1:c0:
                    ff:f1:6c:2b:9c:da:f4:f0:4c:34:84:e3:ef:31:b7:
                    21:8c:d1:19:32:59:8e:5d:1e:3d:85:a8:80:57:98:
                    17:62:59:37:a4:6c:34:24:16:fa:23:0a:ab:16:5a:
                    ed:0f:1a:e5:a6:e0:d3:49:c2:96:dc:cb:44:9b:eb:
                    33:17:39:00:ff:ba:c7:b2:de:1a:2f:d6:3c:00:19:
                    7b:71:ba:bb:1d:98:e8:29:b1:a9:c1:b6:37:e8:a2:
                    41:e4:82:56:70:35:84:03:82:05:a4:26:97:9c:1b:
                    24:4e:5c:89:ec:65:2a:c9:2b:df:00:ce:11:aa:fc:
                    d0:40:98:dc:4f:c3:67:a9:0a:96:33:cd:5f:4f:fe:
                    aa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BC:36:18:42:97:88:53:9A:5F:41:D1:A6:90:A2:9C:74:DB:60:A2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/W7w2GEKXiFOaX0HRppCinHTbYKI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:ff:95:70:94:e5:b3:5a:4f:64:d7:83:a1:c1:57:74:5b:eb:
         34:b8:9a:db:5c:38:bf:9f:59:9f:dc:4f:c1:61:6a:4c:53:6b:
         2e:eb:25:3c:48:e3:79:31:d7:77:0f:68:c9:ba:1d:4f:24:74:
         41:a3:d7:4c:bc:93:7b:d7:4a:73:98:8b:a2:ad:40:35:fa:22:
         9f:d0:90:d0:99:d2:80:60:45:97:6d:86:9d:42:3d:54:f8:c0:
         b2:54:01:55:ff:1e:77:4f:30:bd:5f:5f:b2:d0:fd:bf:87:2b:
         32:d6:2c:7f:5f:91:23:f6:3a:91:f9:22:cb:53:62:9d:0e:eb:
         f8:f8:e8:50:73:29:9c:9f:47:e3:73:3a:f2:56:1b:18:ac:a2:
         c8:7a:1b:cc:e5:cb:47:ad:c8:47:68:82:2d:6c:61:9a:35:3b:
         b7:cf:60:13:60:8c:5b:c5:b5:48:6d:90:1e:6e:af:59:8f:e6:
         46:55:ea:a9:32:e5:fb:2b:c3:82:e6:d4:f8:fb:31:50:51:34:
         25:06:ae:87:e1:f3:1c:1d:c7:51:f3:a6:44:ad:cf:24:c1:51:
         8c:54:9a:bc:f7:82:eb:bb:7d:08:97:30:92:9c:1b:74:01:d6:
         45:0f:fa:3b:f2:26:b1:43:7c:05:8f:8a:9d:52:58:e1:33:53:
         45:0c:7b:fa
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NjA2MjZaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDVCQkMzNjE4NDI5Nzg4
NTM5QTVGNDFEMUE2OTBBMjlDNzREQjYwQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDWIXpIty5JU7CR0CvUBn8k1HZrJEbX9R1cdMjLclZsHSHvdiK
/KAaeIbeFHb0fRcx4UOYanuFdxqXT6dEPm0MRw0ST94JGBcPvSyyDfqDD6ILY8NW
RXvp/g+o/zcJo1hIvQCuZ/sg8pPUcIj9R6hFFws2ywWxwP/xbCuc2vTwTDSE4+8x
tyGM0RkyWY5dHj2FqIBXmBdiWTekbDQkFvojCqsWWu0PGuWm4NNJwpbcy0Sb6zMX
OQD/usey3hov1jwAGXtxursdmOgpsanBtjfookHkglZwNYQDggWkJpecGyROXIns
ZSrJK98AzhGq/NBAmNxPw2epCpYzzV9P/qqJAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUW7w2GEKXiFOaX0HRppCinHTbYKIwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9XN3cyR0VLWGlGT2FYMEhScHBDaW5IVGJZS0ku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAawowDQYJKoZIhvcNAQELBQADggEBAFf/lXCU5bNaT2TXg6HB
V3Rb6zS4mttcOL+fWZ/cT8FhakxTay7rJTxI43kx13cPaMm6HU8kdEGj10y8k3vX
SnOYi6KtQDX6Ip/QkNCZ0oBgRZdthp1CPVT4wLJUAVX/HndPML1fX7LQ/b+HKzLW
LH9fkSP2OpH5IstTYp0O6/j46FBzKZyfR+NzOvJWGxisosh6G8zly0etyEdogi1s
YZo1O7fPYBNgjFvFtUhtkB5ur1mP5kZV6qky5fsrw4Lm1Pj7MVBRNCUGrofh8xwd
x1HzpkStzyTBUYxUmrz3guu7fQiXMJKcG3QB1kUP+jvyJrFDfAWPip1SWOEzU0UM
e/o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org