Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WCZ9rDGimS98eJ_jc4dUrm0DS_w.roa
File:                     WCZ9rDGimS98eJ_jc4dUrm0DS_w.roa (raw, json)
Hash identifier:          HSOgukrN5NYbTlW7FbAd+cX4nOj6ZHPxbvSsjddkZWs=
Subject key identifier:   58:26:7D:AC:31:A2:99:2F:7C:78:9F:E3:73:87:54:AE:6D:03:4B:FC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0111
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WCZ9rDGimS98eJ_jc4dUrm0DS_w.roa
Signing time:             Tue 30 May 2023 16:14:16 +0000
ROA not before:           Tue 30 May 2023 16:14:16 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:14:16 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=58267DAC31A2992F7C789FE3738754AE6D034BFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:40:6e:2c:46:19:6a:58:39:70:b5:68:58:a3:
                    93:f0:b4:b7:81:2a:11:c3:70:96:ec:fa:05:84:0d:
                    88:54:43:07:d0:c6:57:65:85:95:ba:63:21:37:0f:
                    8b:52:d6:c6:aa:9d:c4:1d:fd:43:29:52:cb:9d:f6:
                    33:37:ab:53:b8:2d:04:c8:2d:4d:57:b4:75:ac:e5:
                    e2:f8:6b:2b:87:10:69:f1:cb:0e:af:aa:cd:03:76:
                    3a:e5:d3:f3:ad:45:44:76:fa:92:20:ac:59:eb:e8:
                    01:67:ac:5a:66:9c:1f:2e:51:1e:25:25:6b:a7:9a:
                    95:a1:79:d5:4e:40:1d:2b:b5:2e:56:c9:2b:f1:a9:
                    e4:e5:17:32:ee:10:33:1b:2b:05:51:35:4e:ae:40:
                    20:83:d7:30:33:c3:6f:c2:90:8b:d2:18:d9:06:02:
                    a9:c2:98:b9:7e:5c:34:26:c9:2a:20:7b:b3:c4:5c:
                    68:8b:91:2b:92:03:c2:1f:19:1c:2b:04:2d:11:c2:
                    b1:da:91:15:a1:ca:49:49:a6:d6:6d:b4:a3:c8:20:
                    81:e5:24:d1:7f:0f:be:c3:77:e8:4b:a0:d0:70:51:
                    45:8f:3f:58:89:02:40:e3:e7:a7:0d:8d:4b:ce:f7:
                    44:60:4f:9c:b4:13:a6:d3:76:12:e2:5e:1a:ea:f8:
                    f3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:26:7D:AC:31:A2:99:2F:7C:78:9F:E3:73:87:54:AE:6D:03:4B:FC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WCZ9rDGimS98eJ_jc4dUrm0DS_w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:0c:28:fd:64:2f:b9:3a:ba:82:14:ce:49:21:5f:25:ba:b6:
         8c:d5:fa:a2:80:c0:cb:19:a0:ba:7d:11:3c:cd:c0:37:a5:ce:
         90:f0:80:fa:3a:9a:dd:e5:47:c1:2f:7d:34:78:ee:88:e8:fc:
         f1:60:8d:56:06:1b:4c:af:8f:b9:8a:73:3e:b5:15:03:05:c9:
         c5:56:90:78:24:83:4f:df:60:b4:5e:1c:a7:10:3c:51:32:98:
         b4:e0:09:61:d8:c3:6c:ce:29:b1:23:df:ff:3e:4d:7d:67:d3:
         2d:73:43:3a:6c:b2:b0:b7:0b:a3:69:15:c8:cd:d4:ce:1c:f3:
         14:2d:51:a1:18:5e:ef:87:93:77:77:52:2e:21:38:6e:c5:b1:
         5b:71:52:77:7f:ce:19:bd:aa:df:88:24:bd:81:57:ac:2a:17:
         88:31:4b:20:c4:5b:4c:7e:f0:f1:8c:b8:a0:ec:8f:b0:d7:eb:
         64:30:ce:26:32:6c:b2:22:01:d1:cf:e9:55:2a:2e:b8:c9:fb:
         5f:f8:b2:d4:bc:b6:70:91:a5:09:d6:50:da:48:6c:f5:59:87:
         49:3c:90:dd:25:42:cb:63:33:78:5f:6a:bb:79:9f:a2:10:15:
         0a:cd:00:6c:2a:a5:31:73:ac:92:a2:c0:14:33:34:57:f8:df:
         14:17:6f:52
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAREwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NjE0MTZaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDU4MjY3REFDMzFBMjk5
MkY3Qzc4OUZFMzczODc1NEFFNkQwMzRCRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOQG4sRhlqWDlwtWhYo5PwtLeBKhHDcJbs+gWEDYhUQwfQxldl
hZW6YyE3D4tS1saqncQd/UMpUsud9jM3q1O4LQTILU1XtHWs5eL4ayuHEGnxyw6v
qs0Ddjrl0/OtRUR2+pIgrFnr6AFnrFpmnB8uUR4lJWunmpWhedVOQB0rtS5WySvx
qeTlFzLuEDMbKwVRNU6uQCCD1zAzw2/CkIvSGNkGAqnCmLl+XDQmySoge7PEXGiL
kSuSA8IfGRwrBC0RwrHakRWhyklJptZttKPIIIHlJNF/D77Dd+hLoNBwUUWPP1iJ
AkDj56cNjUvO90RgT5y0E6bTdhLiXhrq+PNfAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUWCZ9rDGimS98eJ/jc4dUrm0DS/wwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9XQ1o5ckRHaW1TOThlSl9qYzRkVXJtMERTX3cu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAaw8wDQYJKoZIhvcNAQELBQADggEBAAoMKP1kL7k6uoIUzkkh
XyW6tozV+qKAwMsZoLp9ETzNwDelzpDwgPo6mt3lR8EvfTR47ojo/PFgjVYGG0yv
j7mKcz61FQMFycVWkHgkg0/fYLReHKcQPFEymLTgCWHYw2zOKbEj3/8+TX1n0y1z
QzpssrC3C6NpFcjN1M4c8xQtUaEYXu+Hk3d3Ui4hOG7FsVtxUnd/zhm9qt+IJL2B
V6wqF4gxSyDEW0x+8PGMuKDsj7DX62QwziYybLIiAdHP6VUqLrjJ+1/4stS8tnCR
pQnWUNpIbPVZh0k8kN0lQstjM3hfart5n6IQFQrNAGwqpTFzrJKiwBQzNFf43xQX
b1I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org