Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/X2XXpBuci3CxxMu9PLA0PJuM1p0.roa
File:                     X2XXpBuci3CxxMu9PLA0PJuM1p0.roa (raw, json)
Hash identifier:          FYxVkv93d4vZf0k6NeE/2buR8IQmBWWkPydMWBZizoo=
Subject key identifier:   5F:65:D7:A4:1B:9C:8B:70:B1:C4:CB:BD:3C:B0:34:3C:9B:8C:D6:9D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       1A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/X2XXpBuci3CxxMu9PLA0PJuM1p0.roa
Signing time:             Mon 27 Mar 2023 16:42:21 +0000
ROA not before:           Mon 27 Mar 2023 16:42:21 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:3c00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 27 16:42:21 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=5F65D7A41B9C8B70B1C4CBBD3CB0343C9B8CD69D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fb:9d:03:35:00:67:1b:26:4d:9c:4f:de:0a:
                    14:59:c6:a7:bc:78:a3:74:4b:4f:2f:8e:89:e1:c7:
                    55:e9:7c:8a:91:5b:d4:8c:53:69:78:b3:66:7b:0d:
                    17:c3:69:1f:bf:f0:55:95:ef:61:b5:31:00:08:58:
                    f4:40:d5:ca:9d:f6:59:af:f5:84:e7:64:7c:50:25:
                    a8:bb:66:ad:c5:b4:e9:89:e5:1d:e8:f3:52:f0:29:
                    a3:db:a3:52:df:a0:bd:1f:b1:b7:e4:94:68:ee:d5:
                    22:00:a3:18:ad:87:fb:a5:e7:bc:d3:f8:86:bc:78:
                    86:d2:ba:8d:8a:0e:95:d8:dd:ac:ee:36:21:7b:7a:
                    27:e0:79:58:16:cd:94:25:91:01:48:51:32:ea:66:
                    fe:49:98:26:85:41:87:38:9b:e2:ed:f6:4e:4b:19:
                    a4:7f:e6:2f:d2:fa:42:60:86:33:dd:49:93:42:82:
                    32:13:8f:48:5e:59:98:f7:8d:d0:c5:e2:65:3e:07:
                    f7:df:40:72:b3:5e:71:27:a1:bb:4a:5e:6e:58:68:
                    bb:76:10:74:e6:96:32:42:db:73:9a:9c:dd:63:c8:
                    9e:7d:70:b1:b6:af:2b:66:6f:8d:96:07:01:9a:13:
                    48:19:61:d4:b3:8f:e0:74:8f:30:95:f0:2d:60:45:
                    74:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:65:D7:A4:1B:9C:8B:70:B1:C4:CB:BD:3C:B0:34:3C:9B:8C:D6:9D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/X2XXpBuci3CxxMu9PLA0PJuM1p0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:3c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:1c:c5:69:c0:30:d2:27:47:ab:2e:0d:b5:77:74:1e:6a:d9:
         5f:dc:32:3a:6b:11:78:6f:9b:6a:8a:c6:1d:73:6b:fe:d3:5c:
         f7:cb:36:09:f4:32:ea:58:8b:7b:1e:54:0b:f0:b5:0f:c2:7b:
         2d:f6:e1:7b:29:9f:b7:a3:6f:fd:1d:fe:29:50:b6:42:da:06:
         d6:31:38:49:1e:43:55:1d:58:9d:44:d5:bb:d0:f9:b3:d0:6f:
         e9:bc:31:1b:e8:f6:76:f8:59:2a:ef:57:21:45:01:92:9d:83:
         1b:83:f4:06:53:3d:a4:36:4f:b6:e4:02:e5:23:f1:c6:55:bb:
         ef:ab:c5:e4:8c:73:7d:b0:d3:fe:97:39:44:bf:93:62:9b:5b:
         1a:a5:d9:80:bf:38:9a:79:89:c6:f5:05:1d:14:48:62:b7:02:
         d6:3b:7b:ae:3b:82:e0:37:e3:fc:e0:67:77:2b:cc:b2:9a:36:
         e4:59:35:8c:b1:ee:fa:9a:4c:54:4d:cc:d7:02:e9:6f:ae:50:
         14:62:6e:ca:46:10:c4:20:42:70:f2:15:35:3c:f0:8b:81:e9:
         3e:ba:7b:f3:66:6f:9e:ef:63:7a:d6:21:ec:b6:23:b2:9c:0b:
         a6:d2:be:15:15:b5:18:0e:f5:70:e6:dd:4f:14:a0:9d:2e:70:
         be:e5:c2:c7
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MTI2
MTczQjhENkIzRkYxMEUzRjAzRkIwNTYwRkU2NTUxREVBMkRCMB4XDTIzMDMyNzE2
NDIyMVoXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoNUY2NUQ3QTQxQjlDOEI3
MEIxQzRDQkJEM0NCMDM0M0M5QjhDRDY5RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALn7nQM1AGcbJk2cT94KFFnGp7x4o3RLTy+OieHHVel8ipFb1IxT
aXizZnsNF8NpH7/wVZXvYbUxAAhY9EDVyp32Wa/1hOdkfFAlqLtmrcW06YnlHejz
UvApo9ujUt+gvR+xt+SUaO7VIgCjGK2H+6XnvNP4hrx4htK6jYoOldjdrO42IXt6
J+B5WBbNlCWRAUhRMupm/kmYJoVBhzib4u32TksZpH/mL9L6QmCGM91Jk0KCMhOP
SF5ZmPeN0MXiZT4H999AcrNecSehu0peblhou3YQdOaWMkLbc5qc3WPInn1wsbav
K2ZvjZYHAZoTSBlh1LOP4HSPMJXwLWBFdGsCAwEAAaOCAiowggImMB0GA1UdDgQW
BBRfZdekG5yLcLHEy708sDQ8m4zWnTAfBgNVHSMEGDAWgBRRJhc7jWs/8Q4/A/sF
YP5lUd6i2zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMjkvVVNZWE80MXJQX0VPUHdQN0JXRC1aVkhlb3RzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVVNZWE80MXJQX0VPUHdQN0JXRC1a
Vkhlb3RzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTI5L1gyWFhwQnVjaTNDeHhNdTlQTEEwUEp1TTFwMC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkCgBhPDANBgkqhkiG9w0BAQsFAAOCAQEAXxzFacAw0idHqy4NtXd0
HmrZX9wyOmsReG+baorGHXNr/tNc98s2CfQy6liLex5UC/C1D8J7Lfbheymft6Nv
/R3+KVC2QtoG1jE4SR5DVR1YnUTVu9D5s9Bv6bwxG+j2dvhZKu9XIUUBkp2DG4P0
BlM9pDZPtuQC5SPxxlW776vF5IxzfbDT/pc5RL+TYptbGqXZgL84mnmJxvUFHRRI
YrcC1jt7rjuC4Dfj/OBndyvMspo25Fk1jLHu+ppMVE3M1wLpb65QFGJuykYQxCBC
cPIVNTzwi4HpPrp782Zvnu9jetYh7LYjspwLptK+FRW1GA71cObdTxSgnS5wvuXC
xw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org