Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZO_-M3q9BHH8_V_GhzwTZq8mV8I.roa
File:                     ZO_-M3q9BHH8_V_GhzwTZq8mV8I.roa (raw, json)
Hash identifier:          qjH0j+dNfSGeTFqcuntYqjicJzEcX074j1iBwd8a0yA=
Subject key identifier:   64:EF:FE:33:7A:BD:04:71:FC:FD:5F:C6:87:3C:13:66:AF:26:57:C2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01D5
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZO_-M3q9BHH8_V_GhzwTZq8mV8I.roa
Signing time:             Tue 30 May 2023 17:38:25 +0000
ROA not before:           Tue 30 May 2023 17:38:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6300::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=64EFFE337ABD0471FCFD5FC6873C1366AF2657C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:87:91:97:38:d9:36:52:4a:fe:24:1a:b9:94:
                    ce:ee:c6:18:30:f6:e6:df:b4:12:c9:4b:8f:97:61:
                    88:0b:56:ae:ad:64:24:58:f5:c3:e9:75:1f:c2:ed:
                    1e:25:e9:fe:7f:5e:b1:90:e9:4d:6a:42:d9:30:70:
                    d8:cb:73:3a:19:e9:86:9b:6a:5a:da:36:af:c1:37:
                    12:34:c2:c8:b1:df:7c:10:ec:71:cf:a7:84:9c:3e:
                    d7:2e:75:58:c9:4a:2a:f8:6d:f8:a4:07:43:cb:7a:
                    e3:c4:81:ea:f5:fb:a1:8e:ac:3e:b6:71:7a:59:dd:
                    a2:99:3a:72:49:a1:ef:06:47:b1:fa:f6:f8:26:d6:
                    7a:c0:4a:65:13:15:19:98:c0:7a:b8:43:b8:fe:f3:
                    3a:6e:3d:57:93:a9:81:fa:76:6b:d3:45:4b:8f:df:
                    c6:32:46:a7:34:8d:b1:c8:e8:28:af:c4:7b:16:f0:
                    1b:f0:16:84:18:94:86:e7:dd:6b:cf:97:7f:48:b0:
                    f9:3c:7f:b5:db:ea:75:cc:71:fc:cc:9f:95:9a:26:
                    ac:05:66:54:24:89:81:2e:f9:90:f5:6a:c1:96:89:
                    91:a3:06:76:8e:ef:c0:eb:da:cb:e8:fc:2b:c9:68:
                    0e:06:f8:04:93:2f:08:dd:f9:ec:ff:e4:9f:a4:fd:
                    62:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EF:FE:33:7A:BD:04:71:FC:FD:5F:C6:87:3C:13:66:AF:26:57:C2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZO_-M3q9BHH8_V_GhzwTZq8mV8I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6300::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:6d:d3:5b:81:7b:70:33:de:cf:23:75:45:f0:62:4b:b3:82:
         ac:4f:12:37:ee:50:a5:4f:f8:60:57:a9:ff:04:c2:01:dc:0c:
         c2:55:e7:70:b6:e9:c5:91:55:3d:74:10:25:65:bf:a0:9c:6b:
         9f:c9:b0:27:3c:3a:63:62:16:82:02:ff:1e:be:5e:0e:32:c9:
         7a:cb:be:ad:4e:ed:86:3b:a4:75:66:2f:a9:22:44:4f:3b:c1:
         6d:dd:dc:91:4b:ec:ba:49:2f:f2:36:c8:22:8e:88:11:48:2d:
         7b:ca:82:0e:34:bb:0e:c8:9f:77:a4:a0:60:9d:82:8b:a4:94:
         82:1d:fe:8b:da:44:dd:7c:68:bf:a3:d3:59:2b:1e:90:3a:4c:
         15:6b:58:76:3b:a6:0e:bd:f2:9f:f6:1f:49:1f:c2:37:ab:c4:
         25:fe:4f:75:0d:3e:54:c8:3e:a8:fd:e2:80:25:7b:2a:11:f1:
         65:03:e2:10:9a:fd:35:2c:3a:29:b0:92:d2:bc:9f:20:63:fb:
         f2:09:6a:b5:16:77:72:63:de:c0:23:07:59:76:d3:55:41:8f:
         51:b1:05:5c:d0:3f:6c:3a:bc:5c:d9:a4:01:e7:c3:59:94:d5:
         ff:29:e1:ad:c0:e1:23:15:e5:6e:4a:67:48:db:23:67:d6:9d:
         1d:79:d1:63
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzM4MjVaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDY0RUZGRTMzN0FCRDA0
NzFGQ0ZENUZDNjg3M0MxMzY2QUYyNjU3QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4h5GXONk2Ukr+JBq5lM7uxhgw9ubftBLJS4+XYYgLVq6tZCRY
9cPpdR/C7R4l6f5/XrGQ6U1qQtkwcNjLczoZ6YabalraNq/BNxI0wsix33wQ7HHP
p4ScPtcudVjJSir4bfikB0PLeuPEger1+6GOrD62cXpZ3aKZOnJJoe8GR7H69vgm
1nrASmUTFRmYwHq4Q7j+8zpuPVeTqYH6dmvTRUuP38YyRqc0jbHI6CivxHsW8Bvw
FoQYlIbn3WvPl39IsPk8f7Xb6nXMcfzMn5WaJqwFZlQkiYEu+ZD1asGWiZGjBnaO
78Dr2svo/CvJaA4G+ASTLwjd+ez/5J+k/WJNAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUZO/+M3q9BHH8/V/GhzwTZq8mV8IwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9aT18tTTNxOUJISDhfVl9HaHp3VFpxOG1WOEku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa2MwDQYJKoZIhvcNAQELBQADggEBAAlt01uBe3Az3s8jdUXw
YkuzgqxPEjfuUKVP+GBXqf8EwgHcDMJV53C26cWRVT10ECVlv6Cca5/JsCc8OmNi
FoIC/x6+Xg4yyXrLvq1O7YY7pHVmL6kiRE87wW3d3JFL7LpJL/I2yCKOiBFILXvK
gg40uw7In3ekoGCdgouklIId/ovaRN18aL+j01krHpA6TBVrWHY7pg698p/2H0kf
wjerxCX+T3UNPlTIPqj94oAleyoR8WUD4hCa/TUsOimwktK8nyBj+/IJarUWd3Jj
3sAjB1l201VBj1GxBVzQP2w6vFzZpAHnw1mU1f8p4a3A4SMV5W5KZ0jbI2fWnR15
0WM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org