Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Zo7EU6JXm0dH59JfMIlHX2-4GUk.roa
File:                     Zo7EU6JXm0dH59JfMIlHX2-4GUk.roa (raw, json)
Hash identifier:          hJdYs/HjGB+l9UMzl3UJUiYW0lXwD2/fjfhPmFuT3L4=
Subject key identifier:   66:8E:C4:53:A2:57:9B:47:47:E7:D2:5F:30:89:47:5F:6F:B8:19:49
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       BA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Zo7EU6JXm0dH59JfMIlHX2-4GUk.roa
Signing time:             Tue 30 May 2023 16:08:28 +0000
ROA not before:           Tue 30 May 2023 16:08:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=668EC453A2579B4747E7D25F3089475F6FB81949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f8:81:21:0c:bf:33:09:b5:3d:e8:f5:71:ec:
                    28:86:48:c8:b6:31:8f:58:48:3b:b1:53:a9:5f:9e:
                    f5:dc:51:79:2e:1c:9d:c3:20:f2:88:0c:b2:57:19:
                    65:1c:45:df:78:7f:32:9a:27:b6:86:58:8e:3b:9f:
                    34:e9:65:e9:ff:1f:c5:f5:77:41:b3:a6:23:8c:e9:
                    6c:d8:a2:90:fb:cd:cd:22:11:8d:0a:a9:07:42:de:
                    d7:bd:fe:c8:ff:39:0e:a5:ed:82:08:9e:a1:1a:eb:
                    ff:f5:d9:7c:b9:c1:5f:b2:aa:8f:92:a4:26:f8:5a:
                    0d:eb:42:81:a6:3b:d3:82:ad:66:fe:c9:aa:78:c8:
                    d9:4b:09:27:50:ee:d9:95:f0:76:1e:4f:ca:64:90:
                    2d:be:16:2f:40:6d:f1:29:04:a7:34:1e:0b:0a:81:
                    7c:95:f3:ac:fd:c0:8a:66:9c:30:f3:5d:15:fb:97:
                    30:ee:97:54:67:65:37:50:55:3b:6b:92:10:db:6d:
                    7e:ca:a1:6e:ee:a0:19:54:d2:8d:92:7b:8f:27:b8:
                    7e:8e:0f:ba:68:32:c6:b5:31:07:da:77:2e:93:41:
                    e1:c7:65:e3:99:47:5c:3b:db:98:3a:cc:12:eb:18:
                    41:3e:e2:d5:16:0d:8f:e6:57:80:32:d3:53:91:1e:
                    fd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8E:C4:53:A2:57:9B:47:47:E7:D2:5F:30:89:47:5F:6F:B8:19:49
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Zo7EU6JXm0dH59JfMIlHX2-4GUk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2800::/40

    Signature Algorithm: sha256WithRSAEncryption
         53:57:6a:67:ce:6c:7c:7f:88:78:0f:6c:3a:dc:47:c8:72:ad:
         af:8b:be:2a:72:54:3f:5e:ad:83:0d:08:96:49:11:ab:79:06:
         59:f1:a7:0b:e9:76:d7:66:17:00:84:af:ed:f8:fc:ad:24:88:
         09:5d:d2:df:ba:7e:d3:9f:f8:58:5e:c0:c0:ba:bd:70:77:1c:
         ba:25:b7:53:8b:12:60:5d:87:48:b7:04:01:0b:d9:d9:36:f7:
         e8:f2:f9:c8:65:d0:75:d5:d2:a7:62:53:cf:06:5f:d7:18:1a:
         cc:21:9f:bb:30:5f:63:cc:d7:0f:0e:73:e1:8c:bb:a6:ee:5f:
         0c:40:4d:6b:92:cf:a5:c9:df:2a:ff:92:f3:7f:f2:27:ff:4a:
         96:9f:9b:6c:a9:5e:53:4a:e5:ca:08:a1:29:0d:f7:62:1d:4d:
         c1:24:80:7f:4e:f2:34:0c:b0:ae:90:2f:28:cc:cb:1f:81:2d:
         c1:38:74:49:59:11:13:12:1e:b3:86:fd:db:30:2c:9b:c3:cb:
         a5:38:0a:be:3c:df:0f:bc:1b:95:35:93:f0:47:52:4d:1a:3c:
         15:8f:57:b3:1e:84:4b:d4:c5:51:d7:03:88:20:4e:84:06:ab:
         0d:93:27:7a:4f:ec:34:9f:13:95:09:49:e7:74:5a:2b:aa:2c:
         28:8f:67:68
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICALowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NjA4MjhaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDY2OEVDNDUzQTI1NzlC
NDc0N0U3RDI1RjMwODk0NzVGNkZCODE5NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDm+IEhDL8zCbU96PVx7CiGSMi2MY9YSDuxU6lfnvXcUXkuHJ3D
IPKIDLJXGWUcRd94fzKaJ7aGWI47nzTpZen/H8X1d0GzpiOM6WzYopD7zc0iEY0K
qQdC3te9/sj/OQ6l7YIInqEa6//12Xy5wV+yqo+SpCb4Wg3rQoGmO9OCrWb+yap4
yNlLCSdQ7tmV8HYeT8pkkC2+Fi9AbfEpBKc0HgsKgXyV86z9wIpmnDDzXRX7lzDu
l1RnZTdQVTtrkhDbbX7KoW7uoBlU0o2Se48nuH6OD7poMsa1MQfady6TQeHHZeOZ
R1w725g6zBLrGEE+4tUWDY/mV4Ay01ORHv3BAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUZo7EU6JXm0dH59JfMIlHX2+4GUkwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9abzdFVTZKWG0wZEg1OUpmTUlsSFgyLTRHVWsu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAaygwDQYJKoZIhvcNAQELBQADggEBAFNXamfObHx/iHgPbDrc
R8hyra+LvipyVD9erYMNCJZJEat5BlnxpwvpdtdmFwCEr+34/K0kiAld0t+6ftOf
+FhewMC6vXB3HLolt1OLEmBdh0i3BAEL2dk29+jy+chl0HXV0qdiU88GX9cYGswh
n7swX2PM1w8Oc+GMu6buXwxATWuSz6XJ3yr/kvN/8if/Spafm2ypXlNK5coIoSkN
92IdTcEkgH9O8jQMsK6QLyjMyx+BLcE4dElZERMSHrOG/dswLJvDy6U4Cr483w+8
G5U1k/BHUk0aPBWPV7MehEvUxVHXA4ggToQGqw2TJ3pP7DSfE5UJSed0WiuqLCiP
Z2g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org