Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_lPGIqXWqL9GQhH7QWaLK5SUHLo.roa
File:                     _lPGIqXWqL9GQhH7QWaLK5SUHLo.roa (raw, json)
Hash identifier:          /fIXOrT0bweq+dMd9Nq5uoi8K2KYvRGjYkFSyWOrkQc=
Subject key identifier:   FE:53:C6:22:A5:D6:A8:BF:46:42:11:FB:41:66:8B:2B:94:94:1C:BA
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       F3
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_lPGIqXWqL9GQhH7QWaLK5SUHLo.roa
Signing time:             Tue 30 May 2023 16:12:27 +0000
ROA not before:           Tue 30 May 2023 16:12:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8c00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=FE53C622A5D6A8BF464211FB41668B2B94941CBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:45:4e:53:64:c0:0b:91:8e:78:23:01:bc:0c:
                    7c:d7:d5:ba:50:a6:cb:74:4a:f3:ee:c5:6e:cf:cd:
                    03:ef:56:c6:aa:3a:c6:0d:7b:c7:3f:6a:61:65:29:
                    2c:57:82:79:b8:fb:c0:1d:10:ef:c2:7c:82:e0:43:
                    aa:72:6f:8f:aa:6b:fb:84:47:84:8e:11:7b:c3:17:
                    73:d1:e2:04:6a:76:3b:2d:b1:cc:63:3b:e8:65:71:
                    99:8e:ba:19:2e:92:a6:3e:9d:34:5c:7a:93:ba:46:
                    40:6c:b5:ac:f0:cb:f1:df:5e:7a:ea:22:bd:12:45:
                    44:1e:bf:a4:2e:51:22:54:32:df:c8:d3:8d:02:38:
                    9e:13:3f:95:7a:0f:14:3e:04:e4:2e:77:72:c7:98:
                    1e:65:34:dc:72:92:32:24:85:f9:41:ac:5c:c9:ac:
                    0e:70:fc:29:1e:98:87:28:28:2f:f9:18:ff:71:ea:
                    22:76:15:97:df:f3:e3:ed:3f:aa:5d:a1:93:97:3f:
                    aa:a7:6f:a3:35:04:9c:fb:90:99:c9:18:fb:2e:f0:
                    50:f2:76:6d:c9:94:39:e5:48:61:06:d6:c9:d0:47:
                    4a:16:41:87:40:66:67:2a:df:e2:03:3c:f1:26:8a:
                    20:a6:b6:c4:f4:2d:a8:f7:36:47:68:11:22:84:05:
                    58:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:53:C6:22:A5:D6:A8:BF:46:42:11:FB:41:66:8B:2B:94:94:1C:BA
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_lPGIqXWqL9GQhH7QWaLK5SUHLo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a6:b2:da:c6:8e:d1:04:45:16:a2:52:0c:c5:5c:7f:59:2f:14:
         05:c7:42:3d:ee:66:52:19:f5:d1:af:d1:7f:9e:e4:fd:80:95:
         b7:d8:ed:bd:e8:90:eb:e0:4b:aa:0a:db:5a:5e:00:71:1e:5c:
         11:96:14:ca:8b:56:2a:c2:9f:99:f4:5a:c7:9b:cc:5e:ff:61:
         a7:29:fe:50:5e:04:b6:25:a9:95:5f:5f:67:45:3e:83:a7:a7:
         7e:8a:49:bf:d5:07:36:31:fe:c0:28:a6:10:98:25:84:e9:60:
         84:92:f9:f1:f1:23:fc:d3:9f:60:e2:fb:bb:f6:b4:9a:2e:af:
         9a:e6:8b:21:6b:37:c8:97:1d:47:32:6e:fb:ba:d6:c7:59:0c:
         87:b9:ce:82:ea:de:34:6f:13:24:74:30:8b:a9:bc:d3:6c:5e:
         89:6f:97:18:8a:3e:38:3f:3f:ed:f9:24:0e:cf:d7:66:20:77:
         ef:3d:b0:44:c5:10:33:21:7b:b4:2c:46:e0:3b:69:cb:eb:e3:
         ab:04:43:84:47:29:85:aa:c5:f6:b8:84:81:57:7c:40:02:38:
         9e:51:db:72:52:75:ac:a7:0b:3b:cb:ff:ea:bf:7e:3c:43:36:
         17:df:4b:6b:30:88:46:a0:55:70:3c:6c:6f:7c:9d:b4:8e:93:
         6a:a3:1e:34
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NjEyMjdaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEZFNTNDNjIyQTVENkE4
QkY0NjQyMTFGQjQxNjY4QjJCOTQ5NDFDQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnRU5TZMALkY54IwG8DHzX1bpQpst0SvPuxW7PzQPvVsaqOsYN
e8c/amFlKSxXgnm4+8AdEO/CfILgQ6pyb4+qa/uER4SOEXvDF3PR4gRqdjstscxj
O+hlcZmOuhkukqY+nTRcepO6RkBstazwy/HfXnrqIr0SRUQev6QuUSJUMt/I040C
OJ4TP5V6DxQ+BOQud3LHmB5lNNxykjIkhflBrFzJrA5w/CkemIcoKC/5GP9x6iJ2
FZff8+PtP6pdoZOXP6qnb6M1BJz7kJnJGPsu8FDydm3JlDnlSGEG1snQR0oWQYdA
Zmcq3+IDPPEmiiCmtsT0Laj3NkdoESKEBVgPAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU/lPGIqXWqL9GQhH7QWaLK5SUHLowHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9fbFBHSXFYV3FMOUdRaEg3UVdhTEs1U1VITG8u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa4wwDQYJKoZIhvcNAQELBQADggEBAKay2saO0QRFFqJSDMVc
f1kvFAXHQj3uZlIZ9dGv0X+e5P2AlbfY7b3okOvgS6oK21peAHEeXBGWFMqLVirC
n5n0WsebzF7/Yacp/lBeBLYlqZVfX2dFPoOnp36KSb/VBzYx/sAophCYJYTpYISS
+fHxI/zTn2Di+7v2tJour5rmiyFrN8iXHUcybvu61sdZDIe5zoLq3jRvEyR0MIup
vNNsXolvlxiKPjg/P+35JA7P12Ygd+89sETFEDMhe7QsRuA7acvr46sEQ4RHKYWq
xfa4hIFXfEACOJ5R23JSdaynCzvL/+q/fjxDNhffS2swiEagVXA8bG98nbSOk2qj
HjQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org