Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/a5knKdYo1u3X1BnMwzTJEA1OJwU.roa
File:                     a5knKdYo1u3X1BnMwzTJEA1OJwU.roa (raw, json)
Hash identifier:          IY9HaxQvC96RdLaiqjxk+olbGkxNmMoYZ49jKxeVRtw=
Subject key identifier:   6B:99:27:29:D6:28:D6:ED:D7:D4:19:CC:C3:34:C9:10:0D:4E:27:05
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0251
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/a5knKdYo1u3X1BnMwzTJEA1OJwU.roa
Signing time:             Thu 08 Jun 2023 16:26:15 +0000
ROA not before:           Thu 08 Jun 2023 16:26:15 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:3:bcc::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun  8 16:26:15 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=6B992729D628D6EDD7D419CCC334C9100D4E2705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e0:6a:93:1d:6a:64:05:f1:be:9f:b7:8c:4f:
                    b5:f5:5f:56:48:24:0e:1b:f4:27:9d:4f:ce:9c:05:
                    19:cc:e3:e5:ae:51:e4:1e:46:5e:c1:00:20:99:22:
                    c4:e0:f1:fa:88:8c:cf:12:6d:aa:1e:3d:db:a7:e0:
                    91:09:9f:53:0b:ec:db:50:0b:30:17:e5:5b:aa:dd:
                    a8:ca:c9:d1:d2:e7:96:79:46:25:36:c0:72:e4:75:
                    26:5f:70:fa:37:03:de:b3:45:cf:d1:0c:a9:a6:71:
                    62:d6:6c:32:75:be:18:b7:9d:26:89:06:64:69:61:
                    01:89:e9:51:a6:eb:28:15:a9:54:57:eb:65:3d:86:
                    67:e5:ae:a3:a9:0a:6a:53:4c:8e:12:d8:16:68:0f:
                    9c:bf:33:26:6b:b8:50:f5:8f:6f:1d:a1:5b:da:0d:
                    fb:1c:ea:6d:92:9c:bb:48:6b:e9:5d:d6:2e:2e:38:
                    af:c3:ec:84:5b:e8:72:d0:89:4c:cf:95:22:36:67:
                    1a:12:8c:24:13:d2:5e:a7:f9:72:54:e0:3f:c7:3b:
                    9f:d8:c3:60:82:54:de:b6:bc:e8:3d:39:46:82:c0:
                    fb:d4:fa:fc:dd:63:92:85:81:4c:ee:15:61:57:b7:
                    af:96:c3:9d:df:5d:d5:be:f2:d7:76:11:d1:bd:07:
                    f0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:99:27:29:D6:28:D6:ED:D7:D4:19:CC:C3:34:C9:10:0D:4E:27:05
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/a5knKdYo1u3X1BnMwzTJEA1OJwU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:3:bcc::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:2c:0b:37:30:aa:83:b8:57:84:53:bf:d9:ed:59:71:11:b5:
         f4:20:61:a3:27:52:a5:cd:86:84:8b:83:00:b0:d3:c2:74:d4:
         cf:74:70:eb:b1:64:0f:3c:dd:a3:e4:43:e4:63:73:04:2d:48:
         c8:d9:14:f8:a0:5e:6a:99:2d:53:b8:01:21:7b:75:c3:b2:f8:
         79:86:4d:61:d7:db:b8:a3:83:37:af:ad:12:75:2f:ea:d6:d7:
         96:9c:d3:ab:e7:26:85:e3:6a:21:d0:1a:1e:86:53:60:dd:7d:
         a1:93:ad:ce:5c:eb:56:aa:da:6e:95:ab:36:11:be:ac:ab:ab:
         75:35:ab:8e:a9:50:9e:29:29:37:fa:97:41:c6:d1:64:0c:e9:
         ef:0f:f1:0f:3c:db:7e:04:dd:85:0a:8d:88:44:27:65:97:6b:
         c3:c8:97:43:60:3e:4b:51:7c:8c:6a:34:d4:aa:49:ae:e0:ea:
         a0:1e:28:ce:7c:3f:27:e5:d8:bd:a6:2c:bd:44:95:04:14:36:
         7a:1f:10:a0:0f:31:9f:29:25:be:d4:4d:c2:b9:ee:d4:28:86:
         e9:5a:7c:f2:c1:62:7d:05:ad:f7:34:e7:8e:bc:8b:97:11:4a:
         09:40:65:21:45:7c:b6:ec:fa:b0:26:7f:7d:35:64:6d:2f:5a:
         ab:7d:13:74
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA2MDgx
NjI2MTVaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDZCOTkyNzI5RDYyOEQ2
RUREN0Q0MTlDQ0MzMzRDOTEwMEQ0RTI3MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDs4GqTHWpkBfG+n7eMT7X1X1ZIJA4b9CedT86cBRnM4+WuUeQe
Rl7BACCZIsTg8fqIjM8SbaoePdun4JEJn1ML7NtQCzAX5Vuq3ajKydHS55Z5RiU2
wHLkdSZfcPo3A96zRc/RDKmmcWLWbDJ1vhi3nSaJBmRpYQGJ6VGm6ygVqVRX62U9
hmflrqOpCmpTTI4S2BZoD5y/MyZruFD1j28doVvaDfsc6m2SnLtIa+ld1i4uOK/D
7IRb6HLQiUzPlSI2ZxoSjCQT0l6n+XJU4D/HO5/Yw2CCVN62vOg9OUaCwPvU+vzd
Y5KFgUzuFWFXt6+Ww53fXdW+8td2EdG9B/CBAgMBAAGjggIrMIICJzAdBgNVHQ4E
FgQUa5knKdYo1u3X1BnMwzTJEA1OJwUwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9hNWtuS2RZbzF1M1gxQm5Nd3pUSkVBMU9Kd1Uu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAoAAwvMMA0GCSqGSIb3DQEBCwUAA4IBAQBnLAs3MKqDuFeEU7/Z
7VlxEbX0IGGjJ1KlzYaEi4MAsNPCdNTPdHDrsWQPPN2j5EPkY3MELUjI2RT4oF5q
mS1TuAEhe3XDsvh5hk1h19u4o4M3r60SdS/q1teWnNOr5yaF42oh0BoehlNg3X2h
k63OXOtWqtpulas2Eb6sq6t1NauOqVCeKSk3+pdBxtFkDOnvD/EPPNt+BN2FCo2I
RCdll2vDyJdDYD5LUXyMajTUqkmu4OqgHijOfD8n5di9piy9RJUEFDZ6HxCgDzGf
KSW+1E3Cue7UKIbpWnzywWJ9Ba33NOeOvIuXEUoJQGUhRXy27PqwJn99NWRtL1qr
fRN0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org