Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bAXjtGR_7ddGO7R85vBCUQxEX-M.roa
File:                     bAXjtGR_7ddGO7R85vBCUQxEX-M.roa (raw, json)
Hash identifier:          YE/ANo3+FIGSYJQMfiDOy5ExFsHdKvNgMh3RR/egmsU=
Subject key identifier:   6C:05:E3:B4:64:7F:ED:D7:46:3B:B4:7C:E6:F0:42:51:0C:44:5F:E3
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01EC
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bAXjtGR_7ddGO7R85vBCUQxEX-M.roa
Signing time:             Tue 30 May 2023 17:38:32 +0000
ROA not before:           Tue 30 May 2023 17:38:32 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:d100::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:32 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=6C05E3B4647FEDD7463BB47CE6F042510C445FE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8b:88:93:08:c6:2c:ba:a4:4e:b9:2d:39:29:
                    17:93:1f:9e:0e:bf:65:69:53:73:5f:db:e4:3d:60:
                    39:c0:38:71:b8:e9:98:fc:65:43:8c:da:2f:6d:c2:
                    d2:a8:46:ce:2c:90:32:13:38:93:36:cb:52:29:61:
                    55:35:51:d2:c2:87:78:4b:92:17:b1:82:af:59:ec:
                    5e:c4:57:40:bb:15:a4:db:e8:b6:b0:ec:a1:a1:63:
                    75:3c:36:57:00:bf:57:e4:9e:01:ed:9c:9e:8d:77:
                    e3:01:d8:32:c9:83:08:69:e7:86:05:ef:af:c8:8f:
                    11:d7:25:44:fa:ae:40:ce:66:29:7c:83:88:e9:72:
                    f1:3e:99:d2:8e:05:77:04:ef:25:0d:d7:52:85:9c:
                    7d:1e:6a:af:cb:52:d5:74:e0:0f:47:09:af:9e:64:
                    a5:ab:e9:5e:eb:53:0c:33:2f:a5:b0:a7:f1:45:4a:
                    c4:a0:a5:cc:71:ac:94:44:a9:d4:5c:b7:6e:c5:c9:
                    55:84:50:c6:72:5a:21:f7:84:93:af:2f:98:0c:0c:
                    2d:2b:1c:56:13:35:aa:78:3d:8f:5d:57:67:ee:7d:
                    65:3e:31:89:f3:44:97:33:6b:96:5e:e3:af:58:23:
                    59:97:7f:4d:e7:30:ca:fd:70:6c:57:74:ed:3e:44:
                    c1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:05:E3:B4:64:7F:ED:D7:46:3B:B4:7C:E6:F0:42:51:0C:44:5F:E3
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bAXjtGR_7ddGO7R85vBCUQxEX-M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d100::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:b5:35:17:0c:92:4d:ea:01:52:f3:aa:61:0b:d9:ea:f3:65:
         b5:a5:c5:64:62:e4:07:04:88:16:d4:a4:a8:19:44:cd:13:0a:
         aa:e3:5a:19:1d:ce:fb:6e:3e:d9:c9:06:01:86:ab:5c:c0:fb:
         85:76:08:11:82:9a:aa:17:48:b0:59:d1:5b:49:e2:9c:55:2c:
         01:c6:ac:3e:6f:9a:75:e4:a8:be:c5:bf:ce:8c:15:5b:96:6b:
         e0:1b:bb:7b:20:41:4c:a6:a9:5a:d4:23:1b:af:d5:c2:31:4a:
         e3:c3:57:08:ac:d2:13:ca:34:65:8d:72:d7:16:3c:35:51:17:
         53:ef:a5:79:62:2c:5a:e5:15:64:74:d6:c7:b1:10:26:3a:9f:
         d5:c8:ac:86:e7:b1:10:65:e1:f3:0f:d8:26:56:8f:d6:4d:6d:
         9b:54:4e:90:bc:ec:8a:9c:d3:f1:c6:a0:49:63:35:5e:72:42:
         bf:f8:11:eb:f5:d3:ec:60:78:53:75:ad:d9:c1:a5:b8:09:c4:
         cc:ae:1c:0c:a6:74:be:bf:f7:98:06:87:89:10:f1:d3:e9:60:
         76:27:1c:2e:67:bc:bb:f7:79:01:3e:8f:57:fc:05:46:ed:64:
         b4:58:2b:6c:6b:06:54:e5:1e:ff:85:fa:a6:7f:0f:b9:b2:98:
         33:e3:40:6e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAewwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzM4MzJaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDZDMDVFM0I0NjQ3RkVE
RDc0NjNCQjQ3Q0U2RjA0MjUxMEM0NDVGRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdi4iTCMYsuqROuS05KReTH54Ov2VpU3Nf2+Q9YDnAOHG46Zj8
ZUOM2i9twtKoRs4skDITOJM2y1IpYVU1UdLCh3hLkhexgq9Z7F7EV0C7FaTb6Law
7KGhY3U8NlcAv1fkngHtnJ6Nd+MB2DLJgwhp54YF76/IjxHXJUT6rkDOZil8g4jp
cvE+mdKOBXcE7yUN11KFnH0eaq/LUtV04A9HCa+eZKWr6V7rUwwzL6Wwp/FFSsSg
pcxxrJREqdRct27FyVWEUMZyWiH3hJOvL5gMDC0rHFYTNap4PY9dV2fufWU+MYnz
RJcza5Ze469YI1mXf03nMMr9cGxXdO0+RME5AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUbAXjtGR/7ddGO7R85vBCUQxEX+MwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9iQVhqdEdSXzdkZEdPN1I4NXZCQ1VReEVYLU0u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa9EwDQYJKoZIhvcNAQELBQADggEBACm1NRcMkk3qAVLzqmEL
2erzZbWlxWRi5AcEiBbUpKgZRM0TCqrjWhkdzvtuPtnJBgGGq1zA+4V2CBGCmqoX
SLBZ0VtJ4pxVLAHGrD5vmnXkqL7Fv86MFVuWa+Abu3sgQUymqVrUIxuv1cIxSuPD
Vwis0hPKNGWNctcWPDVRF1PvpXliLFrlFWR01sexECY6n9XIrIbnsRBl4fMP2CZW
j9ZNbZtUTpC87Iqc0/HGoEljNV5yQr/4Eev10+xgeFN1rdnBpbgJxMyuHAymdL6/
95gGh4kQ8dPpYHYnHC5nvLv3eQE+j1f8BUbtZLRYK2xrBlTlHv+F+qZ/D7mymDPj
QG4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org