Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/b_1xe35f4WIRZITbY2t6ZWkc0UI.roa
File:                     b_1xe35f4WIRZITbY2t6ZWkc0UI.roa (raw, json)
Hash identifier:          dHJ1sLawDAOqNS0aKjf9umyOmFWSXMJMmTfpH+2gh54=
Subject key identifier:   6F:FD:71:7B:7E:5F:E1:62:11:64:84:DB:63:6B:7A:65:69:1C:D1:42
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       9E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/b_1xe35f4WIRZITbY2t6ZWkc0UI.roa
Signing time:             Tue 30 May 2023 16:08:18 +0000
ROA not before:           Tue 30 May 2023 16:08:18 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:bb00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:18 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=6FFD717B7E5FE162116484DB636B7A65691CD142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ae:0a:61:1f:95:b1:17:1e:fa:e7:d3:24:8f:
                    41:fb:55:db:64:c7:ff:12:66:37:cc:a5:ab:a6:3c:
                    4e:52:5c:82:84:47:be:8a:ad:7c:9f:23:48:64:78:
                    7f:bb:ef:2b:73:0e:b9:4f:89:9b:6a:11:e9:50:30:
                    61:a6:bf:2f:33:9b:81:14:29:c3:68:1a:0a:0c:29:
                    5f:56:93:4a:45:d3:3f:69:ad:ca:f5:3a:c8:f6:0a:
                    39:56:dc:3e:39:25:02:ba:ad:6c:da:eb:db:92:e9:
                    da:e8:f4:1f:2e:3d:15:f1:3a:ec:8f:47:d4:37:ac:
                    8e:ad:85:b3:ce:9d:e2:5f:f1:16:24:f0:21:97:dc:
                    03:3a:20:2a:76:a8:a5:44:e2:39:56:64:42:16:e5:
                    11:e7:2f:d0:e1:99:63:d5:60:00:9a:8e:b6:ff:79:
                    4b:5c:0c:97:1f:d0:1b:87:c5:c3:17:45:b2:8b:c9:
                    98:68:c7:00:2c:f5:a3:15:95:ba:21:53:e8:d9:7a:
                    28:dc:72:7d:95:91:23:f9:e2:b9:9c:d3:d4:06:fb:
                    ac:f5:bf:17:05:7d:7e:52:df:35:b3:6f:58:b4:f5:
                    f2:17:72:a6:3c:ae:52:1b:bf:36:cf:d3:73:43:e7:
                    12:12:07:02:d3:9f:94:00:37:d6:e5:36:65:26:4e:
                    6e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FD:71:7B:7E:5F:E1:62:11:64:84:DB:63:6B:7A:65:69:1C:D1:42
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/b_1xe35f4WIRZITbY2t6ZWkc0UI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:bb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         cc:90:62:2f:87:ee:47:e4:6a:8d:09:4c:60:31:ed:b0:11:fe:
         2a:d1:fc:21:07:f7:14:83:e3:bb:f2:2d:f5:91:33:62:5f:41:
         0d:b0:8f:91:69:5e:40:25:d8:de:23:6f:4b:bc:ba:db:cc:6d:
         d2:67:6c:e9:0f:72:87:3c:79:4e:af:24:93:0f:60:a8:e6:f5:
         22:a7:93:db:89:bc:ae:13:52:36:31:bf:c1:44:44:27:d9:ae:
         4b:06:05:b6:da:25:fd:53:82:f9:e1:01:b0:b1:a8:33:ab:9f:
         b8:9f:d9:5e:32:45:30:f7:50:23:dd:9e:2c:57:11:fb:3f:7b:
         56:79:47:d7:cd:cc:95:d5:ff:7a:37:87:76:57:2a:9f:10:0c:
         1f:e9:21:f3:0d:7c:82:10:a8:ea:b2:62:86:27:68:5c:69:a8:
         04:92:71:4f:8b:db:65:54:dc:a1:0f:1b:4f:e3:d3:2d:e1:90:
         6e:b3:0c:f7:5f:70:51:73:6f:37:3c:e6:8d:28:1c:96:3b:77:
         1d:55:63:e0:c1:81:35:73:9e:58:74:b1:33:4a:6a:86:66:9c:
         3c:4c:f2:b1:0e:8b:74:fd:a2:4d:22:83:88:2c:68:6c:2d:a2:
         9c:99:93:6b:3d:26:04:d2:0f:0d:65:cd:a4:99:35:b5:ae:84:
         3c:0f:52:1a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NjA4MThaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDZGRkQ3MTdCN0U1RkUx
NjIxMTY0ODREQjYzNkI3QTY1NjkxQ0QxNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWrgphH5WxFx7659Mkj0H7Vdtkx/8SZjfMpaumPE5SXIKER76K
rXyfI0hkeH+77ytzDrlPiZtqEelQMGGmvy8zm4EUKcNoGgoMKV9Wk0pF0z9prcr1
Osj2CjlW3D45JQK6rWza69uS6dro9B8uPRXxOuyPR9Q3rI6thbPOneJf8RYk8CGX
3AM6ICp2qKVE4jlWZEIW5RHnL9DhmWPVYACajrb/eUtcDJcf0BuHxcMXRbKLyZho
xwAs9aMVlbohU+jZeijccn2VkSP54rmc09QG+6z1vxcFfX5S3zWzb1i09fIXcqY8
rlIbvzbP03ND5xISBwLTn5QAN9blNmUmTm69AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUb/1xe35f4WIRZITbY2t6ZWkc0UIwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9iXzF4ZTM1ZjRXSVJaSVRiWTJ0NlpXa2MwVUku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa7swDQYJKoZIhvcNAQELBQADggEBAMyQYi+H7kfkao0JTGAx
7bAR/irR/CEH9xSD47vyLfWRM2JfQQ2wj5FpXkAl2N4jb0u8utvMbdJnbOkPcoc8
eU6vJJMPYKjm9SKnk9uJvK4TUjYxv8FERCfZrksGBbbaJf1TgvnhAbCxqDOrn7if
2V4yRTD3UCPdnixXEfs/e1Z5R9fNzJXV/3o3h3ZXKp8QDB/pIfMNfIIQqOqyYoYn
aFxpqASScU+L22VU3KEPG0/j0y3hkG6zDPdfcFFzbzc85o0oHJY7dx1VY+DBgTVz
nlh0sTNKaoZmnDxM8rEOi3T9ok0ig4gsaGwtopyZk2s9JgTSDw1lzaSZNbWuhDwP
Uho=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org