Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bzWMwjxYkwvzgYNRisFNI7ChaL8.roa
File:                     bzWMwjxYkwvzgYNRisFNI7ChaL8.roa (raw, json)
Hash identifier:          lhh0/1pT6k4BavfB4ujlaD7D5I/CB7wSksv+JlxIVbQ=
Subject key identifier:   6F:35:8C:C2:3C:58:93:0B:F3:81:83:51:8A:C1:4D:23:B0:A1:68:BF
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       2C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bzWMwjxYkwvzgYNRisFNI7ChaL8.roa
Signing time:             Tue 30 May 2023 16:02:08 +0000
ROA not before:           Tue 30 May 2023 16:02:08 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1900::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:02:08 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=6F358CC23C58930BF38183518AC14D23B0A168BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:aa:58:82:e3:2f:85:65:17:2e:4d:8d:a4:d3:
                    e1:bf:3e:20:64:1a:00:c9:94:0b:d5:89:d8:b3:f1:
                    ff:40:6e:42:20:8c:56:4e:44:10:56:83:33:05:f3:
                    ff:4f:63:e9:30:e1:c6:60:3e:23:d8:b7:61:c4:12:
                    2e:a6:0a:82:57:5d:24:42:9e:0e:ac:11:33:63:81:
                    19:3a:90:e8:3d:eb:13:f4:65:ed:e2:47:33:05:56:
                    53:a9:b8:47:39:a6:96:ea:b2:93:e1:f7:a3:84:7b:
                    ae:4f:4c:88:9a:2c:74:60:04:dd:c0:2d:c7:a2:60:
                    ff:ba:28:df:47:b8:2d:f7:8e:5c:93:b9:55:48:ab:
                    85:f6:ed:05:13:5a:4f:40:65:08:1e:54:b6:f5:0d:
                    1a:3d:39:d1:2c:2d:25:0b:f8:b1:4d:99:81:8f:f9:
                    1a:b0:9d:8b:01:83:a0:c8:33:82:2f:d7:d3:46:82:
                    6a:dc:38:50:f5:ac:c6:9c:1d:c7:90:1d:ae:91:3d:
                    c0:30:ef:61:ca:ad:70:87:56:cd:18:5a:ee:e4:ad:
                    37:bf:bf:33:14:5b:c9:2d:3e:7f:93:92:41:8b:77:
                    82:87:2c:e7:83:5b:f1:f5:13:47:16:00:30:71:ce:
                    10:bf:75:e2:29:d5:46:c6:d0:48:86:06:3f:2b:5e:
                    9e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:35:8C:C2:3C:58:93:0B:F3:81:83:51:8A:C1:4D:23:B0:A1:68:BF
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bzWMwjxYkwvzgYNRisFNI7ChaL8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1900::/40

    Signature Algorithm: sha256WithRSAEncryption
         54:b0:6b:5d:87:71:84:85:93:5c:93:3e:7d:57:6f:75:98:8d:
         3d:87:f5:22:c5:00:f1:c4:5b:95:5f:7a:7f:7d:ed:99:16:99:
         1f:1b:9b:87:34:e3:20:81:dc:9e:23:1c:92:ed:7a:c5:72:5c:
         da:d0:41:4f:ba:19:b5:1e:6c:ee:f8:17:64:85:1f:c8:8a:c5:
         64:3b:91:a5:08:f1:a3:d4:2d:28:60:e8:4f:00:ba:97:b6:c8:
         42:60:fd:73:4b:bc:9e:2e:b4:7f:c7:0c:bd:6c:fa:af:94:5d:
         aa:b0:1f:5a:02:c0:2e:35:f4:f0:66:3b:7d:ce:48:0a:30:18:
         8d:aa:2d:98:7e:b9:38:7d:49:0d:79:27:e6:71:a7:ab:dc:70:
         05:38:9d:73:3d:cb:6a:51:f3:96:01:6b:65:47:96:f0:ff:37:
         4e:72:93:0b:33:de:ba:02:76:72:63:1d:42:ef:44:f2:4a:61:
         96:e0:ce:e5:50:71:de:0e:20:ed:44:f2:f4:32:b9:f8:7e:b9:
         7e:00:2f:86:76:b2:a7:ba:68:cb:4b:43:3c:22:37:b6:c9:72:
         29:55:92:ec:f7:52:b4:36:b4:74:e4:7e:7c:59:44:a4:53:ce:
         41:91:1b:cb:e0:46:26:08:91:5d:4e:e8:ce:ce:21:f2:d6:db:
         fa:a5:8c:a0
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MTI2
MTczQjhENkIzRkYxMEUzRjAzRkIwNTYwRkU2NTUxREVBMkRCMB4XDTIzMDUzMDE2
MDIwOFoXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoNkYzNThDQzIzQzU4OTMw
QkYzODE4MzUxOEFDMTREMjNCMEExNjhCRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALOqWILjL4VlFy5NjaTT4b8+IGQaAMmUC9WJ2LPx/0BuQiCMVk5E
EFaDMwXz/09j6TDhxmA+I9i3YcQSLqYKglddJEKeDqwRM2OBGTqQ6D3rE/Rl7eJH
MwVWU6m4Rzmmluqyk+H3o4R7rk9MiJosdGAE3cAtx6Jg/7oo30e4LfeOXJO5VUir
hfbtBRNaT0BlCB5UtvUNGj050SwtJQv4sU2ZgY/5GrCdiwGDoMgzgi/X00aCatw4
UPWsxpwdx5AdrpE9wDDvYcqtcIdWzRha7uStN7+/MxRbyS0+f5OSQYt3gocs54Nb
8fUTRxYAMHHOEL914inVRsbQSIYGPytenp0CAwEAAaOCAiowggImMB0GA1UdDgQW
BBRvNYzCPFiTC/OBg1GKwU0jsKFovzAfBgNVHSMEGDAWgBRRJhc7jWs/8Q4/A/sF
YP5lUd6i2zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMjkvVVNZWE80MXJQX0VPUHdQN0JXRC1aVkhlb3RzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVVNZWE80MXJQX0VPUHdQN0JXRC1a
Vkhlb3RzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTI5L2J6V013anhZa3d2emdZTlJpc0ZOSTdDaGFMOC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkCgBrGTANBgkqhkiG9w0BAQsFAAOCAQEAVLBrXYdxhIWTXJM+fVdv
dZiNPYf1IsUA8cRblV96f33tmRaZHxubhzTjIIHcniMcku16xXJc2tBBT7oZtR5s
7vgXZIUfyIrFZDuRpQjxo9QtKGDoTwC6l7bIQmD9c0u8ni60f8cMvWz6r5RdqrAf
WgLALjX08GY7fc5ICjAYjaotmH65OH1JDXkn5nGnq9xwBTidcz3LalHzlgFrZUeW
8P83TnKTCzPeugJ2cmMdQu9E8kphluDO5VBx3g4g7UTy9DK5+H65fgAvhnayp7po
y0tDPCI3tslyKVWS7PdStDa0dOR+fFlEpFPOQZEby+BGJgiRXU7ozs4h8tbb+qWM
oA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org