Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/c03ri-QvGsRQXWgN-Fu5R1TjmwI.roa
File:                     c03ri-QvGsRQXWgN-Fu5R1TjmwI.roa (raw, json)
Hash identifier:          YAPgoYvjwWlIAGKC3Et0G6TZDUBQpWGv/VlcRK5xnYo=
Subject key identifier:   73:4D:EB:8B:E4:2F:1A:C4:50:5D:68:0D:F8:5B:B9:47:54:E3:9B:02
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       16
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/c03ri-QvGsRQXWgN-Fu5R1TjmwI.roa
Signing time:             Wed 22 Mar 2023 16:30:15 +0000
ROA not before:           Wed 22 Mar 2023 16:30:15 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:1000::/37 maxlen: 37

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 22 16:30:15 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=734DEB8BE42F1AC4505D680DF85BB94754E39B02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:53:30:61:da:cb:f1:36:1c:9d:7d:24:aa:86:
                    5c:b0:10:b7:a6:92:ee:46:b4:93:44:2f:6d:ef:c7:
                    23:23:f7:02:cd:10:fa:d2:e3:f2:96:b7:2f:9c:7c:
                    b8:79:b8:76:29:e0:5b:cd:2e:d8:be:26:65:63:b0:
                    97:b7:d6:fa:55:f1:37:28:8f:b1:37:70:58:a4:30:
                    b7:bc:cb:3c:7d:b1:1a:b6:ed:8c:f8:16:01:83:07:
                    52:a5:d1:93:ab:38:31:4b:67:fc:42:b1:62:09:1d:
                    db:2f:87:5f:1d:e3:d2:c8:73:4f:bb:80:ef:97:ec:
                    23:1d:ba:9a:78:54:0c:b8:a2:fc:55:0e:7d:52:35:
                    51:a2:d8:27:b3:4d:d0:b3:0b:89:ff:94:96:a3:a1:
                    50:f6:50:b6:7a:66:fe:bd:d9:d4:c3:3d:90:f0:16:
                    22:b8:18:9e:b3:a4:90:ef:83:51:96:3d:80:a2:84:
                    86:12:af:e2:e4:39:c8:21:61:62:bf:df:63:f7:c5:
                    e4:20:46:a1:fd:30:ee:d6:ab:0e:24:9a:0b:86:17:
                    a3:35:25:28:2e:71:65:26:4f:b0:cf:51:cb:08:32:
                    79:0e:18:20:41:d3:a3:5f:f1:21:98:cd:23:b9:db:
                    84:45:4d:2c:dd:ee:81:ed:67:3d:9a:0b:e2:d4:51:
                    4b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4D:EB:8B:E4:2F:1A:C4:50:5D:68:0D:F8:5B:B9:47:54:E3:9B:02
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/c03ri-QvGsRQXWgN-Fu5R1TjmwI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:1000::/37

    Signature Algorithm: sha256WithRSAEncryption
         3d:8e:8c:d6:b8:d4:42:48:ac:c7:3c:92:b9:ab:20:00:5d:9f:
         cc:27:09:90:38:64:db:d5:af:a3:df:67:1b:1a:61:d9:2d:7f:
         7b:03:0c:1f:af:c4:c2:cb:34:14:6f:8b:14:52:26:33:86:df:
         cb:2e:9a:aa:f8:76:a6:58:bf:43:14:01:58:48:3f:ea:74:50:
         55:04:a6:45:1e:76:0f:b6:41:d9:0d:6b:e3:83:ea:40:41:c3:
         4a:7b:87:71:af:f1:e6:27:35:93:64:35:d4:11:27:a8:f2:17:
         79:a7:ee:92:e1:57:53:37:63:e7:9d:8c:7d:e0:94:2a:57:94:
         7a:a5:7b:49:64:ec:71:8e:56:f5:fa:9c:69:56:e4:0b:37:c4:
         56:3c:3d:62:8e:47:6a:34:fa:2b:49:a0:49:2f:31:a3:4e:e2:
         a6:b1:f6:63:f4:80:54:a5:ef:f6:bf:74:42:4d:aa:7b:09:65:
         41:42:f1:76:49:ba:d2:33:3f:4b:9c:af:4e:41:7e:fb:fa:9d:
         58:95:ca:0e:e6:74:f9:b6:74:f2:50:f9:e6:ec:e4:89:3d:c9:
         1f:a3:36:5d:f2:d0:64:5e:07:a9:1c:18:c5:c1:64:55:f6:c4:
         65:59:fb:dd:fe:c8:86:de:c6:56:5f:81:6b:b0:c4:e0:eb:1f:
         49:97:7d:fd
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MTI2
MTczQjhENkIzRkYxMEUzRjAzRkIwNTYwRkU2NTUxREVBMkRCMB4XDTIzMDMyMjE2
MzAxNVoXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoNzM0REVCOEJFNDJGMUFD
NDUwNUQ2ODBERjg1QkI5NDc1NEUzOUIwMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMVTMGHay/E2HJ19JKqGXLAQt6aS7ka0k0Qvbe/HIyP3As0Q+tLj
8pa3L5x8uHm4dingW80u2L4mZWOwl7fW+lXxNyiPsTdwWKQwt7zLPH2xGrbtjPgW
AYMHUqXRk6s4MUtn/EKxYgkd2y+HXx3j0shzT7uA75fsIx26mnhUDLii/FUOfVI1
UaLYJ7NN0LMLif+UlqOhUPZQtnpm/r3Z1MM9kPAWIrgYnrOkkO+DUZY9gKKEhhKv
4uQ5yCFhYr/fY/fF5CBGof0w7tarDiSaC4YXozUlKC5xZSZPsM9RywgyeQ4YIEHT
o1/xIZjNI7nbhEVNLN3uge1nPZoL4tRRS7kCAwEAAaOCAiowggImMB0GA1UdDgQW
BBRzTeuL5C8axFBdaA34W7lHVOObAjAfBgNVHSMEGDAWgBRRJhc7jWs/8Q4/A/sF
YP5lUd6i2zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMjkvVVNZWE80MXJQX0VPUHdQN0JXRC1aVkhlb3RzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVVNZWE80MXJQX0VPUHdQN0JXRC1a
Vkhlb3RzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTI5L2MwM3JpLVF2R3NSUVhXZ04tRnU1UjFUam13SS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgMkCgBhEDANBgkqhkiG9w0BAQsFAAOCAQEAPY6M1rjUQkisxzySuasg
AF2fzCcJkDhk29Wvo99nGxph2S1/ewMMH6/Ewss0FG+LFFImM4bfyy6aqvh2pli/
QxQBWEg/6nRQVQSmRR52D7ZB2Q1r44PqQEHDSnuHca/x5ic1k2Q11BEnqPIXeafu
kuFXUzdj552MfeCUKleUeqV7SWTscY5W9fqcaVbkCzfEVjw9Yo5HajT6K0mgSS8x
o07iprH2Y/SAVKXv9r90Qk2qewllQULxdkm60jM/S5yvTkF++/qdWJXKDuZ0+bZ0
8lD55uzkiT3JH6M2XfLQZF4HqRwYxcFkVfbEZVn73f7Iht7GVl+Ba7DE4OsfSZd9
/Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org