Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cmWDAJbume1oho-nR0iU5-KPCt8.roa
File:                     cmWDAJbume1oho-nR0iU5-KPCt8.roa (raw, json)
Hash identifier:          sg1xk0nbFftcllQkne5cSsmngh53p3TWKA2iB6VTChg=
Subject key identifier:   72:65:83:00:96:EE:99:ED:68:86:8F:A7:47:48:94:E7:E2:8F:0A:DF
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0131
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cmWDAJbume1oho-nR0iU5-KPCt8.roa
Signing time:             Tue 30 May 2023 17:30:01 +0000
ROA not before:           Tue 30 May 2023 17:30:01 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:30:01 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=7265830096EE99ED68868FA7474894E7E28F0ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cd:24:a9:97:fc:e0:a4:2d:6d:cb:40:07:cc:
                    2c:b6:04:01:1b:9a:63:40:00:4f:a2:d9:c1:85:5a:
                    14:cb:2b:7a:7f:ff:a0:50:f3:1a:31:b0:a2:53:84:
                    99:13:67:c9:35:8f:a0:5c:f1:51:63:34:96:1d:c0:
                    95:f2:85:4a:24:6c:78:1f:ba:57:2a:7a:32:3f:48:
                    ec:84:aa:90:ad:37:40:4a:f2:0e:e2:36:ba:c1:54:
                    ab:08:2f:50:bc:3c:8c:60:0f:43:1a:16:69:bf:79:
                    43:52:de:4d:c7:49:23:e8:d0:4b:ec:53:7c:de:07:
                    4b:af:66:b3:52:ed:bb:39:f9:05:86:af:71:a2:72:
                    e6:1a:5a:4e:8d:30:a4:74:6f:0f:be:28:6c:fa:69:
                    f4:3f:4b:50:c4:ba:e7:e4:32:af:f1:8c:d6:10:84:
                    3c:fb:a1:da:fe:80:da:7e:d2:56:34:3b:50:51:b7:
                    d7:cc:3b:e6:20:54:1d:16:d2:b5:dc:a9:a7:32:02:
                    39:33:b5:69:d3:17:93:b2:d2:3e:ab:0c:ce:c2:54:
                    2f:7a:34:21:31:dc:b9:93:05:e0:93:6e:85:e8:b1:
                    c3:8f:da:aa:f8:ea:d5:74:4c:8b:9e:76:f7:44:2e:
                    17:cb:36:0d:34:ca:5e:74:d8:8a:55:c5:5c:22:d1:
                    e5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:65:83:00:96:EE:99:ED:68:86:8F:A7:47:48:94:E7:E2:8F:0A:DF
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cmWDAJbume1oho-nR0iU5-KPCt8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:58:a3:94:b5:59:40:8b:a4:a6:58:fd:0c:46:19:b4:a2:a8:
         5e:5c:46:76:20:8f:6b:2b:bc:44:05:75:e8:3a:1c:b2:15:4f:
         c1:6b:81:56:d3:5e:c4:65:1c:53:8b:21:bc:87:18:4f:ce:d4:
         21:6d:3d:15:0d:a6:05:38:65:85:90:50:ae:11:00:22:bc:a9:
         6c:2a:b9:25:53:c7:87:7a:78:09:fe:13:88:22:b5:89:57:b6:
         a0:d8:17:7f:22:4b:58:f4:50:31:f6:f2:87:33:e1:4f:30:7d:
         e0:36:bb:56:71:a1:f2:bd:af:f1:6f:46:1f:41:7e:b1:48:e7:
         87:87:db:3b:d2:dd:21:32:fa:39:0a:2c:8a:ce:82:53:80:17:
         94:76:1b:e5:a6:ce:df:9f:dc:47:72:15:b7:ad:5b:46:cb:27:
         3e:c8:71:dc:6e:57:6c:c5:00:20:cd:22:98:af:4d:ec:64:0d:
         ad:d0:f2:90:e0:fb:49:48:1e:9f:58:7e:6c:25:75:c7:e6:ce:
         98:bd:03:07:61:ac:93:e1:e9:c2:ac:69:52:d5:9c:02:ea:64:
         26:b3:c4:4e:c7:51:fa:9a:ba:92:38:b9:f3:ac:54:2d:d1:71:
         b4:e3:12:c3:ca:ef:e1:c5:3d:5c:ce:65:08:97:dd:28:5d:2f:
         c6:18:57:17
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICATEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzMwMDFaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDcyNjU4MzAwOTZFRTk5
RUQ2ODg2OEZBNzQ3NDg5NEU3RTI4RjBBREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCXzSSpl/zgpC1ty0AHzCy2BAEbmmNAAE+i2cGFWhTLK3p//6BQ
8xoxsKJThJkTZ8k1j6Bc8VFjNJYdwJXyhUokbHgfulcqejI/SOyEqpCtN0BK8g7i
NrrBVKsIL1C8PIxgD0MaFmm/eUNS3k3HSSPo0EvsU3zeB0uvZrNS7bs5+QWGr3Gi
cuYaWk6NMKR0bw++KGz6afQ/S1DEuufkMq/xjNYQhDz7odr+gNp+0lY0O1BRt9fM
O+YgVB0W0rXcqacyAjkztWnTF5Oy0j6rDM7CVC96NCEx3LmTBeCTboXoscOP2qr4
6tV0TIuedvdELhfLNg00yl502IpVxVwi0eVrAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUcmWDAJbume1oho+nR0iU5+KPCt8wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9jbVdEQUpidW1lMW9oby1uUjBpVTUtS1BDdDgu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa0gwDQYJKoZIhvcNAQELBQADggEBABJYo5S1WUCLpKZY/QxG
GbSiqF5cRnYgj2srvEQFdeg6HLIVT8FrgVbTXsRlHFOLIbyHGE/O1CFtPRUNpgU4
ZYWQUK4RACK8qWwquSVTx4d6eAn+E4gitYlXtqDYF38iS1j0UDH28ocz4U8wfeA2
u1ZxofK9r/FvRh9BfrFI54eH2zvS3SEy+jkKLIrOglOAF5R2G+Wmzt+f3EdyFbet
W0bLJz7IcdxuV2zFACDNIpivTexkDa3Q8pDg+0lIHp9Yfmwldcfmzpi9AwdhrJPh
6cKsaVLVnALqZCazxE7HUfqaupI4ufOsVC3RcbTjEsPK7+HFPVzOZQiX3ShdL8YY
Vxc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org