Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jKsGWdkx5_NSsuhUXh7sKwxiUwU.roa
File:                     jKsGWdkx5_NSsuhUXh7sKwxiUwU.roa (raw, json)
Hash identifier:          kB1SJgD4QlyhdexzLsQ9lQkn+ccCzo4bsIrqnvTCsV8=
Subject key identifier:   8C:AB:06:59:D9:31:E7:F3:52:B2:E8:54:5E:1E:EC:2B:0C:62:53:05
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       BE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jKsGWdkx5_NSsuhUXh7sKwxiUwU.roa
Signing time:             Tue 30 May 2023 16:10:13 +0000
ROA not before:           Tue 30 May 2023 16:10:13 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3100::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:13 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=8CAB0659D931E7F352B2E8545E1EEC2B0C625305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:9d:be:55:d2:f8:15:31:40:2c:c9:f3:8a:
                    1f:67:49:c0:2a:4b:6e:21:52:41:5e:a8:00:8b:2c:
                    c4:11:ab:71:50:64:9a:d8:06:b6:49:e8:c9:cd:f0:
                    b3:ad:6e:61:cb:32:89:be:12:d0:d2:f5:af:f9:53:
                    be:94:0e:88:e4:87:dd:e3:af:75:84:73:d1:27:bb:
                    98:7c:79:f0:6d:23:b4:48:f5:db:15:fb:37:78:66:
                    ff:46:b5:00:29:75:4f:f2:04:f6:26:9a:73:4e:76:
                    46:5a:0a:16:d5:d6:0b:33:d4:0f:e6:94:ff:89:83:
                    39:0a:7d:27:85:78:eb:fb:a3:e1:7c:20:66:79:d8:
                    e6:08:a4:6a:a2:14:3c:89:22:7b:34:ea:9e:e7:66:
                    e8:e4:15:d6:0b:bd:a0:a2:0e:cf:9b:b2:75:ca:60:
                    42:7e:5f:4d:3c:28:72:fe:3e:9f:28:70:99:79:2a:
                    2c:6b:c4:db:9b:43:f9:81:26:da:42:08:88:0b:58:
                    81:47:99:c0:69:af:ad:39:c5:31:a5:af:2e:dd:4f:
                    5a:99:2d:ef:74:ab:f8:fa:ef:35:8c:f8:0e:1f:66:
                    4b:73:b3:48:c0:be:3e:8d:0f:78:48:d4:b9:89:fb:
                    21:5e:28:44:86:73:6a:ef:f3:be:7a:6f:c5:05:b9:
                    fd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AB:06:59:D9:31:E7:F3:52:B2:E8:54:5E:1E:EC:2B:0C:62:53:05
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jKsGWdkx5_NSsuhUXh7sKwxiUwU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3100::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:1e:b6:b0:0e:7c:a4:71:12:63:c6:39:60:dd:09:3e:9e:a0:
         af:7c:47:ed:09:c1:c6:bf:90:d9:6d:ec:71:a0:45:01:b9:96:
         81:07:30:5b:8e:cd:04:72:38:4a:7d:7a:b4:49:22:6f:d2:0b:
         13:d1:7f:96:3c:30:7d:f3:9a:5a:db:1f:c1:b7:ca:98:78:94:
         7d:1d:46:28:2c:78:14:fd:35:5f:93:25:cb:d9:25:b1:ea:31:
         ea:d8:25:60:c3:72:33:f0:0e:83:b8:be:31:af:1e:af:3f:4d:
         da:e5:06:05:f2:34:16:05:43:ee:35:d1:3f:4e:31:0c:84:32:
         9f:1c:c9:64:b0:34:02:1e:c0:fc:24:6d:f8:8a:6f:54:a5:26:
         c6:ad:fe:ab:6c:89:a5:4b:c7:00:e9:7b:c8:99:0d:02:e4:2d:
         4f:59:ff:4f:65:7d:e0:7e:d6:54:d1:13:34:f0:b0:b9:e0:a3:
         dc:bf:ba:33:ec:0a:24:8b:53:60:52:17:20:40:80:7e:2c:61:
         f8:b6:75:7f:2b:60:5c:6f:99:c9:7f:42:07:08:c4:eb:47:56:
         96:b2:d2:2b:29:a8:46:b6:7f:46:81:f8:2f:c6:37:d4:11:31:
         c1:d7:a5:e0:54:d2:22:61:44:49:42:03:86:82:6e:40:c5:3e:
         7a:45:8b:89
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NjEwMTNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDhDQUIwNjU5RDkzMUU3
RjM1MkIyRTg1NDVFMUVFQzJCMEM2MjUzMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7RZ2+VdL4FTFALMnzih9nScAqS24hUkFeqACLLMQRq3FQZJrY
BrZJ6MnN8LOtbmHLMom+EtDS9a/5U76UDojkh93jr3WEc9Enu5h8efBtI7RI9dsV
+zd4Zv9GtQApdU/yBPYmmnNOdkZaChbV1gsz1A/mlP+JgzkKfSeFeOv7o+F8IGZ5
2OYIpGqiFDyJIns06p7nZujkFdYLvaCiDs+bsnXKYEJ+X008KHL+Pp8ocJl5Kixr
xNubQ/mBJtpCCIgLWIFHmcBpr605xTGlry7dT1qZLe90q/j67zWM+A4fZktzs0jA
vj6ND3hI1LmJ+yFeKESGc2rv8756b8UFuf0BAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUjKsGWdkx5/NSsuhUXh7sKwxiUwUwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9qS3NHV2RreDVfTlNzdWhVWGg3c0t3eGlVd1Uu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAazEwDQYJKoZIhvcNAQELBQADggEBAC4etrAOfKRxEmPGOWDd
CT6eoK98R+0Jwca/kNlt7HGgRQG5loEHMFuOzQRyOEp9erRJIm/SCxPRf5Y8MH3z
mlrbH8G3yph4lH0dRigseBT9NV+TJcvZJbHqMerYJWDDcjPwDoO4vjGvHq8/Tdrl
BgXyNBYFQ+410T9OMQyEMp8cyWSwNAIewPwkbfiKb1SlJsat/qtsiaVLxwDpe8iZ
DQLkLU9Z/09lfeB+1lTREzTwsLngo9y/ujPsCiSLU2BSFyBAgH4sYfi2dX8rYFxv
mcl/QgcIxOtHVpay0ispqEa2f0aB+C/GN9QRMcHXpeBU0iJhRElCA4aCbkDFPnpF
i4k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org