Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ojxi9bHJ44fIpLiGWIW5FDh6_iM.roa
File:                     ojxi9bHJ44fIpLiGWIW5FDh6_iM.roa (raw, json)
Hash identifier:          6v8fOjMVdZBJhYZwRqAt+b30186lO4qWRg0fL0pMAYM=
Subject key identifier:   A2:3C:62:F5:B1:C9:E3:87:C8:A4:B8:86:58:85:B9:14:38:7A:FE:23
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       27
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ojxi9bHJ44fIpLiGWIW5FDh6_iM.roa
Signing time:             Tue 30 May 2023 16:02:07 +0000
ROA not before:           Tue 30 May 2023 16:02:07 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4300::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:02:07 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A23C62F5B1C9E387C8A4B8865885B914387AFE23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:75:87:5f:08:ca:72:f6:40:62:25:06:6b:83:
                    8c:37:cc:55:8e:1e:91:bf:de:25:23:8f:d0:87:b4:
                    5f:35:7a:e3:aa:c8:22:49:28:c6:ce:b1:0f:2e:7f:
                    05:e8:e3:62:36:8f:0a:4e:18:b2:7e:a2:48:06:bf:
                    54:94:fa:64:46:0c:67:4d:76:3e:5e:1e:8e:12:f0:
                    6c:be:17:8e:55:e1:85:92:6b:9a:71:8d:de:ed:50:
                    87:e6:7a:94:4f:9e:81:fc:d7:fc:bf:ea:34:a1:34:
                    c2:27:b0:b3:c2:4b:c8:f9:78:4b:ae:a6:fc:1c:f7:
                    29:68:8c:ed:03:d9:4c:90:56:a0:21:ee:8b:45:d1:
                    a9:c4:dd:31:02:e4:d2:8e:6a:9d:39:39:23:ab:c7:
                    e9:8e:3c:e3:d7:23:42:b4:5a:aa:d9:6c:06:b0:a5:
                    cc:0a:26:94:32:2a:b9:18:0e:20:91:f1:dd:b1:0e:
                    d4:19:f4:f8:85:7f:60:d6:f0:fd:1b:66:f3:1b:1c:
                    4a:58:ec:e5:d2:58:c5:32:36:07:6f:0b:76:3d:2e:
                    97:78:c9:2a:50:01:64:ea:0e:1e:96:67:ce:eb:23:
                    db:bc:14:48:2e:c9:14:27:29:bc:c9:52:16:4c:f3:
                    16:0c:8e:05:e4:02:71:da:4d:8f:e5:2c:98:32:7b:
                    ff:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3C:62:F5:B1:C9:E3:87:C8:A4:B8:86:58:85:B9:14:38:7A:FE:23
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ojxi9bHJ44fIpLiGWIW5FDh6_iM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4300::/40

    Signature Algorithm: sha256WithRSAEncryption
         24:3f:b0:95:d6:48:cd:22:74:17:d2:65:93:1a:62:e1:47:93:
         dd:bf:36:3a:af:8f:2d:6c:ad:39:50:94:3d:0d:12:c5:02:59:
         65:20:44:a3:66:e1:d7:f9:d4:38:7d:a5:fc:05:3c:c7:f6:33:
         d2:9a:b5:3b:21:7e:0b:c7:d1:7b:de:81:d0:be:b0:bb:c7:c0:
         0e:6f:4b:c5:eb:56:08:b1:a5:8d:ef:bc:8d:e8:a8:3f:57:a4:
         f9:9a:ca:cf:2b:23:77:66:63:f3:cd:b7:a7:3d:d4:03:7c:5a:
         57:da:6e:5d:46:d6:7e:78:08:cc:2e:e2:aa:4f:df:5b:d8:ff:
         bd:d5:e1:17:55:c4:77:16:1a:f6:cc:3b:91:68:2c:89:da:01:
         e0:29:ac:a5:06:41:e6:5b:52:27:24:56:69:8f:54:d3:91:c2:
         54:cf:76:4c:e9:f2:58:27:d7:a6:df:6c:b2:f9:50:17:34:f9:
         96:f2:03:f4:09:51:52:f0:7e:ce:3f:dd:8c:66:64:ef:26:ab:
         d0:06:4e:52:d8:13:c0:02:6c:92:17:60:8f:99:ec:bc:29:08:
         b9:56:01:d3:e1:28:3d:67:f4:6e:36:99:f5:58:43:be:30:80:
         0b:5b:9b:7b:09:7b:ac:af:ca:e4:22:51:cb:ce:0e:95:8c:e4:
         03:62:0a:d7
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MTI2
MTczQjhENkIzRkYxMEUzRjAzRkIwNTYwRkU2NTUxREVBMkRCMB4XDTIzMDUzMDE2
MDIwN1oXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoQTIzQzYyRjVCMUM5RTM4
N0M4QTRCODg2NTg4NUI5MTQzODdBRkUyMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALJ1h18IynL2QGIlBmuDjDfMVY4ekb/eJSOP0Ie0XzV646rIIkko
xs6xDy5/BejjYjaPCk4Ysn6iSAa/VJT6ZEYMZ012Pl4ejhLwbL4XjlXhhZJrmnGN
3u1Qh+Z6lE+egfzX/L/qNKE0wiews8JLyPl4S66m/Bz3KWiM7QPZTJBWoCHui0XR
qcTdMQLk0o5qnTk5I6vH6Y4849cjQrRaqtlsBrClzAomlDIquRgOIJHx3bEO1Bn0
+IV/YNbw/Rtm8xscSljs5dJYxTI2B28Ldj0ul3jJKlABZOoOHpZnzusj27wUSC7J
FCcpvMlSFkzzFgyOBeQCcdpNj+UsmDJ7/wcCAwEAAaOCAiowggImMB0GA1UdDgQW
BBSiPGL1scnjh8ikuIZYhbkUOHr+IzAfBgNVHSMEGDAWgBRRJhc7jWs/8Q4/A/sF
YP5lUd6i2zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMjkvVVNZWE80MXJQX0VPUHdQN0JXRC1aVkhlb3RzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVVNZWE80MXJQX0VPUHdQN0JXRC1a
Vkhlb3RzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTI5L29qeGk5YkhKNDRmSXBMaUdXSVc1RkRoNl9pTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkCgBrQzANBgkqhkiG9w0BAQsFAAOCAQEAJD+wldZIzSJ0F9Jlkxpi
4UeT3b82Oq+PLWytOVCUPQ0SxQJZZSBEo2bh1/nUOH2l/AU8x/Yz0pq1OyF+C8fR
e96B0L6wu8fADm9LxetWCLGlje+8jeioP1ek+ZrKzysjd2Zj8823pz3UA3xaV9pu
XUbWfngIzC7iqk/fW9j/vdXhF1XEdxYa9sw7kWgsidoB4CmspQZB5ltSJyRWaY9U
05HCVM92TOnyWCfXpt9ssvlQFzT5lvID9AlRUvB+zj/djGZk7yar0AZOUtgTwAJs
khdgj5nsvCkIuVYB0+EoPWf0bjaZ9VhDvjCAC1ubewl7rK/K5CJRy84OlYzkA2IK
1w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org