Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rfdfhO-1qc98zmE3sWMo4rL0WZ8.roa
File:                     rfdfhO-1qc98zmE3sWMo4rL0WZ8.roa (raw, json)
Hash identifier:          OPcqW1lnWNRgkseDtDkRYf9ya6MNMwW8EiqGYT0dr3Q=
Subject key identifier:   AD:F7:5F:84:EF:B5:A9:CF:7C:CE:61:37:B1:63:28:E2:B2:F4:59:9F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       88
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rfdfhO-1qc98zmE3sWMo4rL0WZ8.roa
Signing time:             Tue 30 May 2023 16:06:27 +0000
ROA not before:           Tue 30 May 2023 16:06:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5e00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=ADF75F84EFB5A9CF7CCE6137B16328E2B2F4599F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:00:ca:1c:63:af:16:86:3b:bd:25:74:fc:e0:
                    01:f1:5f:1c:0a:5d:61:73:3f:03:04:d1:91:f7:f2:
                    a5:66:01:a5:30:73:22:cf:e6:41:9f:ce:95:13:b1:
                    f7:3c:1f:31:d0:76:9a:4b:35:8a:9d:ad:ef:5c:c8:
                    db:11:eb:9e:90:26:2e:31:b1:22:c3:b5:81:71:d5:
                    28:a3:0e:4d:bd:da:32:d1:9a:3b:cd:59:8c:d4:16:
                    09:2f:44:93:af:d4:bb:7d:bd:3e:da:28:0b:2f:d9:
                    c7:1d:4c:bb:b0:f4:5e:be:97:c5:da:f2:68:ae:e0:
                    be:68:77:f2:af:f8:d8:5a:d6:af:af:5c:da:5c:84:
                    54:49:92:23:0e:cc:67:67:3e:c6:3e:7c:8d:3d:5f:
                    0f:1a:fd:5a:53:92:9c:68:68:13:20:14:c8:1b:96:
                    e5:8b:ce:ff:1f:c8:cd:df:65:53:68:43:cf:20:cd:
                    8c:26:4e:96:1d:29:92:3a:51:4a:9c:dc:4c:88:81:
                    fb:7a:0a:55:97:19:1b:a7:52:1e:f7:af:cb:ae:77:
                    0f:0c:ef:ad:47:1c:dc:4d:18:79:78:8f:68:02:62:
                    2b:78:24:2d:6d:a5:bb:ae:56:21:64:90:99:71:f8:
                    dd:9d:68:4b:99:5f:8f:eb:0b:3e:fb:cf:f9:20:b2:
                    7c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F7:5F:84:EF:B5:A9:CF:7C:CE:61:37:B1:63:28:E2:B2:F4:59:9F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rfdfhO-1qc98zmE3sWMo4rL0WZ8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:dd:6f:4c:2b:6d:40:8d:cf:e9:03:66:e0:48:0f:44:b8:17:
         6f:a2:62:72:8e:14:7a:e4:0c:2f:61:d0:64:fe:fd:33:19:7f:
         48:cb:43:de:4a:70:63:cd:bd:3e:47:6b:0f:5e:22:c7:25:5c:
         11:e0:3e:79:5b:a8:39:b2:f3:e5:e2:c5:03:53:d0:8b:4a:5d:
         32:5f:5b:70:3d:54:41:64:e9:d0:03:29:cb:1c:46:59:79:d8:
         16:08:de:bd:53:3e:a6:63:66:88:76:ca:d6:78:df:c7:45:94:
         78:5a:46:99:49:b4:a1:9c:d4:4e:ea:cc:87:26:58:84:c0:ee:
         4f:b5:20:f5:89:73:90:e5:3d:dc:be:48:0e:83:14:e6:e4:10:
         c8:56:9f:33:82:2a:f4:f4:a5:06:36:20:bd:dc:8c:34:5c:08:
         31:c1:74:63:69:3c:f6:b7:b2:28:d9:07:cd:ab:65:fd:a6:30:
         5c:86:69:c3:f5:96:d1:3e:2d:1d:b9:2a:bf:a3:ed:9e:83:9e:
         53:54:02:e6:cd:25:8d:1b:a1:e9:cb:16:64:53:9e:d5:e2:aa:
         c7:77:cf:3f:e9:b0:7b:10:c5:9d:c1:82:a7:78:5e:3f:b4:3b:
         6c:6b:ed:9e:e2:2e:df:ce:9d:db:c2:c3:59:d8:1b:47:e7:03:
         63:34:41:d6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NjA2MjdaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEFERjc1Rjg0RUZCNUE5
Q0Y3Q0NFNjEzN0IxNjMyOEUyQjJGNDU5OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDoAMocY68Whju9JXT84AHxXxwKXWFzPwME0ZH38qVmAaUwcyLP
5kGfzpUTsfc8HzHQdppLNYqdre9cyNsR656QJi4xsSLDtYFx1SijDk292jLRmjvN
WYzUFgkvRJOv1Lt9vT7aKAsv2ccdTLuw9F6+l8Xa8miu4L5od/Kv+Nha1q+vXNpc
hFRJkiMOzGdnPsY+fI09Xw8a/VpTkpxoaBMgFMgbluWLzv8fyM3fZVNoQ88gzYwm
TpYdKZI6UUqc3EyIgft6ClWXGRunUh73r8uudw8M761HHNxNGHl4j2gCYit4JC1t
pbuuViFkkJlx+N2daEuZX4/rCz77z/kgsnzdAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUrfdfhO+1qc98zmE3sWMo4rL0WZ8wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9yZmRmaE8tMXFjOTh6bUUzc1dNbzRyTDBXWjgu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa14wDQYJKoZIhvcNAQELBQADggEBAC3db0wrbUCNz+kDZuBI
D0S4F2+iYnKOFHrkDC9h0GT+/TMZf0jLQ95KcGPNvT5Haw9eIsclXBHgPnlbqDmy
8+XixQNT0ItKXTJfW3A9VEFk6dADKcscRll52BYI3r1TPqZjZoh2ytZ438dFlHha
RplJtKGc1E7qzIcmWITA7k+1IPWJc5DlPdy+SA6DFObkEMhWnzOCKvT0pQY2IL3c
jDRcCDHBdGNpPPa3sijZB82rZf2mMFyGacP1ltE+LR25Kr+j7Z6DnlNUAubNJY0b
oenLFmRTntXiqsd3zz/psHsQxZ3Bgqd4Xj+0O2xr7Z7iLt/OndvCw1nYG0fnA2M0
QdY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org