Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sB_OuhoYR9zqfIbS678Iz-F0xmE.roa
File:                     sB_OuhoYR9zqfIbS678Iz-F0xmE.roa (raw, json)
Hash identifier:          aw22iIaHhiB4dwcX6/4l6XJX5VrbnKdZ8i9uLGRnsdE=
Subject key identifier:   B0:1F:CE:BA:1A:18:47:DC:EA:7C:86:D2:EB:BF:08:CF:E1:74:C6:61
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       68
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sB_OuhoYR9zqfIbS678Iz-F0xmE.roa
Signing time:             Tue 30 May 2023 16:06:16 +0000
ROA not before:           Tue 30 May 2023 16:06:16 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4e00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:16 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B01FCEBA1A1847DCEA7C86D2EBBF08CFE174C661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:6f:ed:8b:37:8a:63:3c:5a:60:7d:74:3e:
                    a8:a1:d8:61:23:07:d2:e0:ea:33:2f:b2:d0:6e:30:
                    dc:38:09:bf:cf:b9:26:30:6c:ea:30:df:7e:52:c5:
                    2f:95:27:71:2a:10:e1:d8:4a:75:79:03:1b:42:9a:
                    ea:68:0a:05:4a:de:77:f2:ac:9c:ee:cc:68:b6:3a:
                    8e:62:35:96:54:93:59:0d:bf:2f:b7:16:7d:9a:e6:
                    e0:79:f7:c6:32:79:cd:5a:5c:a7:a3:9a:b0:9f:fa:
                    2e:2b:08:28:d9:06:dd:34:95:75:d0:d3:98:e0:9a:
                    bd:a8:48:b9:63:53:e3:fd:4d:c8:38:2f:d0:02:4e:
                    e3:13:4d:98:78:1e:c1:68:70:e5:71:61:f5:b6:0e:
                    43:0f:11:c5:72:b3:d2:c0:3e:ef:09:ad:51:92:76:
                    2b:c2:f0:30:99:8b:af:c2:2c:0b:d3:23:b9:5e:8d:
                    9a:bf:7e:29:2b:ea:db:92:57:ed:2b:fb:b8:c0:6e:
                    50:17:5c:ec:0e:b6:ce:34:b1:28:26:c7:97:94:15:
                    38:e0:23:bc:1f:99:f4:09:4e:6f:f7:50:df:9d:57:
                    f9:d5:cb:9a:86:04:c7:c9:51:d9:e0:b9:75:1c:ec:
                    d9:0c:87:85:f3:aa:f1:73:90:20:9b:e3:00:d5:fc:
                    90:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1F:CE:BA:1A:18:47:DC:EA:7C:86:D2:EB:BF:08:CF:E1:74:C6:61
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sB_OuhoYR9zqfIbS678Iz-F0xmE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9d:6f:37:1c:7a:b6:29:6f:54:d5:95:67:3e:8d:8c:4b:09:7b:
         c8:05:1b:a5:b3:6b:bb:ea:89:af:24:c1:5c:ee:15:6d:56:62:
         d0:95:f9:5a:9f:7c:bb:02:f2:2e:7a:60:64:92:f2:a7:98:e3:
         56:51:e0:02:95:1d:d4:a3:11:c6:f5:9f:09:7e:6a:89:e9:c8:
         28:17:34:fc:de:d7:a4:ba:c2:33:87:4d:80:8f:ac:65:f6:2c:
         8f:72:f2:fb:42:a4:f8:d2:ce:e8:42:f5:a8:31:1c:35:14:b3:
         89:08:e6:18:56:94:20:6f:68:bb:fc:6f:21:9d:0c:57:1a:81:
         3d:2a:d2:cc:6e:0a:c3:1f:54:15:35:fe:c2:20:57:40:75:1b:
         4a:c3:d1:cd:32:e7:4e:07:88:ac:5b:60:09:90:88:3a:58:55:
         56:de:2d:3e:13:87:d2:7d:f6:4f:4b:f1:c7:ba:02:fc:1c:da:
         d6:af:d4:c7:92:61:b1:96:04:67:1a:d6:f1:98:68:6d:77:3a:
         f1:e2:f4:0a:97:a5:1e:b0:6c:34:37:96:62:c9:f2:f3:52:ec:
         6b:7b:08:d1:4a:4b:b8:42:b4:e3:ea:c0:7d:c9:9f:ae:ea:c3:
         aa:d4:bb:7c:17:b2:1a:4f:cc:b2:53:26:3f:a5:35:f1:a4:6e:
         6a:8f:1b:4b
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBaDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MTI2
MTczQjhENkIzRkYxMEUzRjAzRkIwNTYwRkU2NTUxREVBMkRCMB4XDTIzMDUzMDE2
MDYxNloXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoQjAxRkNFQkExQTE4NDdE
Q0VBN0M4NkQyRUJCRjA4Q0ZFMTc0QzY2MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALe2b+2LN4pjPFpgfXQ+qKHYYSMH0uDqMy+y0G4w3DgJv8+5JjBs
6jDfflLFL5UncSoQ4dhKdXkDG0Ka6mgKBUred/KsnO7MaLY6jmI1llSTWQ2/L7cW
fZrm4Hn3xjJ5zVpcp6OasJ/6LisIKNkG3TSVddDTmOCavahIuWNT4/1NyDgv0AJO
4xNNmHgewWhw5XFh9bYOQw8RxXKz0sA+7wmtUZJ2K8LwMJmLr8IsC9MjuV6Nmr9+
KSvq25JX7Sv7uMBuUBdc7A62zjSxKCbHl5QVOOAjvB+Z9AlOb/dQ351X+dXLmoYE
x8lR2eC5dRzs2QyHhfOq8XOQIJvjANX8kHUCAwEAAaOCAiowggImMB0GA1UdDgQW
BBSwH866GhhH3Op8htLrvwjP4XTGYTAfBgNVHSMEGDAWgBRRJhc7jWs/8Q4/A/sF
YP5lUd6i2zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMjkvVVNZWE80MXJQX0VPUHdQN0JXRC1aVkhlb3RzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVVNZWE80MXJQX0VPUHdQN0JXRC1a
Vkhlb3RzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTI5L3NCX091aG9ZUjl6cWZJYlM2NzhJei1GMHhtRS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkCgBrTjANBgkqhkiG9w0BAQsFAAOCAQEAnW83HHq2KW9U1ZVnPo2M
Swl7yAUbpbNru+qJryTBXO4VbVZi0JX5Wp98uwLyLnpgZJLyp5jjVlHgApUd1KMR
xvWfCX5qienIKBc0/N7XpLrCM4dNgI+sZfYsj3Ly+0Kk+NLO6EL1qDEcNRSziQjm
GFaUIG9ou/xvIZ0MVxqBPSrSzG4Kwx9UFTX+wiBXQHUbSsPRzTLnTgeIrFtgCZCI
OlhVVt4tPhOH0n32T0vxx7oC/Bza1q/Ux5JhsZYEZxrW8ZhobXc68eL0CpelHrBs
NDeWYsny81Lsa3sI0UpLuEK04+rAfcmfrurDqtS7fBeyGk/MslMmP6U18aRuao8b
Sw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org