Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sObZguMXI6PoiO9LLkknBTynevI.roa
File:                     sObZguMXI6PoiO9LLkknBTynevI.roa (raw, json)
Hash identifier:          95XB8DTsdE4eQxnSzCv4vBn5uiixYItSckcfX7SSFqE=
Subject key identifier:   B0:E6:D9:82:E3:17:23:A3:E8:88:EF:4B:2E:49:27:05:3C:A7:7A:F2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01C0
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sObZguMXI6PoiO9LLkknBTynevI.roa
Signing time:             Tue 30 May 2023 17:36:33 +0000
ROA not before:           Tue 30 May 2023 17:36:33 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:af00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:33 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B0E6D982E31723A3E888EF4B2E4927053CA77AF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:f7:18:4e:b9:45:0a:ae:49:76:94:89:ef:
                    f1:68:0e:65:52:8e:dc:5e:82:6a:f8:94:4c:f8:cd:
                    1d:a9:9f:06:fc:65:c5:8a:40:9d:57:58:7b:d4:44:
                    c3:d2:bb:00:8a:e4:7d:1b:da:36:d2:77:d1:79:66:
                    76:67:bd:80:3e:5b:35:f6:46:fb:a7:02:d1:ab:ec:
                    d8:a0:b9:9b:f8:42:65:8a:1c:cf:0c:f1:04:83:a3:
                    45:1d:0c:a2:89:0a:b2:b4:81:08:38:85:8e:b3:bf:
                    6f:e1:fa:65:af:89:6b:c5:30:e7:37:d9:cb:6d:bf:
                    5d:e7:be:12:09:62:68:8f:a1:12:4f:c1:32:aa:50:
                    a4:56:77:a6:e3:4e:b5:49:4e:aa:7c:68:fb:59:ed:
                    7a:92:8c:08:ad:6d:7a:13:26:2a:15:6b:c9:8e:fd:
                    f9:ce:9e:4d:94:88:5f:66:f3:62:b1:ff:82:04:8d:
                    71:fb:d5:c8:cc:5a:e5:2b:54:de:64:5a:49:fa:de:
                    0d:e7:f4:57:9f:0b:dd:8d:69:d2:75:ea:0a:75:1a:
                    53:1a:ce:91:ea:8c:8c:41:f3:1a:ab:2d:10:95:fe:
                    40:d7:9e:5a:a7:1a:af:ad:e2:1b:27:2f:dc:76:5c:
                    97:f0:8f:1c:ea:ec:30:56:3b:8e:5a:65:65:cf:c8:
                    61:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E6:D9:82:E3:17:23:A3:E8:88:EF:4B:2E:49:27:05:3C:A7:7A:F2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sObZguMXI6PoiO9LLkknBTynevI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:af00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c5:6d:f4:f9:34:08:61:09:85:96:74:00:f1:91:36:8f:e6:1e:
         0f:ff:24:54:0b:97:80:f5:d7:41:2b:18:21:c0:d6:9b:cb:1e:
         9e:73:b8:5b:55:b3:62:f1:9e:f6:e5:f3:09:bc:9a:29:67:b2:
         f7:cd:72:7c:2f:be:20:1c:27:95:d3:6e:a3:88:09:53:54:82:
         fe:69:39:fb:e7:37:ea:e2:31:8e:b6:e6:37:31:1d:4c:9b:ae:
         cc:ad:f5:04:16:dc:d9:a4:8c:d7:59:97:76:66:c9:91:31:06:
         ff:6e:d0:8d:0c:b0:25:c2:c1:40:b0:f9:0f:08:0c:a1:38:b8:
         ac:a3:9b:89:2b:39:ee:ad:07:cc:3b:49:21:fb:70:cf:50:b6:
         2e:31:21:74:4d:4e:ff:81:09:fa:17:7c:31:1d:dd:56:50:4e:
         34:1a:5d:c9:3f:76:4a:3a:1d:b5:a8:46:a0:4e:f4:76:60:7e:
         cc:b4:d1:eb:74:83:3f:11:2c:20:d4:4e:5d:9c:a9:79:c7:99:
         df:ee:b2:94:22:5a:4a:f7:3d:db:bc:12:58:a1:4e:5e:68:6d:
         50:47:3c:01:aa:02:49:55:b2:5e:73:e0:68:42:d2:6b:dd:bf:
         7a:df:68:6f:29:16:51:12:24:cd:e5:5a:ba:6d:d4:66:15:0e:
         d9:6a:74:b2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzM2MzNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEIwRTZEOTgyRTMxNzIz
QTNFODg4RUY0QjJFNDkyNzA1M0NBNzdBRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5dfcYTrlFCq5JdpSJ7/FoDmVSjtxegmr4lEz4zR2pnwb8ZcWK
QJ1XWHvURMPSuwCK5H0b2jbSd9F5ZnZnvYA+WzX2RvunAtGr7NiguZv4QmWKHM8M
8QSDo0UdDKKJCrK0gQg4hY6zv2/h+mWviWvFMOc32cttv13nvhIJYmiPoRJPwTKq
UKRWd6bjTrVJTqp8aPtZ7XqSjAitbXoTJioVa8mO/fnOnk2UiF9m82Kx/4IEjXH7
1cjMWuUrVN5kWkn63g3n9FefC92NadJ16gp1GlMazpHqjIxB8xqrLRCV/kDXnlqn
Gq+t4hsnL9x2XJfwjxzq7DBWO45aZWXPyGFbAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUsObZguMXI6PoiO9LLkknBTynevIwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9zT2JaZ3VNWEk2UG9pTzlMTGtrbkJUeW5ldkku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa68wDQYJKoZIhvcNAQELBQADggEBAMVt9Pk0CGEJhZZ0APGR
No/mHg//JFQLl4D110ErGCHA1pvLHp5zuFtVs2Lxnvbl8wm8milnsvfNcnwvviAc
J5XTbqOICVNUgv5pOfvnN+riMY625jcxHUybrsyt9QQW3NmkjNdZl3ZmyZExBv9u
0I0MsCXCwUCw+Q8IDKE4uKyjm4krOe6tB8w7SSH7cM9Qti4xIXRNTv+BCfoXfDEd
3VZQTjQaXck/dko6HbWoRqBO9HZgfsy00et0gz8RLCDUTl2cqXnHmd/uspQiWkr3
Pdu8ElihTl5obVBHPAGqAklVsl5z4GhC0mvdv3rfaG8pFlESJM3lWrpt1GYVDtlq
dLI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org