Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/seac1cfOsQ99GYuhAh3TW1r33cg.roa
File:                     seac1cfOsQ99GYuhAh3TW1r33cg.roa (raw, json)
Hash identifier:          BUKYcQ2x4JusUMPmfUqRx2iMVffCeBOBbujPXiqmZ14=
Subject key identifier:   B1:E6:9C:D5:C7:CE:B1:0F:7D:19:8B:A1:02:1D:D3:5B:5A:F7:DD:C8
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       7B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/seac1cfOsQ99GYuhAh3TW1r33cg.roa
Signing time:             Tue 30 May 2023 16:06:23 +0000
ROA not before:           Tue 30 May 2023 16:06:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4700::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B1E69CD5C7CEB10F7D198BA1021DD35B5AF7DDC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:de:eb:86:10:3e:22:ff:e6:95:ee:15:72:88:
                    bb:50:fc:2a:4f:bf:b8:d6:1b:3d:d5:89:39:7f:23:
                    58:e6:ee:a8:bf:52:86:ad:ad:ea:59:d4:1d:ee:db:
                    ea:a1:27:24:51:43:37:57:23:b9:0f:ad:f6:87:1e:
                    97:78:b5:ae:85:42:d2:57:ad:85:c6:8a:b5:a4:2c:
                    40:c6:8f:97:97:23:0b:ed:ea:e6:38:50:84:34:e1:
                    e1:68:92:58:6c:f1:af:72:0f:63:38:ac:99:be:f7:
                    d0:f0:5c:ad:bd:03:7e:6b:80:52:61:ce:e1:83:91:
                    2e:61:6a:c8:24:e5:9e:81:37:2e:ee:38:0f:f5:fd:
                    3d:fd:27:8d:36:d5:9a:5d:24:6e:fe:04:1f:25:b3:
                    8b:57:c6:4a:17:6a:33:de:25:2a:aa:77:00:3f:24:
                    81:2b:36:8f:1f:9a:09:d8:29:6c:58:f0:a3:34:8b:
                    c1:63:ce:b2:18:e2:26:59:ae:c3:91:f3:8c:b3:25:
                    18:e6:ab:3c:88:e2:3b:4d:85:31:78:5d:a5:07:76:
                    74:56:20:f9:22:5a:ac:0b:a6:f7:70:df:e4:d2:1e:
                    46:1a:1c:1b:1b:f0:ed:19:3e:6c:f3:08:7d:de:72:
                    15:ce:a5:c2:3d:cd:77:57:71:51:3a:e8:9e:26:49:
                    50:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E6:9C:D5:C7:CE:B1:0F:7D:19:8B:A1:02:1D:D3:5B:5A:F7:DD:C8
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/seac1cfOsQ99GYuhAh3TW1r33cg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4700::/40

    Signature Algorithm: sha256WithRSAEncryption
         ae:21:89:b2:95:8c:b3:2e:aa:85:67:d7:d6:a6:12:b3:ff:7c:
         15:2a:b6:0e:e8:e4:79:c9:31:9f:c1:95:85:39:be:5a:7c:f6:
         bc:24:db:4a:a9:df:0b:e7:c0:31:98:db:31:46:25:81:8e:39:
         76:fb:7e:7a:d7:f4:7e:5e:cb:7e:b6:8e:da:7d:a6:33:64:d6:
         ee:71:29:6a:c0:e1:c9:dc:8b:16:d7:7f:48:8c:e9:01:26:a9:
         0a:c4:07:47:20:f9:80:15:5f:6f:d7:c0:3b:59:31:cf:1e:ff:
         85:4a:56:1d:ed:76:18:d4:bf:b8:32:4f:43:52:bb:0d:a3:b3:
         71:0c:30:f3:f2:47:dc:d7:e2:6d:ea:a7:a4:e3:17:58:da:5d:
         be:a6:f5:b0:c2:98:5b:af:4d:52:92:c7:07:ea:8d:4a:ea:8c:
         34:5d:20:47:4a:4e:1d:14:b5:4f:64:00:3a:29:c0:a0:f1:41:
         8f:07:c0:ca:d4:d4:60:2c:9b:a5:e5:18:99:57:4b:68:17:ea:
         e9:b2:bd:ee:8f:be:38:04:4f:4d:f0:ee:48:af:01:3b:42:d6:
         a9:4c:f9:2c:46:84:e8:4f:b1:22:ac:19:5b:08:21:f3:d9:0e:
         19:1d:7e:54:6a:36:a4:d3:d9:ec:d4:e7:ef:ce:a3:f6:43:4a:
         94:13:30:24
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MTI2
MTczQjhENkIzRkYxMEUzRjAzRkIwNTYwRkU2NTUxREVBMkRCMB4XDTIzMDUzMDE2
MDYyM1oXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoQjFFNjlDRDVDN0NFQjEw
RjdEMTk4QkExMDIxREQzNUI1QUY3RERDODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKXe64YQPiL/5pXuFXKIu1D8Kk+/uNYbPdWJOX8jWObuqL9Shq2t
6lnUHe7b6qEnJFFDN1cjuQ+t9ocel3i1roVC0lethcaKtaQsQMaPl5cjC+3q5jhQ
hDTh4WiSWGzxr3IPYzismb730PBcrb0DfmuAUmHO4YORLmFqyCTlnoE3Lu44D/X9
Pf0njTbVml0kbv4EHyWzi1fGShdqM94lKqp3AD8kgSs2jx+aCdgpbFjwozSLwWPO
shjiJlmuw5HzjLMlGOarPIjiO02FMXhdpQd2dFYg+SJarAum93Df5NIeRhocGxvw
7Rk+bPMIfd5yFc6lwj3Nd1dxUTroniZJUPUCAwEAAaOCAiowggImMB0GA1UdDgQW
BBSx5pzVx86xD30Zi6ECHdNbWvfdyDAfBgNVHSMEGDAWgBRRJhc7jWs/8Q4/A/sF
YP5lUd6i2zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMjkvVVNZWE80MXJQX0VPUHdQN0JXRC1aVkhlb3RzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVVNZWE80MXJQX0VPUHdQN0JXRC1a
Vkhlb3RzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTI5L3NlYWMxY2ZPc1E5OUdZdWhBaDNUVzFyMzNjZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkCgBrRzANBgkqhkiG9w0BAQsFAAOCAQEAriGJspWMsy6qhWfX1qYS
s/98FSq2Dujkeckxn8GVhTm+Wnz2vCTbSqnfC+fAMZjbMUYlgY45dvt+etf0fl7L
fraO2n2mM2TW7nEpasDhydyLFtd/SIzpASapCsQHRyD5gBVfb9fAO1kxzx7/hUpW
He12GNS/uDJPQ1K7DaOzcQww8/JH3NfibeqnpOMXWNpdvqb1sMKYW69NUpLHB+qN
SuqMNF0gR0pOHRS1T2QAOinAoPFBjwfAytTUYCybpeUYmVdLaBfq6bK97o++OARP
TfDuSK8BO0LWqUz5LEaE6E+xIqwZWwgh89kOGR1+VGo2pNPZ7NTn786j9kNKlBMw
JA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org