Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uVcG1TMUAv0URXYGmbbHpNYM30o.roa
File:                     uVcG1TMUAv0URXYGmbbHpNYM30o.roa (raw, json)
Hash identifier:          6LZglu/5V/ZXRNnhmgV4tXhGpRL4XJMaFpnTLh8zjWc=
Subject key identifier:   B9:57:06:D5:33:14:02:FD:14:45:76:06:99:B6:C7:A4:D6:0C:DF:4A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       4A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uVcG1TMUAv0URXYGmbbHpNYM30o.roa
Signing time:             Tue 30 May 2023 16:04:19 +0000
ROA not before:           Tue 30 May 2023 16:04:19 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a500::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:19 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B95706D5331402FD1445760699B6C7A4D60CDF4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:56:de:6d:98:34:5c:28:de:d4:d1:38:9c:96:
                    9c:d1:36:a3:23:27:d9:f4:0d:1d:e5:f1:4b:3f:34:
                    52:24:34:5e:46:f7:ec:95:21:e7:bb:05:60:a5:ee:
                    50:b7:60:6d:67:eb:e9:55:9f:98:57:de:3b:bb:8c:
                    5c:bb:4e:8f:51:70:3c:67:4c:d0:7d:d6:8f:5a:76:
                    5b:d4:70:07:9b:6e:09:de:a6:20:3d:37:f4:0f:3b:
                    01:b7:49:5f:f7:02:d3:76:26:74:95:65:82:1d:f4:
                    8c:98:61:37:5f:6c:f9:9b:0e:09:3c:56:d0:47:12:
                    29:e6:2f:8b:67:f8:b5:5e:2b:ec:66:ab:c3:23:ed:
                    45:2f:09:dd:0e:3a:ce:11:01:99:fd:97:d7:fc:32:
                    18:eb:e9:98:31:17:e9:f3:c9:39:65:de:5e:c0:4e:
                    31:2d:78:63:4d:8d:08:26:b2:c3:26:f9:49:8e:6a:
                    17:b6:f6:5c:72:a2:88:c3:87:75:c6:7e:15:5f:e8:
                    f3:e7:15:84:65:c8:19:ea:be:a7:cf:03:5c:0e:ce:
                    f9:a0:e1:ab:3d:04:df:40:e4:bf:c8:99:30:29:a3:
                    d8:b7:91:86:92:08:69:73:4d:b0:ec:1b:ef:8a:6c:
                    6c:fa:28:e8:77:a1:68:00:b9:f9:b9:bf:b3:b9:69:
                    de:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:57:06:D5:33:14:02:FD:14:45:76:06:99:B6:C7:A4:D6:0C:DF:4A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uVcG1TMUAv0URXYGmbbHpNYM30o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a500::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:ed:c0:07:fd:1c:10:02:d9:f5:38:9e:60:6d:34:91:6e:ca:
         dc:77:cf:e4:86:f0:0b:13:89:28:b2:ce:74:98:df:b9:dd:d9:
         34:ff:3f:c0:18:ba:e7:d7:27:5e:4a:91:8a:64:8f:1f:60:71:
         85:e4:c4:07:56:17:79:67:cb:ab:d6:c2:91:c4:67:15:83:66:
         0f:78:68:a5:eb:ef:07:47:d8:df:00:ea:2a:d1:2a:26:f5:b9:
         3e:08:2a:42:1c:39:f5:8e:07:8b:4d:4c:5b:a7:90:b5:86:7f:
         03:c9:a8:d9:09:3d:df:52:59:2f:46:2d:7c:c3:d8:14:88:30:
         2f:44:07:ce:05:a1:b1:ae:0e:93:0d:61:14:aa:f2:5c:25:b6:
         c6:20:6d:e4:cf:43:f1:1b:00:98:6a:f2:7f:e2:a5:93:97:c5:
         e1:74:cc:16:0c:be:3a:30:c1:4d:8e:0a:e5:3d:c0:cd:90:52:
         05:64:8c:ff:92:dc:4a:37:47:ae:ba:bf:c1:c9:75:11:58:e9:
         64:b5:ae:eb:3e:1e:14:80:c6:ec:3a:8b:2a:49:82:8d:82:cd:
         c4:eb:75:a5:d1:ed:72:f6:af:b4:ad:7b:14:8c:d5:78:c9:22:
         1e:9f:86:38:59:ba:c4:d0:51:5c:ce:5a:48:00:2b:8b:9a:24:
         f6:08:70:1b
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MTI2
MTczQjhENkIzRkYxMEUzRjAzRkIwNTYwRkU2NTUxREVBMkRCMB4XDTIzMDUzMDE2
MDQxOVoXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoQjk1NzA2RDUzMzE0MDJG
RDE0NDU3NjA2OTlCNkM3QTRENjBDREY0QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMBW3m2YNFwo3tTROJyWnNE2oyMn2fQNHeXxSz80UiQ0Xkb37JUh
57sFYKXuULdgbWfr6VWfmFfeO7uMXLtOj1FwPGdM0H3Wj1p2W9RwB5tuCd6mID03
9A87AbdJX/cC03YmdJVlgh30jJhhN19s+ZsOCTxW0EcSKeYvi2f4tV4r7GarwyPt
RS8J3Q46zhEBmf2X1/wyGOvpmDEX6fPJOWXeXsBOMS14Y02NCCaywyb5SY5qF7b2
XHKiiMOHdcZ+FV/o8+cVhGXIGeq+p88DXA7O+aDhqz0E30Dkv8iZMCmj2LeRhpII
aXNNsOwb74psbPoo6HehaAC5+bm/s7lp3vcCAwEAAaOCAiowggImMB0GA1UdDgQW
BBS5VwbVMxQC/RRFdgaZtsek1gzfSjAfBgNVHSMEGDAWgBRRJhc7jWs/8Q4/A/sF
YP5lUd6i2zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMjkvVVNZWE80MXJQX0VPUHdQN0JXRC1aVkhlb3RzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVVNZWE80MXJQX0VPUHdQN0JXRC1a
Vkhlb3RzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTI5L3VWY0cxVE1VQXYwVVJYWUdtYmJIcE5ZTTMwby5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkCgBrpTANBgkqhkiG9w0BAQsFAAOCAQEAZe3AB/0cEALZ9TieYG00
kW7K3HfP5IbwCxOJKLLOdJjfud3ZNP8/wBi659cnXkqRimSPH2BxheTEB1YXeWfL
q9bCkcRnFYNmD3hopevvB0fY3wDqKtEqJvW5PggqQhw59Y4Hi01MW6eQtYZ/A8mo
2Qk931JZL0YtfMPYFIgwL0QHzgWhsa4Okw1hFKryXCW2xiBt5M9D8RsAmGryf+Kl
k5fF4XTMFgy+OjDBTY4K5T3AzZBSBWSM/5LcSjdHrrq/wcl1EVjpZLWu6z4eFIDG
7DqLKkmCjYLNxOt1pdHtcvavtK17FIzVeMkiHp+GOFm6xNBRXM5aSAAri5ok9ghw
Gw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org