Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uY5jaHSau64ygBIZ0hG5o4uufgc.roa
File:                     uY5jaHSau64ygBIZ0hG5o4uufgc.roa (raw, json)
Hash identifier:          YpPNDpsH29y25JzZK4NCHltPO2a3UiV6E24anZATdCU=
Subject key identifier:   B9:8E:63:68:74:9A:BB:AE:32:80:12:19:D2:11:B9:A3:8B:AE:7E:07
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       022A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uY5jaHSau64ygBIZ0hG5o4uufgc.roa
Signing time:             Tue 30 May 2023 17:42:23 +0000
ROA not before:           Tue 30 May 2023 17:42:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:fa00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=B98E6368749ABBAE32801219D211B9A38BAE7E07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:ee:98:6a:7b:b4:17:e1:e2:70:05:7b:ff:
                    98:cc:3b:20:53:4c:80:a2:c5:b0:9a:60:dd:39:24:
                    04:4d:7b:dc:97:d0:6e:c3:ad:21:b5:b9:b8:fa:13:
                    f3:aa:f8:88:4e:ad:7d:60:60:f1:26:cf:24:a4:fd:
                    7a:3b:52:f5:53:a1:04:18:c6:e0:ed:6a:32:29:06:
                    72:98:76:18:5e:4d:ef:aa:e8:5f:e9:2b:5f:32:7c:
                    d2:23:c6:f5:6a:de:ff:70:34:f8:84:01:3f:3b:f3:
                    2f:91:93:52:23:0b:18:6d:61:2e:6a:3a:53:fc:fe:
                    c1:ad:9b:b2:c3:89:c7:be:0e:56:d4:b0:97:fd:0d:
                    ee:d8:33:8a:44:48:20:9a:cd:40:e4:1b:f8:8a:13:
                    4a:6a:58:b6:ff:60:ac:02:eb:c7:fe:f1:69:05:b1:
                    18:08:fa:46:18:c5:37:45:e0:28:fa:61:c9:2c:d3:
                    d6:b5:d7:cb:4f:81:b3:0e:4c:6d:fc:9d:04:9a:c0:
                    44:0f:cb:45:d8:76:7f:c5:cb:7a:e4:bf:5d:91:1e:
                    62:d2:77:63:2a:85:d6:0c:49:85:a4:16:f6:52:ca:
                    0a:6d:69:ad:af:c6:ea:9a:d3:f7:81:51:b3:52:c4:
                    11:9f:ba:6f:fd:f4:9e:0d:25:03:20:78:9a:d4:3e:
                    40:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8E:63:68:74:9A:BB:AE:32:80:12:19:D2:11:B9:A3:8B:AE:7E:07
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uY5jaHSau64ygBIZ0hG5o4uufgc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c5:4e:97:ed:46:94:6b:6e:8d:f0:74:8b:db:4d:7e:f5:8b:ee:
         a7:9c:2c:8c:9c:44:87:95:3d:63:a6:71:0b:c1:95:1d:48:01:
         89:f4:f2:6a:e3:40:15:b9:3c:f6:f9:f2:a7:d2:1d:d9:c8:13:
         1a:06:39:e7:86:70:53:fa:30:d1:b3:9c:a8:0b:b0:52:09:8d:
         29:7b:e9:04:11:0d:22:8a:02:80:19:3d:8e:45:ea:b9:2f:66:
         87:24:20:10:80:e1:31:97:60:ca:22:87:dd:e3:48:97:6c:4c:
         1f:52:2c:32:6d:6a:55:ac:0a:01:2e:0a:db:ff:ec:31:29:86:
         d6:d9:e3:e0:ef:33:c3:75:ab:34:be:57:42:f4:aa:64:46:1f:
         a3:cf:74:50:c8:08:ee:2a:fd:d4:6f:2d:6f:e6:af:98:59:1b:
         f3:19:c7:88:dc:ec:c1:f6:14:d7:9b:1e:aa:3c:e5:19:a4:59:
         35:e6:8e:8e:7e:a0:9e:19:e1:98:35:fb:3b:ee:cf:ba:2e:11:
         ff:03:4d:93:e1:fe:7e:bb:46:04:c6:7a:4d:12:b5:a3:f7:98:
         43:0c:2d:34:60:95:f2:b4:3b:f5:9f:db:1c:d7:43:d0:25:04:
         74:cc:f6:c9:e4:24:e6:f4:40:52:6a:d5:a2:95:b5:22:ed:09:
         cb:ea:df:49
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAiowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzQyMjNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEI5OEU2MzY4NzQ5QUJC
QUUzMjgwMTIxOUQyMTFCOUEzOEJBRTdFMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6ue6Yanu0F+HicAV7/5jMOyBTTICixbCaYN05JARNe9yX0G7D
rSG1ubj6E/Oq+IhOrX1gYPEmzySk/Xo7UvVToQQYxuDtajIpBnKYdhheTe+q6F/p
K18yfNIjxvVq3v9wNPiEAT878y+Rk1IjCxhtYS5qOlP8/sGtm7LDice+DlbUsJf9
De7YM4pESCCazUDkG/iKE0pqWLb/YKwC68f+8WkFsRgI+kYYxTdF4Cj6Ycks09a1
18tPgbMOTG38nQSawEQPy0XYdn/Fy3rkv12RHmLSd2MqhdYMSYWkFvZSygptaa2v
xuqa0/eBUbNSxBGfum/99J4NJQMgeJrUPkDnAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUuY5jaHSau64ygBIZ0hG5o4uufgcwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS91WTVqYUhTYXU2NHlnQklaMGhHNW80dXVmZ2Mu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa/owDQYJKoZIhvcNAQELBQADggEBAMVOl+1GlGtujfB0i9tN
fvWL7qecLIycRIeVPWOmcQvBlR1IAYn08mrjQBW5PPb58qfSHdnIExoGOeeGcFP6
MNGznKgLsFIJjSl76QQRDSKKAoAZPY5F6rkvZockIBCA4TGXYMoih93jSJdsTB9S
LDJtalWsCgEuCtv/7DEphtbZ4+DvM8N1qzS+V0L0qmRGH6PPdFDICO4q/dRvLW/m
r5hZG/MZx4jc7MH2FNebHqo85RmkWTXmjo5+oJ4Z4Zg1+zvuz7ouEf8DTZPh/n67
RgTGek0StaP3mEMMLTRglfK0O/Wf2xzXQ9AlBHTM9snkJOb0QFJq1aKVtSLtCcvq
30k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org