Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wEdtIL4lMiXQ8nk15J39o-o4ZGY.roa
File:                     wEdtIL4lMiXQ8nk15J39o-o4ZGY.roa (raw, json)
Hash identifier:          Y3w5J0vrtwPULlJlmZIjS4mFeKxM5OimbFM7MEojoBU=
Subject key identifier:   C0:47:6D:20:BE:25:32:25:D0:F2:79:35:E4:9D:FD:A3:EA:38:64:66
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0171
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wEdtIL4lMiXQ8nk15J39o-o4ZGY.roa
Signing time:             Tue 30 May 2023 17:32:38 +0000
ROA not before:           Tue 30 May 2023 17:32:38 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f01c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:38 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=C0476D20BE253225D0F27935E49DFDA3EA386466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:18:80:ed:7f:b6:21:8f:96:a6:6f:88:6c:ce:
                    02:36:91:71:e6:20:6d:a5:21:47:3a:d1:73:58:31:
                    90:50:8a:15:6c:ec:62:ab:92:c1:84:d3:a6:73:15:
                    6c:63:03:b9:ae:9f:f8:35:fe:0a:fe:84:18:4b:2a:
                    27:a8:df:f6:af:64:82:69:6b:6e:ba:b9:b9:d2:6c:
                    57:b5:ba:b9:52:d1:29:a9:4a:75:7e:e4:07:f3:57:
                    ed:3c:2f:97:12:c1:2f:ff:79:f0:d4:ea:33:01:ff:
                    f9:0a:59:72:d2:cf:45:4a:51:0d:26:95:de:8c:ee:
                    cd:0a:fa:b4:5d:67:e4:73:f1:f6:57:30:ca:ae:9a:
                    e8:06:ee:56:2d:20:3c:e1:7d:d0:45:f5:dd:03:5c:
                    e8:bf:c9:28:f7:26:9a:59:9e:ea:4e:23:dd:e8:d3:
                    59:1a:79:af:5f:f5:d0:07:81:93:60:4a:f9:e7:bc:
                    81:ff:27:cc:4f:33:ba:d7:f7:a6:76:cf:43:db:1b:
                    d3:f2:dd:8a:9f:5b:f5:81:2b:51:9d:9f:6f:23:e4:
                    c2:17:2b:0c:b9:c4:3b:b6:31:90:a6:0e:1f:74:d5:
                    be:d2:5d:13:42:01:80:e6:18:a5:d0:c4:5a:68:26:
                    83:68:06:83:de:66:fb:bf:76:a0:07:7d:92:53:0f:
                    73:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:47:6D:20:BE:25:32:25:D0:F2:79:35:E4:9D:FD:A3:EA:38:64:66
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wEdtIL4lMiXQ8nk15J39o-o4ZGY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f01c::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:27:73:2e:04:5c:13:bf:66:80:7b:6c:04:2c:d6:31:3c:b6:
         83:7c:3a:fa:52:7c:d7:9b:45:1f:b3:62:ba:56:58:13:28:35:
         7a:e8:8a:51:e8:bd:ae:e2:0c:b6:89:13:e4:a0:4c:19:be:de:
         45:ef:3b:f3:85:93:a3:33:d4:de:5e:a5:b7:ed:60:52:32:16:
         f7:fa:ab:8d:02:70:2b:82:e4:f8:af:07:ed:ae:88:e9:ad:36:
         6c:02:62:a0:a3:0d:cd:20:b2:05:27:0f:97:40:91:79:03:de:
         9c:b0:49:d4:b1:2d:53:48:ce:39:7b:e7:5e:cc:fb:7d:18:33:
         8d:13:a7:53:db:28:8e:e0:91:4d:9b:e4:d6:cc:fa:27:3f:96:
         e3:a0:46:82:25:f6:99:d4:23:7c:51:af:4e:13:ab:39:00:e8:
         40:ae:d1:b5:64:0d:13:2f:d5:b2:89:48:da:de:2b:43:d2:0e:
         4f:a9:d3:3c:d2:64:c6:77:99:fa:f8:27:7f:b0:52:b6:b4:0e:
         9e:23:00:31:6d:ae:ef:0a:76:7c:f4:d7:2a:5c:f2:9c:bc:a1:
         e7:d7:65:e2:d5:8e:d7:d4:f8:85:73:59:8f:19:22:a6:a3:d5:
         f1:92:47:fd:67:45:80:d4:60:68:db:69:1c:7b:09:d6:2a:1e:
         35:5a:1f:a0
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzMyMzhaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEMwNDc2RDIwQkUyNTMy
MjVEMEYyNzkzNUU0OURGREEzRUEzODY0NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCGIDtf7Yhj5amb4hszgI2kXHmIG2lIUc60XNYMZBQihVs7GKr
ksGE06ZzFWxjA7mun/g1/gr+hBhLKieo3/avZIJpa266ubnSbFe1urlS0SmpSnV+
5AfzV+08L5cSwS//efDU6jMB//kKWXLSz0VKUQ0mld6M7s0K+rRdZ+Rz8fZXMMqu
mugG7lYtIDzhfdBF9d0DXOi/ySj3JppZnupOI93o01kaea9f9dAHgZNgSvnnvIH/
J8xPM7rX96Z2z0PbG9Py3YqfW/WBK1Gdn28j5MIXKwy5xDu2MZCmDh901b7SXRNC
AYDmGKXQxFpoJoNoBoPeZvu/dqAHfZJTD3OrAgMBAAGjggIrMIICJzAdBgNVHQ4E
FgQUwEdtIL4lMiXQ8nk15J39o+o4ZGYwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS93RWR0SUw0bE1pWFE4bmsxNUozOW8tbzRaR1ku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAoAYPAcMA0GCSqGSIb3DQEBCwUAA4IBAQBYJ3MuBFwTv2aAe2wE
LNYxPLaDfDr6UnzXm0Ufs2K6VlgTKDV66IpR6L2u4gy2iRPkoEwZvt5F7zvzhZOj
M9TeXqW37WBSMhb3+quNAnArguT4rwftrojprTZsAmKgow3NILIFJw+XQJF5A96c
sEnUsS1TSM45e+dezPt9GDONE6dT2yiO4JFNm+TWzPonP5bjoEaCJfaZ1CN8Ua9O
E6s5AOhArtG1ZA0TL9WyiUja3itD0g5PqdM80mTGd5n6+Cd/sFK2tA6eIwAxba7v
CnZ89NcqXPKcvKHn12Xi1Y7X1PiFc1mPGSKmo9Xxkkf9Z0WA1GBo22kcewnWKh41
Wh+g
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org