Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zs_sMZQob0JAav0Ul7HyCo_a6nU.roa
File:                     zs_sMZQob0JAav0Ul7HyCo_a6nU.roa (raw, json)
Hash identifier:          vxvj8n0fzf32sgJukb97sadAwHwrK7o8HpxsSshk3dM=
Subject key identifier:   CE:CF:EC:31:94:28:6F:42:40:6A:FD:14:97:B1:F2:0A:8F:DA:EA:75
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       6E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zs_sMZQob0JAav0Ul7HyCo_a6nU.roa
Signing time:             Tue 30 May 2023 16:06:18 +0000
ROA not before:           Tue 30 May 2023 16:06:18 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1600::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:18 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=CECFEC3194286F42406AFD1497B1F20A8FDAEA75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3b:7d:af:9c:c1:27:d0:a9:56:7b:49:96:30:
                    20:cd:63:4d:4d:d9:94:22:cf:f9:d4:2b:36:63:d0:
                    32:d0:1b:91:7f:28:80:6f:3b:c0:99:b4:0e:04:b8:
                    ba:b3:98:4c:93:6f:34:52:46:99:3e:5a:55:2a:d4:
                    ca:44:17:fd:5d:6e:68:31:1e:a3:47:89:36:af:a7:
                    58:7a:5f:a8:4d:1f:b0:d5:87:da:5f:b3:cf:23:47:
                    83:9c:a7:08:ae:41:3c:68:07:69:26:d9:00:68:72:
                    9f:5d:d5:99:ff:3c:8b:48:82:14:fe:dd:23:b9:0b:
                    6d:c3:62:a2:c2:0f:53:e9:1c:4a:e7:ca:92:2c:e6:
                    77:25:bf:03:53:84:55:97:58:12:88:3c:80:1f:0c:
                    d9:c5:28:e8:a1:23:0f:98:81:dd:47:17:7e:b7:32:
                    e4:38:2a:a8:1a:66:bf:1c:f9:f2:45:d1:66:a1:1b:
                    37:27:0d:79:a8:61:5c:4a:9f:77:d4:91:e1:cb:e8:
                    3b:48:c4:ff:65:bc:e2:7e:d7:b7:18:83:14:7f:ce:
                    43:d7:96:8d:e7:93:f1:26:f3:3b:42:7b:1c:63:99:
                    38:c4:59:ea:e4:45:dd:33:2b:a5:36:56:fb:e7:d9:
                    79:3b:5e:17:fc:2c:e6:88:6c:d6:d4:63:31:6d:29:
                    3c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CF:EC:31:94:28:6F:42:40:6A:FD:14:97:B1:F2:0A:8F:DA:EA:75
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zs_sMZQob0JAav0Ul7HyCo_a6nU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:99:ab:b4:7f:aa:b6:df:4d:85:2b:9c:40:84:11:96:bc:a0:
         d2:d7:49:34:56:84:7f:e8:53:c4:3a:58:97:27:74:dc:6b:9e:
         43:f7:4d:06:f2:ff:0e:84:44:c2:24:59:19:ab:17:7a:34:c6:
         e1:5f:cb:5a:bd:41:b5:d7:94:ef:e9:96:7f:ac:c2:60:3c:5f:
         a9:18:ba:fc:ae:4b:89:2e:dd:75:9c:89:31:26:23:fb:ec:fb:
         f2:f9:4a:f4:91:4a:a2:93:14:bf:09:1f:7d:3f:36:61:6e:89:
         a3:23:61:bf:6f:7f:76:2a:ce:f2:80:8d:29:fb:46:a7:07:d9:
         c8:6c:2f:a0:2c:2d:1c:cf:9d:39:ae:85:20:26:39:69:46:c2:
         b8:14:64:13:98:ce:ef:83:8f:e0:33:dc:cf:c5:34:ab:67:8c:
         e4:75:98:3a:45:81:a5:cd:15:8d:68:58:69:9e:a6:98:5f:77:
         ad:1d:9d:29:7e:24:3b:70:57:d1:ab:42:7c:33:de:c7:1c:63:
         86:96:f7:d3:ce:37:c0:b6:19:03:1c:d2:49:97:5f:fa:fb:96:
         0d:f1:aa:6c:bb:8e:ef:05:71:93:63:b3:bc:7b:f8:0d:ae:ad:
         6c:b8:5d:39:35:9f:96:53:03:15:ec:ef:83:39:18:0d:37:ea:
         aa:c2:d7:ef
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBbjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MTI2
MTczQjhENkIzRkYxMEUzRjAzRkIwNTYwRkU2NTUxREVBMkRCMB4XDTIzMDUzMDE2
MDYxOFoXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoQ0VDRkVDMzE5NDI4NkY0
MjQwNkFGRDE0OTdCMUYyMEE4RkRBRUE3NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM47fa+cwSfQqVZ7SZYwIM1jTU3ZlCLP+dQrNmPQMtAbkX8ogG87
wJm0DgS4urOYTJNvNFJGmT5aVSrUykQX/V1uaDEeo0eJNq+nWHpfqE0fsNWH2l+z
zyNHg5ynCK5BPGgHaSbZAGhyn13Vmf88i0iCFP7dI7kLbcNiosIPU+kcSufKkizm
dyW/A1OEVZdYEog8gB8M2cUo6KEjD5iB3UcXfrcy5DgqqBpmvxz58kXRZqEbNycN
eahhXEqfd9SR4cvoO0jE/2W84n7XtxiDFH/OQ9eWjeeT8SbzO0J7HGOZOMRZ6uRF
3TMrpTZW++fZeTteF/ws5ohs1tRjMW0pPH8CAwEAAaOCAiowggImMB0GA1UdDgQW
BBTOz+wxlChvQkBq/RSXsfIKj9rqdTAfBgNVHSMEGDAWgBRRJhc7jWs/8Q4/A/sF
YP5lUd6i2zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMjkvVVNZWE80MXJQX0VPUHdQN0JXRC1aVkhlb3RzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVVNZWE80MXJQX0VPUHdQN0JXRC1a
Vkhlb3RzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTI5L3pzX3NNWlFvYjBKQWF2MFVsN0h5Q29fYTZuVS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkCgBrFjANBgkqhkiG9w0BAQsFAAOCAQEAlZmrtH+qtt9NhSucQIQR
lryg0tdJNFaEf+hTxDpYlyd03GueQ/dNBvL/DoREwiRZGasXejTG4V/LWr1BtdeU
7+mWf6zCYDxfqRi6/K5LiS7ddZyJMSYj++z78vlK9JFKopMUvwkffT82YW6JoyNh
v29/dirO8oCNKftGpwfZyGwvoCwtHM+dOa6FICY5aUbCuBRkE5jO74OP4DPcz8U0
q2eM5HWYOkWBpc0VjWhYaZ6mmF93rR2dKX4kO3BX0atCfDPexxxjhpb30843wLYZ
AxzSSZdf+vuWDfGqbLuO7wVxk2OzvHv4Da6tbLhdOTWfllMDFezvgzkYDTfqqsLX
7w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org