Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/fwEfXc-ZYULA2NyksAfEP6rQja8.roa
File:                     fwEfXc-ZYULA2NyksAfEP6rQja8.roa (raw, json)
Hash identifier:          CG5jDYyVceAlmFXO0v+duSkDjSYOQwovPqGmMA9DBO4=
Subject key identifier:   7F:01:1F:5D:CF:99:61:42:C0:D8:DC:A4:B0:07:C4:3F:AA:D0:8D:AF
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       0F
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/fwEfXc-ZYULA2NyksAfEP6rQja8.roa
Signing time:             Thu 11 May 2023 08:45:39 +0000
ROA not before:           Thu 11 May 2023 08:45:39 +0000
ROA not after:            Fri 10 May 2024 08:19:05 +0000
asID:                     59127
IP address blocks:        2401:7ec0:e000::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: May 11 08:45:39 2023 GMT
            Not After : May 10 08:19:05 2024 GMT
        Subject: CN=7F011F5DCF996142C0D8DCA4B007C43FAAD08DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f6:00:12:d5:d4:a7:24:ca:a1:a8:a3:3f:b1:
                    3f:7f:6d:dd:61:51:04:96:f1:a2:cb:c7:e4:56:28:
                    c3:aa:0f:09:57:89:cc:e9:1a:75:34:ec:9d:15:f5:
                    01:7c:de:64:28:8f:9a:5e:18:25:91:72:c6:b7:58:
                    9b:54:9e:eb:5c:e3:ef:e7:ec:f3:b7:95:09:38:10:
                    01:92:18:c0:be:5f:a3:e6:da:6f:2e:e4:f0:d3:12:
                    54:38:7f:c4:98:a2:f8:6b:00:31:77:71:b8:fe:79:
                    e7:00:9c:d8:24:06:cf:8d:14:26:c9:7e:83:b8:3f:
                    7b:f5:95:0d:e0:d9:62:29:11:72:6f:95:54:24:9c:
                    36:d3:fc:95:8a:7d:d3:80:62:c0:dd:01:a4:01:87:
                    da:27:27:96:15:5a:cc:d6:0f:5c:16:4c:37:6b:97:
                    c7:c8:ed:ce:5c:dd:9f:e6:e7:0b:99:53:fd:6e:0e:
                    0f:ec:6f:e0:54:87:fc:cd:f6:be:0a:4b:4d:d0:b9:
                    4a:17:b7:ef:b1:9f:3d:25:1c:59:9f:1f:3b:3e:ee:
                    6f:09:da:66:e0:31:7c:70:15:b2:bf:b2:a1:21:3f:
                    7e:a1:2d:56:f7:4b:82:92:49:aa:0e:00:61:38:e3:
                    75:67:4d:42:4d:44:c7:b5:36:6f:7a:d0:ca:72:7a:
                    c4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:01:1F:5D:CF:99:61:42:C0:D8:DC:A4:B0:07:C4:3F:AA:D0:8D:AF
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/fwEfXc-ZYULA2NyksAfEP6rQja8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         89:dd:47:29:79:a7:8d:10:48:eb:3b:dc:41:7c:82:e7:78:e6:
         e2:34:cd:ce:87:01:51:97:bc:58:9b:df:24:89:99:f8:5f:70:
         a8:b0:b1:d9:0d:65:b1:66:a3:c2:6d:b8:8a:51:52:66:a6:4b:
         81:a4:c1:70:92:1c:d7:b6:bb:f0:63:89:ef:54:1e:1e:b4:c7:
         ef:df:3e:bc:b3:3f:c5:8f:fc:d6:90:8a:8d:05:b9:f7:10:ee:
         47:bf:08:a7:6f:91:86:66:52:cb:98:81:fb:8d:7e:72:26:56:
         d4:63:20:b1:21:e1:c5:08:be:15:c8:06:0a:38:64:4d:42:41:
         25:da:80:b4:da:7b:f6:77:74:bd:47:ef:9d:20:18:f5:b8:9a:
         7d:e0:3e:28:98:3c:ea:e4:b6:0f:14:0a:54:71:63:20:10:85:
         f5:b8:4a:77:99:1d:33:36:4c:74:69:03:2a:12:62:dc:ce:48:
         78:09:91:cd:f3:ac:8a:d8:ee:66:6b:7f:b5:be:09:96:ee:bd:
         34:08:c1:d6:21:b1:f6:66:b7:21:09:ca:62:7b:d3:74:39:35:
         00:47:77:7f:34:fa:b9:e2:44:8f:7b:80:81:74:97:84:9f:45:
         48:bb:1d:fa:01:9f:39:d1:a2:b5:83:50:80:96:6e:f3:ed:36:
         de:19:f6:e3
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2QTUx
M0FGN0JGNUQyREQ2MjlGRDE4MjY4ODVDMTAwMjkyOTMwNUNEMB4XDTIzMDUxMTA4
NDUzOVoXDTI0MDUxMDA4MTkwNVowMzExMC8GA1UEAxMoN0YwMTFGNURDRjk5NjE0
MkMwRDhEQ0E0QjAwN0M0M0ZBQUQwOERBRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJz2ABLV1KckyqGooz+xP39t3WFRBJbxosvH5FYow6oPCVeJzOka
dTTsnRX1AXzeZCiPml4YJZFyxrdYm1Se61zj7+fs87eVCTgQAZIYwL5fo+baby7k
8NMSVDh/xJii+GsAMXdxuP555wCc2CQGz40UJsl+g7g/e/WVDeDZYikRcm+VVCSc
NtP8lYp904BiwN0BpAGH2icnlhVazNYPXBZMN2uXx8jtzlzdn+bnC5lT/W4OD+xv
4FSH/M32vgpLTdC5She377GfPSUcWZ8fOz7ubwnaZuAxfHAVsr+yoSE/fqEtVvdL
gpJJqg4AYTjjdWdNQk1Ex7U2b3rQynJ6xMsCAwEAAaOCAiowggImMB0GA1UdDgQW
BBR/AR9dz5lhQsDY3KSwB8Q/qtCNrzAfBgNVHSMEGDAWgBRqUTr3v10t1in9GCaI
XBACkpMFzTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMDQvYWxFNjk3OWRMZFlwX1JnbWlGd1FBcEtUQmMwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYWxFNjk3OWRMZFlwX1JnbWlGd1FB
cEtUQmMwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzA0L2Z3RWZYYy1aWVVMQTJOeWtzQWZFUDZyUWphOC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQkAX7A4DANBgkqhkiG9w0BAQsFAAOCAQEAid1HKXmnjRBI6zvcQXyC
53jm4jTNzocBUZe8WJvfJImZ+F9wqLCx2Q1lsWajwm24ilFSZqZLgaTBcJIc17a7
8GOJ71QeHrTH798+vLM/xY/81pCKjQW59xDuR78Ip2+RhmZSy5iB+41+ciZW1GMg
sSHhxQi+FcgGCjhkTUJBJdqAtNp79nd0vUfvnSAY9biafeA+KJg86uS2DxQKVHFj
IBCF9bhKd5kdMzZMdGkDKhJi3M5IeAmRzfOsitjuZmt/tb4Jlu69NAjB1iGx9ma3
IQnKYnvTdDk1AEd3fzT6ueJEj3uAgXSXhJ9FSLsd+gGfOdGitYNQgJZu8+023hn2
4w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org