Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/BXMFkItbUIt01XBAIYY_OJ6LLzY.roa
File:                     BXMFkItbUIt01XBAIYY_OJ6LLzY.roa (raw, json)
Hash identifier:          3eL4GUfgPX7Tuen0EYcdDiaBZaUvljd5m1I9EFjv+F0=
Subject key identifier:   05:73:05:90:8B:5B:50:8B:74:D5:70:40:21:86:3F:38:9E:8B:2F:36
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       57
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/BXMFkItbUIt01XBAIYY_OJ6LLzY.roa
Signing time:             Tue 25 May 2021 02:31:58 +0000
ROA not before:           Tue 25 May 2021 02:31:58 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     18126
IP address blocks:        219.117.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: May 25 02:31:58 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=057305908B5B508B74D5704021863F389E8B2F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:14:41:84:c8:a6:aa:49:07:32:7b:6d:ae:a4:
                    7d:91:5c:00:5b:82:64:81:3d:23:7b:d4:eb:6b:60:
                    19:e9:41:2a:78:a8:a3:0e:88:ea:a5:e4:5e:e1:47:
                    9b:04:7d:6b:4e:42:11:3f:de:42:12:3e:f8:7e:ec:
                    e4:30:95:02:16:0d:55:f0:cb:6d:c6:db:26:a2:96:
                    a0:72:14:e3:07:5c:08:33:97:bd:69:31:8c:f3:ea:
                    82:5e:df:a8:44:58:1e:5a:9b:ee:4b:06:c8:38:db:
                    14:e9:a3:38:3c:16:72:d1:7e:a8:ac:02:c1:80:c7:
                    17:f1:de:91:28:d9:9d:52:69:89:66:42:ff:0c:74:
                    46:4d:a1:29:1f:92:fc:68:fb:0a:c5:91:b6:ff:bb:
                    1f:1d:1a:97:dd:10:c9:0c:b5:f4:52:90:13:d4:06:
                    b5:f0:4d:f6:09:73:e5:fc:5e:cf:9a:af:6b:c0:c8:
                    4c:59:bc:c2:50:9c:75:33:c8:28:ca:65:14:c5:f7:
                    08:f8:72:fa:23:3b:26:56:d8:8a:2c:d5:69:16:da:
                    88:95:92:22:a9:f1:1e:0f:58:d7:90:74:39:17:45:
                    c1:67:d2:86:cd:64:e3:17:a3:c0:ce:14:77:46:ca:
                    3e:e3:1e:37:ec:8d:94:fc:c5:70:bb:8c:95:6d:ca:
                    6f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:73:05:90:8B:5B:50:8B:74:D5:70:40:21:86:3F:38:9E:8B:2F:36
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/BXMFkItbUIt01XBAIYY_OJ6LLzY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.117.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a0:d1:d4:87:6d:89:16:2b:c0:34:48:6a:88:ff:15:78:b4:a4:
         8c:00:de:91:2b:fc:d2:6f:23:dd:7e:eb:fb:70:c9:57:42:94:
         c5:71:5e:9f:64:48:cd:9d:2a:cf:15:6d:2c:51:7f:69:c9:59:
         cd:de:34:3f:20:d1:17:58:a9:a6:7c:3c:dd:60:39:27:a7:33:
         be:c1:bd:10:23:2f:d4:10:9e:7f:7a:0a:68:2a:fe:0a:40:31:
         73:04:31:ef:93:3f:05:44:31:1c:cf:8f:45:e1:83:88:4c:b6:
         15:cd:19:91:96:45:74:5d:01:5d:87:c0:c3:d7:7c:35:fb:d8:
         56:84:6b:bd:72:74:5c:38:83:54:b8:7f:d2:5f:e0:13:18:fe:
         75:85:a2:9e:fc:71:63:ab:4c:32:8e:23:68:6e:99:db:93:fb:
         be:f8:66:c7:14:a0:21:10:3e:04:e7:27:7f:c6:57:68:7d:66:
         8a:cf:42:15:b9:be:97:17:da:00:28:87:27:ec:24:5e:28:1c:
         62:86:27:ae:21:7f:36:74:69:ca:eb:a8:65:ac:97:cc:66:63:
         3a:23:ce:c5:f7:5e:37:08:6f:01:4f:24:2c:c3:ae:aa:34:9a:
         40:0e:c8:c3:2b:70:8c:ec:1a:88:a2:21:39:95:da:c5:fb:c5:
         0d:9a:55:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org