Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/BWMAMNDZgjK-g6-By82Yw2j2pCY.roa
File:                     BWMAMNDZgjK-g6-By82Yw2j2pCY.roa (raw, json)
Hash identifier:          3z5YKmNvcFVETOQ3hRRo1SjsKdUjxlWzVTqFdFL1o/A=
Subject key identifier:   05:63:00:30:D0:D9:82:32:BE:83:AF:81:CB:CD:98:C3:68:F6:A4:26
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       013C
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/BWMAMNDZgjK-g6-By82Yw2j2pCY.roa
Signing time:             Thu 01 Sep 2022 01:28:26 +0000
ROA not before:           Thu 01 Sep 2022 01:28:26 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     7684
IP address blocks:        182.48.15.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:28:26 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=05630030D0D98232BE83AF81CBCD98C368F6A426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0a:a9:b8:6c:1e:b5:df:5f:38:6c:24:17:50:
                    4d:cd:5f:2a:35:41:8e:79:11:72:32:19:79:4f:8c:
                    5f:cb:bd:a1:9c:f3:5c:57:3e:53:f8:13:a6:80:7e:
                    5f:26:e4:6e:46:0d:2d:19:ba:ae:c8:20:e4:a1:d4:
                    19:d9:80:e9:72:d1:2d:f8:34:80:10:73:75:b3:3e:
                    f2:a8:3b:74:56:9d:a4:81:cf:71:b6:7e:af:b7:5a:
                    29:4b:05:07:2a:99:49:8c:ad:8c:fe:af:03:43:1a:
                    5c:6a:8f:65:13:69:ff:04:70:ce:6e:98:35:cc:19:
                    f6:5a:fa:01:1b:39:ef:29:c6:d7:8a:9b:6e:0d:c3:
                    f8:ec:4c:b0:8c:0a:0c:85:d6:44:a4:10:66:c3:db:
                    d1:82:30:b1:0a:64:ff:d9:a9:72:f3:87:95:c2:53:
                    ca:6f:3b:74:26:9c:1d:e7:d3:ee:ec:16:f8:ed:fe:
                    41:14:30:31:3c:f5:fa:e3:85:3d:0b:fd:b9:de:a8:
                    07:3f:bb:1c:8a:01:4c:50:ea:71:97:f1:4d:e0:06:
                    6a:02:dd:b3:d0:f8:dc:07:04:52:9b:9b:94:31:fb:
                    15:05:20:6b:a8:8b:83:81:ed:1a:ea:0d:76:f3:71:
                    9e:2f:9e:a6:02:d7:5f:8f:03:a4:31:9f:00:e8:b8:
                    e4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:63:00:30:D0:D9:82:32:BE:83:AF:81:CB:CD:98:C3:68:F6:A4:26
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/BWMAMNDZgjK-g6-By82Yw2j2pCY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:85:31:ab:6b:fa:12:46:0c:46:a6:f6:40:43:eb:e7:c0:04:
         51:90:d4:48:26:ec:d4:f7:53:b8:6e:a7:5f:51:a6:63:64:1a:
         3f:09:7e:3e:f4:aa:27:bc:95:2d:5d:0a:33:89:b3:28:26:fe:
         bd:87:08:64:30:8c:a9:d8:a7:06:e4:e3:4a:bd:bb:e7:d2:10:
         b1:27:e5:6a:ed:2c:4e:97:d7:ad:77:7b:fb:e4:5f:b1:24:1e:
         d3:f3:a3:c8:a7:fb:63:6d:b6:73:b9:e2:5c:03:1d:30:e8:5d:
         b0:61:1c:2b:2f:3e:85:23:2b:bf:82:7b:af:f8:60:04:d7:af:
         a8:28:d4:f4:64:f4:ae:20:b6:f5:d8:a3:0d:0b:e4:53:f4:0d:
         3a:47:c6:da:b4:27:29:cf:bc:2a:29:03:51:78:04:8c:41:b1:
         d4:17:98:c1:ec:8f:79:ab:32:05:9d:c0:1c:a8:ab:ba:d1:d7:
         22:c7:48:ed:d9:5c:1f:0c:ee:ec:5f:26:a1:7e:eb:f0:36:55:
         bf:65:e3:63:71:91:5b:4d:96:e4:db:0d:15:5a:15:e3:ca:0b:
         17:46:a7:3a:03:99:d5:c2:8c:00:45:1f:02:2b:c7:2d:e4:72:
         17:b5:d0:73:cd:f0:11:6a:6c:26:de:14:61:57:ca:f5:ba:4d:
         f7:9f:01:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org