Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/bpl-23eJs8XocMajXpZZVg-MF80.roa
File:                     bpl-23eJs8XocMajXpZZVg-MF80.roa (raw, json)
Hash identifier:          BpQG+xM0XIVDvT9qoKQNTRRy08K57PROQf7jWtHS1gA=
Subject key identifier:   6E:99:7E:DB:77:89:B3:C5:E8:70:C6:A3:5E:96:59:56:0F:8C:17:CD
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       26
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/bpl-23eJs8XocMajXpZZVg-MF80.roa
Signing time:             Mon 01 May 2023 01:29:35 +0000
ROA not before:           Mon 01 May 2023 01:29:35 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.192.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: May  1 01:29:35 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=6E997EDB7789B3C5E870C6A35E9659560F8C17CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:97:38:f5:c5:87:a7:5c:ab:83:cd:69:02:d6:
                    e8:2d:b8:cf:6d:45:6b:a7:6e:f2:7e:5c:91:0e:7f:
                    c0:a3:a3:4b:d9:d9:fe:99:d0:d2:81:6d:68:dc:2d:
                    57:68:d0:cd:36:b5:75:83:c5:92:d7:ca:c0:c5:13:
                    a0:b5:9c:99:3a:ce:2b:ce:13:0d:b6:bb:f6:49:3f:
                    bd:83:62:2d:45:9f:87:70:d0:2d:ff:50:f8:87:22:
                    b6:a0:8a:f2:35:87:c6:e7:0c:63:fd:a7:29:d1:de:
                    78:a9:b9:9f:5d:78:cd:0a:47:96:47:25:40:26:8d:
                    6d:d6:c3:fa:48:87:43:48:13:ae:e4:79:4c:50:91:
                    64:c5:ba:35:23:a3:59:2a:d5:9c:64:0c:44:7e:c4:
                    01:51:20:db:b4:7d:cc:68:8f:77:41:65:50:01:4e:
                    49:50:1a:5a:d9:bc:2c:5a:b3:12:40:d4:ed:41:52:
                    79:ef:16:13:c5:1a:9c:3e:b9:ea:b1:d9:4b:4f:11:
                    eb:59:e0:45:0f:2c:c4:fc:c4:d4:03:d9:38:4b:cd:
                    74:4a:9c:df:8a:96:19:36:19:a9:33:fa:38:2f:86:
                    cd:41:9c:de:2f:ca:32:5b:ab:34:a0:af:44:10:3f:
                    b7:0c:27:bd:2c:98:7b:e5:6c:65:5e:b0:dc:4d:e0:
                    55:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:99:7E:DB:77:89:B3:C5:E8:70:C6:A3:5E:96:59:56:0F:8C:17:CD
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/bpl-23eJs8XocMajXpZZVg-MF80.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:b6:e7:ca:0e:13:37:cf:b4:97:60:14:0c:3b:fd:8f:fa:a9:
         a1:a3:b0:72:78:8b:c1:d9:0e:06:bb:69:ec:95:0b:96:54:b9:
         b2:db:bd:0b:16:e4:67:ca:c7:3d:34:a9:c5:00:35:61:cf:f7:
         9d:46:63:1c:ad:a7:10:27:1a:ce:2c:4a:30:c6:de:85:29:c9:
         94:8a:cd:45:74:1b:36:68:75:8b:00:25:94:ed:10:cb:43:5d:
         f1:b6:7d:98:18:4c:22:04:bb:ac:ce:d9:a8:ce:13:f3:cf:26:
         9c:b1:7d:1a:47:71:e8:06:9c:7e:37:46:fb:9f:b8:3e:5b:ab:
         03:a6:cb:14:2b:64:f4:8c:ac:1b:8a:46:4a:20:32:aa:1f:1f:
         ba:21:1c:b8:4a:42:16:f3:a3:d7:24:ac:83:1d:c7:f0:db:a0:
         29:63:ee:ab:5e:81:29:1d:4b:03:3c:4e:83:82:c1:5b:c5:26:
         1b:af:f3:7f:3c:6f:3c:0c:28:cf:e6:9a:c8:55:9c:04:7d:e9:
         da:9b:ca:de:a3:2f:5d:45:ea:f0:77:f8:93:d8:7e:45:11:f5:
         da:e1:e8:99:ff:5e:db:1d:27:a2:50:9c:f6:cd:4a:3e:21:29:
         e0:dc:c3:79:ba:50:03:db:5a:58:24:87:2c:5f:46:0c:bb:40:
         00:7a:d4:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org