Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/BxBu_fhHIFDFHnX0OMAW3vNus04.roa
File:                     BxBu_fhHIFDFHnX0OMAW3vNus04.roa (raw, json)
Hash identifier:          BlPxOa4278ANjp9CnygKrY8mEH1Kv7NHud8fsmD3gSs=
Subject key identifier:   07:10:6E:FD:F8:47:20:50:C5:1E:75:F4:38:C0:16:DE:F3:6E:B3:4E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0108
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/BxBu_fhHIFDFHnX0OMAW3vNus04.roa
Signing time:             Wed 30 Nov 2022 02:51:08 +0000
ROA not before:           Wed 30 Nov 2022 02:51:08 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     10013
IP address blocks:        124.255.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Nov 30 02:51:08 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=07106EFDF8472050C51E75F438C016DEF36EB34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:77:6c:fd:dd:fd:60:f3:8b:0d:3c:47:bc:08:
                    3b:cb:4b:a2:10:2d:74:10:8d:02:c9:18:a0:b1:bf:
                    ac:bd:19:09:f9:7a:ee:3d:d9:76:4d:88:c2:2a:32:
                    59:40:86:38:d4:b2:a6:8b:c8:ea:2c:4f:91:49:45:
                    af:11:76:e3:c2:42:12:1d:41:66:83:05:0c:83:0d:
                    5e:c7:82:bf:51:7d:99:eb:51:e4:19:4d:85:75:d0:
                    22:5a:76:19:3e:45:79:f7:3f:92:7d:49:44:cd:52:
                    d8:8f:09:bb:49:37:e3:27:5e:64:d5:2c:ae:c4:4a:
                    95:b4:09:b3:44:4f:b0:ef:18:31:47:1b:39:86:56:
                    fd:60:8b:93:f9:bf:37:cd:a3:aa:85:53:a1:e0:30:
                    00:7b:b6:4e:80:27:1d:a8:45:0f:be:80:5a:39:aa:
                    b5:7f:50:ba:1d:8f:98:f8:14:2b:1f:3f:7c:b2:2a:
                    c5:96:bc:b9:cd:da:87:d4:5f:d8:16:f1:a5:7b:0c:
                    10:28:ec:3b:60:e1:75:6b:21:33:8c:eb:b0:2a:d8:
                    33:fa:08:45:a7:ff:52:3a:39:f5:28:d8:97:1d:e9:
                    75:46:0b:f2:2d:07:19:c4:20:6e:99:5c:c4:86:93:
                    09:ff:4c:c0:15:0b:fe:dc:b8:2e:bf:ab:6e:f2:73:
                    01:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:10:6E:FD:F8:47:20:50:C5:1E:75:F4:38:C0:16:DE:F3:6E:B3:4E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/BxBu_fhHIFDFHnX0OMAW3vNus04.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.255.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:a0:ca:6b:ba:3f:2f:72:03:72:da:33:30:c8:38:1f:05:6f:
         10:3e:b7:6b:0b:00:12:d3:b7:2a:3e:03:21:d9:08:d5:e2:f5:
         46:71:2a:07:43:35:65:80:64:fb:de:b0:5e:14:3b:8f:5d:69:
         e2:b8:e0:67:08:d0:21:6d:92:37:e2:b5:57:5f:42:a9:00:ff:
         e3:50:c9:3d:8f:a0:2e:17:d3:ca:9c:f0:94:ca:20:60:30:6e:
         28:77:4b:c5:12:51:0a:09:f1:93:ca:f7:5f:16:e5:99:8e:05:
         e4:1b:ea:14:45:00:c4:c3:c4:16:a2:e1:25:ee:ec:1f:c7:28:
         a0:77:27:75:fa:fd:e7:0d:58:d3:d5:c4:2a:95:51:73:16:4d:
         03:ee:e7:8b:34:e8:95:20:c6:c6:df:c6:6e:8d:17:b7:48:b8:
         f1:8c:db:69:92:83:71:e7:5f:a6:e4:56:ce:c0:64:cf:44:f1:
         f2:74:b8:1a:78:16:01:20:ca:bf:88:b3:06:8f:73:6e:1f:2f:
         80:70:32:de:80:74:21:0f:9d:f6:3e:84:92:42:96:a6:a8:cd:
         4f:0c:84:2c:35:29:3c:12:d5:de:79:a9:07:02:69:79:b1:b4:
         d5:7f:61:85:4e:25:c0:48:b4:78:c6:1d:a4:3c:0c:5f:64:7e:
         6c:f5:e5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org