Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/BQcpSthQVJagvEe-01Bq6xUEKfw.roa
File:                     BQcpSthQVJagvEe-01Bq6xUEKfw.roa (raw, json)
Hash identifier:          gE4R6vt6FBOdF7XbFqVa/7POVmpPuw9rCJ0t5+6cgBU=
Subject key identifier:   05:07:29:4A:D8:50:54:96:A0:BC:47:BE:D3:50:6A:EB:15:04:29:FC
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       33
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/BQcpSthQVJagvEe-01Bq6xUEKfw.roa
Signing time:             Wed 01 Feb 2023 01:30:29 +0000
ROA not before:           Wed 01 Feb 2023 01:30:29 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     17676
IP address blocks:        126.135.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Feb  1 01:30:29 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=0507294AD8505496A0BC47BED3506AEB150429FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5e:1c:f0:a0:1a:b4:58:63:2a:4f:83:a2:6a:
                    99:05:d6:2a:58:11:cd:b3:9c:16:e2:c5:0b:1b:91:
                    e0:80:f5:11:26:6e:86:1c:a5:80:6a:c6:ec:57:c7:
                    37:64:c1:4c:fc:ec:76:90:3b:43:0f:ef:d0:35:34:
                    1f:d5:90:4b:52:5c:64:8c:f3:93:ba:13:cf:73:a3:
                    4c:ba:67:83:5e:4b:76:dd:7a:d4:db:6b:f1:d5:bf:
                    fd:2a:98:b7:8c:b3:5e:ba:fe:80:ab:6b:2f:cf:a0:
                    2e:c4:e6:2b:db:5c:6a:69:69:a4:b8:89:a9:ba:79:
                    c4:8a:76:e4:e3:ad:2d:f5:fe:8c:da:7d:54:54:bf:
                    6a:2d:27:df:9a:ca:7d:0d:26:4c:8a:28:93:fa:a0:
                    be:43:63:87:e4:e8:a3:9d:1a:4c:91:90:df:48:67:
                    ef:6e:9a:82:b0:dd:9d:12:52:37:99:83:3f:96:c0:
                    63:21:4c:23:5d:00:e8:69:08:5f:c4:7f:b7:0c:96:
                    0c:21:19:18:36:d5:db:b3:b1:64:bd:a2:e4:7b:d3:
                    ac:82:8b:a0:91:c5:f6:a8:9a:d9:fd:07:22:09:9f:
                    b3:9d:cb:c8:23:1c:25:8b:dc:25:5d:bc:24:bc:00:
                    80:14:56:52:a8:fd:d8:cd:6c:c9:bf:21:77:32:8d:
                    c3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:07:29:4A:D8:50:54:96:A0:BC:47:BE:D3:50:6A:EB:15:04:29:FC
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/BQcpSthQVJagvEe-01Bq6xUEKfw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.135.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b9:db:91:b6:9c:b9:3e:94:d5:34:14:b2:02:39:10:e2:c9:18:
         59:7e:d0:67:7c:5d:d5:2f:bb:cc:64:5a:56:6a:07:5b:0a:8e:
         79:36:c8:09:0a:22:64:10:d7:8d:90:ed:da:4a:73:00:12:11:
         2b:13:08:f7:42:5b:c2:3f:a8:eb:cf:ec:e5:3a:21:ca:cd:44:
         2c:07:95:b4:af:eb:4d:e7:6d:70:90:81:4c:8f:8a:1d:db:78:
         c4:86:06:66:62:be:50:fa:28:94:31:b2:23:d9:3c:ba:c5:6f:
         c5:6b:b8:92:82:9c:ad:6a:1e:06:e3:67:58:6b:46:17:90:c2:
         75:e8:e1:8e:a5:7f:30:7a:2a:91:40:06:da:02:2e:aa:8b:61:
         52:93:b5:ff:ef:02:f9:44:cd:58:1e:46:00:a6:ae:82:e8:10:
         e7:45:52:4f:70:b9:45:cf:07:c0:09:74:bb:87:bb:d2:7b:26:
         a8:fc:85:d1:4e:0b:b9:88:de:37:28:dc:e7:a7:eb:27:d9:4e:
         bf:31:ef:7e:5a:6a:6b:a7:fb:d3:aa:21:a7:11:ed:45:9f:de:
         68:84:23:ba:70:6b:96:5b:aa:da:b8:b7:7a:8f:1f:6c:f5:72:
         5c:42:cd:ba:10:06:32:57:e9:e7:4b:f5:62:3b:d4:a5:64:50:
         0c:75:c4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org