Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/BFP7BnRgShPXd62_8aifx-PbkEk.roa
File:                     BFP7BnRgShPXd62_8aifx-PbkEk.roa (raw, json)
Hash identifier:          jlEOgaFu2OUoifgohp7Cb+Q5pzX34IRml2u5EduTaXM=
Subject key identifier:   04:53:FB:06:74:60:4A:13:D7:77:AD:BF:F1:A8:9F:C7:E3:DB:90:49
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       0E
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/BFP7BnRgShPXd62_8aifx-PbkEk.roa
Signing time:             Thu 13 Oct 2022 06:52:08 +0000
ROA not before:           Thu 13 Oct 2022 06:52:08 +0000
ROA not after:            Fri 13 Oct 2023 06:37:32 +0000
asID:                     10000
IP address blocks:        203.217.156.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Oct 13 06:52:08 2022 GMT
            Not After : Oct 13 06:37:32 2023 GMT
        Subject: CN=0453FB0674604A13D777ADBFF1A89FC7E3DB9049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e3:ff:f7:b7:41:c0:b4:ab:6e:ba:d7:cd:f8:
                    32:a7:62:d2:e5:38:11:e3:13:bc:df:34:b8:a1:42:
                    48:e2:a9:b7:33:bd:57:0c:38:29:a7:b6:7b:f8:4f:
                    a1:ec:1e:e5:c7:d9:d9:df:6f:4b:cc:9a:e5:33:d2:
                    e5:d4:af:3b:25:aa:77:d3:7b:9f:6b:69:8c:45:72:
                    c0:a9:d3:ed:70:89:69:48:30:8f:e9:65:f4:ee:78:
                    a0:84:ab:75:c6:a6:25:61:9c:dc:bb:00:69:99:2d:
                    08:7c:ae:bc:cc:c0:89:1e:09:08:8d:61:64:09:22:
                    8e:72:d5:7e:5e:46:e2:bc:79:18:67:8f:4b:60:06:
                    5b:36:6a:76:b8:41:ff:5d:80:e8:64:6f:dc:a3:13:
                    d4:6a:3e:db:a8:cc:b1:23:e5:90:0b:2b:55:d0:99:
                    ba:b2:e6:b4:95:92:fc:29:b1:6c:d8:28:07:b1:af:
                    78:df:9a:9c:23:f7:66:d6:34:f8:f6:b7:65:92:15:
                    ed:ec:2f:61:e8:1c:82:f5:61:7a:49:58:56:6f:8b:
                    d4:35:dc:1c:1b:bd:a6:59:2b:9e:7a:c3:1d:65:9b:
                    8e:da:c4:22:f1:89:3d:98:21:8e:dc:13:d9:fe:e4:
                    9a:fe:92:7f:de:a6:23:6a:89:04:53:09:c2:4a:f3:
                    ba:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:53:FB:06:74:60:4A:13:D7:77:AD:BF:F1:A8:9F:C7:E3:DB:90:49
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/BFP7BnRgShPXd62_8aifx-PbkEk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.217.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:4d:e4:47:53:cd:92:47:16:23:74:20:29:6a:6b:c5:ed:20:
         c3:7b:c2:6f:cd:65:36:dd:ac:30:de:90:a5:23:e2:9a:c1:26:
         cf:65:e9:ae:6c:96:9d:ce:29:0c:a5:da:00:12:0d:3b:97:36:
         2c:17:26:77:6a:36:4f:50:47:9c:b4:4f:bd:86:6f:95:7d:a8:
         ff:5c:b3:b7:6c:a2:00:f8:e0:9f:df:70:a3:37:07:10:bb:8e:
         05:1f:f2:9d:db:e4:d2:66:c5:16:b6:86:58:ca:be:cd:4a:a1:
         b0:19:7f:97:22:f0:13:63:8c:01:2d:36:de:1e:41:28:f1:f7:
         20:48:c2:d6:fc:c8:ad:e2:c6:cd:de:56:29:bc:2d:ef:8c:d8:
         76:0f:c9:29:90:3a:dc:68:f5:66:61:8b:b6:d8:7d:bb:bd:2b:
         57:80:cb:96:cb:ae:f0:84:81:cd:6a:3f:a4:cf:05:bb:1f:79:
         c6:90:77:22:4d:7f:a6:63:39:0b:7d:84:24:1c:c2:1e:c1:1a:
         cf:be:49:19:aa:f7:35:b3:5f:8b:73:99:90:39:c6:f4:47:c0:
         a1:7f:d6:77:91:99:ee:2e:5d:11:ad:40:d4:cf:97:65:03:97:
         17:95:25:41:08:50:7a:ae:81:81:15:7d:b1:5c:32:18:28:e7:
         e0:47:7e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org