Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/1xgsrkwhFz-5odgLZRixJqYFUjE.roa
File:                     1xgsrkwhFz-5odgLZRixJqYFUjE.roa (raw, json)
Hash identifier:          /5CC0sl5oaX2xgT2cgQVcNRjDZaQ4aDVptJmlkTbbjc=
Subject key identifier:   D7:18:2C:AE:4C:21:17:3F:B9:A1:D8:0B:65:18:B1:26:A6:05:52:31
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0314
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/1xgsrkwhFz-5odgLZRixJqYFUjE.roa
Signing time:             Tue 25 May 2021 02:42:04 +0000
ROA not before:           Tue 25 May 2021 02:42:04 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        116.254.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788 (0x314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:04 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=D7182CAE4C21173FB9A1D80B6518B126A6055231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fa:72:37:cc:df:44:be:be:34:4a:bc:9c:cf:
                    1d:ec:5e:c7:05:a6:a0:eb:9e:9a:a3:34:61:e6:9c:
                    5f:22:92:9d:c7:87:02:b8:ad:b4:ab:06:a3:58:74:
                    04:16:65:66:10:c9:54:07:b3:8a:de:58:d3:10:1a:
                    42:ab:9b:b9:55:e0:4d:3f:52:cb:1f:0f:c8:2f:52:
                    93:13:48:ca:7f:41:81:b5:f1:ab:60:9c:e6:5b:18:
                    ca:51:62:0b:69:b7:28:e4:a9:76:6b:b4:bd:ad:eb:
                    59:21:20:95:ed:d3:82:fa:45:17:b9:fb:50:11:ea:
                    9d:c2:63:e3:29:d0:15:b4:81:67:0f:56:8b:1a:e7:
                    44:b1:18:c8:04:7b:2f:93:45:07:b5:ce:09:ac:1c:
                    19:97:92:92:7b:f3:37:0c:e2:c8:62:f0:a9:50:93:
                    ba:34:a4:45:ee:2c:d2:1c:f3:ac:f2:2b:69:4e:06:
                    b9:74:95:ee:7b:b9:18:08:ba:2e:dd:10:e3:b2:77:
                    16:66:54:e1:6e:1c:88:a4:4e:bb:cc:3f:f1:8e:cd:
                    8d:bb:74:bb:03:fe:c6:99:c1:ae:8e:d4:bd:e0:b0:
                    e9:03:1a:77:14:fa:59:3f:0e:84:cb:7b:1f:db:0b:
                    62:6c:f3:13:ab:40:b7:54:69:67:20:7f:c7:7b:0e:
                    ce:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:18:2C:AE:4C:21:17:3F:B9:A1:D8:0B:65:18:B1:26:A6:05:52:31
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/1xgsrkwhFz-5odgLZRixJqYFUjE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.254.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         00:84:44:a1:c9:73:8f:90:3e:45:92:e7:d0:d1:73:7a:8b:f5:
         0d:aa:c1:a9:a4:6c:60:6c:c6:b3:fd:8c:e7:0d:23:33:76:99:
         e9:15:b7:f5:43:ce:9a:94:6f:fb:6c:10:6e:6b:23:65:54:a6:
         a3:d2:e6:6e:34:55:cb:04:12:05:9e:57:42:61:70:c8:70:b1:
         76:a5:88:aa:bd:1a:59:46:29:99:27:01:f2:9f:66:71:b0:fa:
         92:92:44:c7:f2:37:57:03:48:95:95:8b:a7:f2:3b:c4:b3:ea:
         3f:0a:f2:4e:a3:54:eb:69:e4:09:db:1b:da:db:4e:35:c8:31:
         c5:7a:44:7a:a2:83:ec:4b:e7:d3:4f:8a:f6:ac:46:7b:36:d2:
         a7:19:92:df:dd:06:06:13:67:37:37:50:a0:dc:31:bc:7c:96:
         d5:74:88:59:99:d8:21:ac:46:4a:eb:ce:1f:e9:2c:83:c1:34:
         b3:88:00:59:da:b9:23:a9:f3:09:7a:93:f6:c5:f2:f0:32:88:
         43:83:4c:aa:9e:b1:19:12:3c:b4:8c:60:3e:5a:03:87:c3:71:
         4b:6c:e1:b3:a1:1b:60:07:e0:88:e8:c4:84:59:63:aa:69:c1:
         40:e0:82:42:64:c4:f9:f9:71:90:5f:22:5a:87:e9:eb:9f:a4:
         6f:9b:27:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org