Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/1zSKj54B4K2s7a4kga4PU0WU68Y.roa
File:                     1zSKj54B4K2s7a4kga4PU0WU68Y.roa (raw, json)
Hash identifier:          vWl8qOKDfyi3Avh3scpIPXGiLJ+lmtiR2UW5NKXXiys=
Subject key identifier:   D7:34:8A:8F:9E:01:E0:AD:AC:ED:AE:24:81:AE:0F:53:45:94:EB:C6
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       032C
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/1zSKj54B4K2s7a4kga4PU0WU68Y.roa
Signing time:             Tue 25 May 2021 02:42:53 +0000
ROA not before:           Tue 25 May 2021 02:42:53 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.88.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 812 (0x32c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:53 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=D7348A8F9E01E0ADACEDAE2481AE0F534594EBC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3b:e0:d8:41:0b:b2:37:28:ec:1d:90:9c:ff:
                    1d:05:4c:78:95:a0:9d:0e:4f:cd:95:2e:64:c1:b4:
                    1c:8f:4f:25:8d:56:fe:e1:15:94:1a:fb:e9:f8:72:
                    55:9d:61:cd:0d:f6:90:0f:14:83:f4:60:4a:b0:76:
                    69:b5:a3:7e:c9:34:3f:6a:f9:e5:78:ff:31:f1:c7:
                    f2:26:55:c9:19:4e:01:87:3b:64:46:c0:df:17:1d:
                    08:1f:1d:a4:91:72:c5:de:f7:c5:51:ef:c1:36:48:
                    13:41:9e:da:3c:06:e6:a8:4a:48:3b:5f:32:2b:99:
                    c9:66:d3:f3:fd:ce:97:48:be:8b:40:57:0a:ad:1a:
                    f7:d4:4b:d2:d4:3a:66:ce:ca:b4:43:c3:eb:9b:80:
                    96:9f:81:6e:95:99:47:a1:c1:34:1a:88:c3:c8:ac:
                    84:26:e9:85:8d:20:0c:fa:fc:f6:bf:dd:57:fc:fb:
                    af:27:c8:eb:19:46:0f:26:a1:d5:74:3d:69:3a:6f:
                    ee:53:39:cd:d4:a5:97:04:5d:c4:e2:61:4a:76:89:
                    22:7a:5c:db:3c:74:e2:3d:fa:7c:54:30:4a:74:fb:
                    63:7b:5d:f8:3c:cb:7a:95:31:fb:ec:a3:51:93:c4:
                    5e:17:02:0f:03:19:cd:70:83:da:90:11:61:e2:d3:
                    d3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:34:8A:8F:9E:01:E0:AD:AC:ED:AE:24:81:AE:0F:53:45:94:EB:C6
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/1zSKj54B4K2s7a4kga4PU0WU68Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:fb:b9:0f:70:d7:c9:94:69:1d:e9:24:e8:b9:bb:6f:c4:53:
         46:e3:43:01:a4:4e:e0:13:7c:71:47:a3:87:25:26:ea:fc:52:
         1f:93:2f:7d:3b:d7:cd:3a:a1:db:4a:81:42:21:a7:bd:f1:ed:
         85:f6:2f:9e:eb:7a:63:1f:3c:24:b5:5b:01:45:26:e0:a2:62:
         26:b7:d9:85:31:8b:f1:1f:40:56:81:99:f4:1a:aa:de:28:df:
         05:6f:25:35:49:99:c4:8b:50:a1:c5:0c:d6:4a:e6:01:f2:17:
         48:df:ac:b7:11:3b:e1:0c:9f:fa:42:ba:c6:8a:95:ca:43:6f:
         18:0e:cd:28:b0:15:97:c1:be:a5:04:0c:64:49:4f:a1:92:bd:
         7a:2a:b6:75:21:a8:e3:a5:f4:a1:82:d5:ac:f0:97:b8:5b:8d:
         0c:ee:fe:32:db:c4:31:77:fe:a0:d7:45:e6:26:a9:94:2d:cb:
         26:01:b4:de:7a:41:16:7e:2a:52:e6:43:f9:08:d6:ad:19:a2:
         6f:10:85:06:be:9a:75:04:c9:d1:e7:23:ae:8f:58:f1:07:93:
         4d:64:ac:ac:b6:33:7e:ac:e5:71:f6:72:fd:a1:e3:3b:7d:b4:
         fb:27:66:81:6d:06:ea:0d:91:a4:1f:8a:1e:f3:b0:60:9b:e7:
         7e:ff:42:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org