Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/2A1iNFv-aW_Yq8YXqPMM4ALnATE.roa
File:                     2A1iNFv-aW_Yq8YXqPMM4ALnATE.roa (raw, json)
Hash identifier:          Q3eDX2OUJF1KAXs3rL6svZaJHH56/94KJR2i0IsZwL4=
Subject key identifier:   D8:0D:62:34:5B:FE:69:6F:D8:AB:C6:17:A8:F3:0C:E0:02:E7:01:31
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0380
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/2A1iNFv-aW_Yq8YXqPMM4ALnATE.roa
Signing time:             Sun 01 May 2022 01:29:40 +0000
ROA not before:           Sun 01 May 2022 01:29:40 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        61.200.112.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896 (0x380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:40 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=D80D62345BFE696FD8ABC617A8F30CE002E70131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:74:30:fd:00:2c:c3:4f:ad:fb:3b:50:93:cf:
                    22:fa:48:6b:b5:66:c2:1c:21:5e:f6:2b:ee:5e:3a:
                    cd:09:67:89:b5:3c:44:f7:6a:10:df:57:ac:cc:10:
                    0d:b7:8e:48:9b:1f:92:6d:73:d9:58:e4:5a:08:ea:
                    5c:9c:17:56:1c:ff:a1:8e:51:e2:c5:23:ae:d6:eb:
                    bd:da:58:08:0b:47:e4:ad:b6:6f:db:e4:b2:8c:18:
                    39:1a:da:4a:2e:44:be:a4:e0:34:bb:87:96:9f:e1:
                    a6:5c:e7:1a:ed:8d:53:1a:60:44:aa:49:b1:34:69:
                    fd:e0:c6:6c:95:fb:64:ea:92:9e:5c:01:97:9c:be:
                    e9:1d:c2:94:02:4c:c9:6d:17:f4:f8:1b:93:34:da:
                    37:0b:09:69:3a:45:82:5f:cb:29:eb:b7:54:07:6c:
                    8e:e1:14:3b:d8:cd:2a:13:e9:62:59:3a:e3:13:be:
                    7f:8b:c5:68:05:ca:15:5d:fa:7f:70:42:bf:44:39:
                    4f:3a:c3:0d:ea:1e:07:86:10:59:1b:73:d4:0d:d6:
                    e3:c0:f5:14:7f:ac:37:d4:85:15:99:65:59:63:39:
                    d6:cd:b7:e7:75:9b:96:7c:e8:f3:ca:45:43:5f:ec:
                    9b:92:b8:0a:fd:52:b5:d5:77:68:21:87:2b:75:34:
                    60:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0D:62:34:5B:FE:69:6F:D8:AB:C6:17:A8:F3:0C:E0:02:E7:01:31
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/2A1iNFv-aW_Yq8YXqPMM4ALnATE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:53:70:dd:15:12:e1:16:16:74:73:69:a0:ba:c2:e6:42:85:
         91:ba:fd:2d:c9:f8:17:7d:09:df:3c:38:2f:7d:78:f6:a9:cb:
         53:6a:17:ec:dd:e3:8d:d4:c3:38:cb:20:09:af:ed:c4:35:8c:
         cc:8c:db:c5:e3:3e:49:ac:e0:e4:ef:42:fc:cc:8b:b4:e8:b9:
         3c:cc:0f:18:99:b5:a3:a5:de:b8:c4:43:e0:c2:c1:22:f3:a1:
         16:12:34:76:09:8c:c4:b6:64:07:58:c9:2d:64:12:82:2d:a4:
         6c:72:95:45:c7:99:ac:d4:42:23:94:b7:69:d2:4b:e4:d5:55:
         6f:82:a6:58:d4:de:f0:90:c1:39:c4:bd:af:e1:90:be:1d:bf:
         15:e9:09:8d:ba:54:ab:7f:93:ba:13:00:2f:27:3f:d2:28:ad:
         d2:c2:95:05:c8:41:cc:dd:78:95:c3:d8:e4:a8:0a:9b:6c:bf:
         0a:b9:67:ae:49:3f:81:6f:b8:ea:40:b0:d3:ec:11:40:7b:ae:
         87:52:b0:8b:f3:c9:5b:4d:b2:18:3d:36:65:a0:cf:a0:51:6b:
         0a:09:3c:25:d1:ca:49:b9:95:34:d1:80:fe:d3:45:2b:c2:de:
         6c:29:07:3d:44:65:d1:d3:5e:20:5b:c4:36:a1:dd:a8:19:e6:
         f7:d6:04:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org