Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/2ZLFAbFwIFQY50kBmfkN8AJVQZ4.roa
File:                     2ZLFAbFwIFQY50kBmfkN8AJVQZ4.roa (raw, json)
Hash identifier:          n53FhrnI2GUYSFKWJTVUW+658wZUG9TyeU00XSVxOjQ=
Subject key identifier:   D9:92:C5:01:B1:70:20:54:18:E7:49:01:99:F9:0D:F0:02:55:41:9E
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03AB
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/2ZLFAbFwIFQY50kBmfkN8AJVQZ4.roa
Signing time:             Sun 01 May 2022 01:32:04 +0000
ROA not before:           Sun 01 May 2022 01:32:04 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        220.216.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 939 (0x3ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:04 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=D992C501B170205418E7490199F90DF00255419E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:25:17:1b:17:0a:3e:0c:00:64:1c:68:d9:8b:
                    68:c7:db:74:94:51:1a:75:40:02:17:5e:74:38:fd:
                    6b:3d:38:b9:72:17:b5:df:58:e9:01:8a:3f:61:88:
                    b4:22:7c:46:04:da:6a:fe:50:80:b3:57:37:07:3b:
                    21:61:7b:8b:71:d8:b1:c1:03:af:00:03:cf:8d:6a:
                    5c:39:d2:26:f5:f7:8a:01:cc:5f:7e:65:fc:0a:23:
                    8d:8a:dc:a2:39:85:0f:9d:0c:4b:1c:f3:7c:49:35:
                    f2:7e:6d:0d:42:0e:02:72:28:29:83:e9:76:42:d5:
                    7e:27:93:9f:c2:4b:64:d1:b9:ea:57:52:11:3b:2c:
                    29:79:df:8b:ce:4a:9f:f0:3e:16:14:30:32:4e:40:
                    27:95:81:b7:ad:4a:50:b8:8f:01:f5:86:6e:8a:ad:
                    4d:a2:c2:69:f7:4d:77:55:4a:67:6e:6b:ec:1c:54:
                    bb:c7:15:a0:17:e9:eb:18:10:2a:12:d0:cc:77:d3:
                    88:e4:fc:bf:b7:0e:d8:9e:00:96:7b:f5:c1:01:1f:
                    64:bc:28:8d:d9:e1:e0:6d:4d:42:5d:72:64:58:d1:
                    c6:b3:e2:2f:5a:f8:c5:3d:b9:c5:3f:9b:3a:b2:fb:
                    94:a2:71:d6:68:d7:d9:2c:4a:7d:d9:80:2f:e1:36:
                    f0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:92:C5:01:B1:70:20:54:18:E7:49:01:99:F9:0D:F0:02:55:41:9E
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/2ZLFAbFwIFQY50kBmfkN8AJVQZ4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         18:bd:16:df:a5:4f:08:95:a1:e3:57:00:58:99:de:74:a9:23:
         d4:2c:3d:c8:ab:a8:29:bd:59:cd:f1:d6:7b:8d:9b:bb:89:19:
         ca:c7:69:79:7e:0b:5f:cf:61:71:35:c1:a8:92:58:46:e3:14:
         98:29:64:03:b2:a7:62:54:7e:c9:8e:8b:fe:af:b8:b3:88:b8:
         f2:b7:6b:10:c8:8b:68:cd:15:18:6f:f9:a8:a6:71:6f:62:63:
         71:6f:00:3d:91:61:12:bf:7c:11:4d:3a:23:02:d3:5f:61:15:
         ad:c2:57:6b:70:2f:83:27:be:46:1e:01:0d:b3:90:e6:40:b8:
         05:e4:90:8a:fb:d8:6a:dc:b7:45:57:ee:f4:62:1c:68:5d:dd:
         10:6e:fc:d9:88:d0:60:61:5d:e1:01:5a:f8:21:2e:e0:2e:10:
         cd:c1:1c:06:16:40:1f:f5:3a:34:a0:16:5a:e0:48:f1:52:55:
         0a:bb:3b:e3:ce:09:d6:58:60:7b:e3:23:75:e2:c0:95:62:39:
         9e:82:fb:45:70:03:50:5c:9f:e5:dc:36:3e:3f:e9:7f:d3:01:
         97:1c:fc:c8:e5:50:7d:0e:23:0d:49:e5:00:d6:66:f4:06:73:
         a2:0e:93:92:2c:38:e3:67:6e:7f:87:ab:91:64:0d:15:9b:5c:
         ef:2e:d5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org