Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/2oyQQxbddkeA8V1TtMp4_1GN4QU.roa
File:                     2oyQQxbddkeA8V1TtMp4_1GN4QU.roa (raw, json)
Hash identifier:          Pw1hBCvFs93UZQuY30eLc0rF9HWb8Vd4DnqNz43xUbY=
Subject key identifier:   DA:8C:90:43:16:DD:76:47:80:F1:5D:53:B4:CA:78:FF:51:8D:E1:05
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03D6
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/2oyQQxbddkeA8V1TtMp4_1GN4QU.roa
Signing time:             Sun 01 May 2022 01:33:01 +0000
ROA not before:           Sun 01 May 2022 01:33:01 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        61.120.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 982 (0x3d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:33:01 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=DA8C904316DD764780F15D53B4CA78FF518DE105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ed:e8:2c:91:d9:63:ef:07:5f:e7:c0:3d:d0:
                    e1:f4:43:96:b7:24:c5:07:f1:eb:4a:0d:9e:df:ab:
                    40:8d:0d:95:e1:b2:8a:db:2b:0c:53:07:87:3e:07:
                    c2:b4:91:ec:39:1f:da:2a:8a:4d:4f:da:b7:81:20:
                    86:18:45:b1:17:e9:f3:85:3c:ef:84:86:32:8d:97:
                    4d:eb:db:39:a4:de:d0:81:82:7f:47:34:d1:eb:d8:
                    e3:69:09:7d:8c:ef:7f:99:ad:ff:7d:32:f0:fe:1b:
                    e4:e0:8f:78:5b:ee:80:7f:3e:d2:69:b4:21:d5:17:
                    66:d8:1d:4e:ce:2f:8c:e2:82:9a:36:92:7b:c6:b4:
                    92:52:38:93:d8:45:fc:1b:20:7f:5a:7b:fa:15:c6:
                    47:20:3d:df:59:21:b2:cc:a6:c0:dc:88:01:cc:34:
                    cb:6b:c8:6d:8c:12:c6:79:3f:d1:ca:26:86:4d:8f:
                    ad:0b:f8:e6:65:61:0b:7d:00:a9:95:07:3c:74:2a:
                    ab:eb:fe:ec:d3:31:84:2c:6c:99:d3:a4:ac:53:a9:
                    ee:1a:4a:bd:23:7a:7b:4f:c5:55:01:64:5b:30:c6:
                    1e:b7:f4:25:85:ac:ee:f5:3d:89:3a:96:4c:0c:17:
                    88:49:24:ed:6e:69:07:19:bd:83:a7:ff:71:00:ee:
                    95:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8C:90:43:16:DD:76:47:80:F1:5D:53:B4:CA:78:FF:51:8D:E1:05
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/2oyQQxbddkeA8V1TtMp4_1GN4QU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         07:84:a1:90:80:4b:33:ae:e2:9c:ce:8c:c0:e4:2b:11:7d:db:
         fc:04:c8:3e:cd:cb:41:67:83:27:83:22:25:61:46:ec:fb:59:
         63:a6:35:5e:88:6a:2a:fb:f2:96:27:63:ae:c0:28:42:95:8a:
         66:d7:76:d5:8d:8d:5d:37:88:03:4c:22:e7:e0:0d:87:e3:36:
         bb:2e:01:2a:67:94:86:d1:90:47:94:c8:78:15:4d:37:f3:61:
         f6:6f:05:e5:89:96:81:60:97:a8:7b:0d:be:cf:44:4c:22:99:
         c5:60:a9:ae:1a:db:a5:c3:df:83:e5:59:d2:f1:9d:8e:89:23:
         28:3d:57:83:2b:98:19:9c:82:69:a4:45:a5:75:32:aa:01:db:
         8f:55:e2:e6:23:d4:81:2f:ac:81:45:48:04:6c:bc:e1:98:5e:
         b8:4d:ba:75:bf:c1:98:e0:f5:bf:c2:70:44:1e:ab:65:07:22:
         22:69:a5:27:41:b9:74:83:5a:47:d8:0e:7c:76:0b:6a:8e:14:
         9e:e4:58:5e:d5:63:e1:9c:1b:93:93:14:95:4e:ff:a0:7c:9e:
         01:09:dc:22:0a:b7:bb:71:71:e1:01:19:60:06:de:e9:e1:86:
         ee:74:6d:7e:de:af:1e:fa:55:3e:c9:50:3f:19:84:13:48:87:
         e6:5d:eb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org