Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/325jGqpOiBJ4JG-4ZtHPCyEQudM.roa
File:                     325jGqpOiBJ4JG-4ZtHPCyEQudM.roa (raw, json)
Hash identifier:          +izSVvUSQ3Cli42TO/SrRli+n7J/KM0+8Emr92vC+lE=
Subject key identifier:   DF:6E:63:1A:AA:4E:88:12:78:24:6F:B8:66:D1:CF:0B:21:10:B9:D3
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0436
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/325jGqpOiBJ4JG-4ZtHPCyEQudM.roa
Signing time:             Thu 13 Apr 2023 09:55:27 +0000
ROA not before:           Thu 13 Apr 2023 09:55:27 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        27.121.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1078 (0x436)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:55:27 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=DF6E631AAA4E881278246FB866D1CF0B2110B9D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:da:7d:a8:2b:c1:d6:c8:2b:ac:63:b2:e1:c0:
                    7f:1d:61:62:59:5b:2e:a4:98:2b:68:98:92:83:8c:
                    a1:30:a8:26:ae:9f:13:08:04:e2:ea:80:b7:5e:70:
                    9c:33:eb:0a:05:51:f8:d6:a5:f0:6b:83:d2:6a:89:
                    fe:79:f6:3e:ec:a4:dc:1e:02:06:95:08:ae:ff:5d:
                    10:51:58:21:68:14:e3:ae:d8:3e:b6:30:c8:80:8d:
                    9a:2f:f6:85:28:3c:a4:a9:c3:cb:bb:31:25:30:1c:
                    17:9f:b5:34:8d:a2:26:5f:4f:5c:9c:63:0d:1f:a2:
                    e8:2a:06:2c:cf:2a:6d:30:37:cd:68:7c:7b:62:a2:
                    b2:95:e2:01:3f:d0:37:4d:55:b9:9e:1e:39:4d:87:
                    8a:7a:52:fd:4a:02:ed:8a:05:9f:77:81:fd:82:52:
                    db:4b:46:1b:59:3c:43:e1:ba:da:7a:46:3d:9a:63:
                    0e:c4:be:bb:13:77:4c:a0:6d:01:ce:59:af:69:55:
                    84:e3:d8:6f:76:01:01:46:f1:b5:fc:00:7b:e1:80:
                    2a:41:9b:34:24:e9:a1:da:d3:cd:a1:71:c1:e1:57:
                    7e:60:dc:ff:ef:1e:c8:be:f5:d7:42:0a:e6:77:cb:
                    09:b9:9b:9e:37:c2:f0:66:7f:41:05:0e:34:4a:72:
                    9f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6E:63:1A:AA:4E:88:12:78:24:6F:B8:66:D1:CF:0B:21:10:B9:D3
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/325jGqpOiBJ4JG-4ZtHPCyEQudM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.121.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:15:95:ea:13:51:72:5a:e8:91:69:b0:e4:07:1b:9c:3e:a5:
         fe:32:9b:99:ce:63:53:9e:bc:a6:44:4b:9e:4b:1a:a0:ad:65:
         3c:90:74:eb:34:5e:5b:35:9c:58:ff:98:85:b4:d8:d2:70:4e:
         5e:3d:c4:a8:a5:69:41:7e:cd:1c:b3:e9:e8:a6:97:1c:1c:58:
         d5:81:5c:e8:6f:49:e3:29:04:c6:6a:9c:99:c5:7c:1a:de:0d:
         d5:99:e2:b5:46:1a:c2:b5:69:1d:1f:88:23:f9:d4:6a:d5:31:
         2a:60:09:a4:28:d5:c2:be:78:4a:0d:85:ce:83:1b:9c:96:9c:
         0d:a5:8e:07:06:b4:65:46:c8:be:7c:43:bc:e9:c7:0b:32:ca:
         6b:cc:d9:23:89:9c:cb:80:64:f6:e3:a9:62:41:ef:db:25:bb:
         8b:a4:1b:d8:33:48:a8:89:1e:ee:1e:6a:72:39:e7:a3:c0:b7:
         de:9c:f8:2a:56:c3:af:0a:c0:a8:c0:b8:26:d8:68:15:47:47:
         08:13:68:23:ec:20:18:36:ba:17:f2:2e:8e:45:5c:ed:a5:45:
         c7:7f:f2:65:2f:5b:42:07:e3:5d:fb:79:9a:05:4c:95:52:ee:
         23:8a:8b:d6:1b:9d:3c:d9:78:64:98:f0:85:35:92:da:59:25:
         fb:93:85:b4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBDYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMzA0MTMw
OTU1MjdaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKERGNkU2MzFBQUE0RTg4
MTI3ODI0NkZCODY2RDFDRjBCMjExMEI5RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDL2n2oK8HWyCusY7LhwH8dYWJZWy6kmCtomJKDjKEwqCaunxMI
BOLqgLdecJwz6woFUfjWpfBrg9Jqif559j7spNweAgaVCK7/XRBRWCFoFOOu2D62
MMiAjZov9oUoPKSpw8u7MSUwHBeftTSNoiZfT1ycYw0fougqBizPKm0wN81ofHti
orKV4gE/0DdNVbmeHjlNh4p6Uv1KAu2KBZ93gf2CUttLRhtZPEPhutp6Rj2aYw7E
vrsTd0ygbQHOWa9pVYTj2G92AQFG8bX8AHvhgCpBmzQk6aHa082hccHhV35g3P/v
Hsi+9ddCCuZ3ywm5m543wvBmf0EFDjRKcp9lAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU325jGqpOiBJ4JG+4ZtHPCyEQudMwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1LzMyNWpHcXBPaUJKNEpHLTRadEhQQ3lFUXVkTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQbeSAwDQYJKoZIhvcNAQELBQADggEBAG0VleoTUXJa6JFpsOQHG5w+pf4y
m5nOY1OevKZES55LGqCtZTyQdOs0Xls1nFj/mIW02NJwTl49xKilaUF+zRyz6eim
lxwcWNWBXOhvSeMpBMZqnJnFfBreDdWZ4rVGGsK1aR0fiCP51GrVMSpgCaQo1cK+
eEoNhc6DG5yWnA2ljgcGtGVGyL58Q7zpxwsyymvM2SOJnMuAZPbjqWJB79slu4uk
G9gzSKiJHu4eanI556PAt96c+CpWw68KwKjAuCbYaBVHRwgTaCPsIBg2uhfyLo5F
XO2lRcd/8mUvW0IH4137eZoFTJVS7iOKi9YbnTzZeGSY8IU1ktpZJfuThbQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org