Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/3S-CybVPQixDu6d35IaO2-b12Aw.roa
File:                     3S-CybVPQixDu6d35IaO2-b12Aw.roa (raw, json)
Hash identifier:          UzZM2qC0GwbunYGZALgPx0HYwK11ASmkS97tSb7cRQQ=
Subject key identifier:   DD:2F:82:C9:B5:4F:42:2C:43:BB:A7:77:E4:86:8E:DB:E6:F5:D8:0C
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0382
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3S-CybVPQixDu6d35IaO2-b12Aw.roa
Signing time:             Sun 01 May 2022 01:29:41 +0000
ROA not before:           Sun 01 May 2022 01:29:41 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        120.136.192.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898 (0x382)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:41 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=DD2F82C9B54F422C43BBA777E4868EDBE6F5D80C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:38:74:1d:71:96:be:16:46:91:0a:2a:d2:55:
                    be:a5:49:58:39:91:b9:5e:e4:1d:91:09:b4:3a:b1:
                    36:9d:f0:64:83:4a:7d:3f:81:f9:e0:07:99:f2:7e:
                    82:c9:ba:70:0b:e5:bc:aa:2c:5c:7b:da:ca:84:4f:
                    0b:b2:4e:1e:73:1f:b9:90:37:11:e2:f9:14:9a:f0:
                    6e:9d:17:d5:8f:4c:e8:66:c0:46:66:94:60:c1:97:
                    5b:20:8b:24:0d:6e:02:2e:f3:47:44:c5:20:e6:14:
                    9d:af:0a:43:a5:48:50:06:8e:00:ad:df:fd:78:fd:
                    12:13:7d:3a:37:20:ad:9c:14:3c:7a:14:cf:a7:82:
                    9a:20:c8:e0:80:19:4d:e1:78:72:1e:6b:fe:b3:8b:
                    d5:68:72:19:8d:b8:01:d4:b1:19:ec:a7:b2:6f:66:
                    d8:d9:8f:26:a5:8a:42:f9:e4:a2:0d:ab:23:50:f9:
                    b9:4e:8d:8e:f4:53:8a:21:e4:1f:34:5b:55:e9:b9:
                    84:b8:bb:07:d2:50:ff:d7:c4:1b:df:89:58:8f:d8:
                    52:89:d9:d4:5f:76:ba:05:29:78:06:69:55:aa:88:
                    55:2c:95:69:58:bf:80:6c:0b:17:90:00:6c:23:49:
                    a3:f0:45:9b:88:13:f5:0b:c4:85:5c:4e:2a:3e:1c:
                    1e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2F:82:C9:B5:4F:42:2C:43:BB:A7:77:E4:86:8E:DB:E6:F5:D8:0C
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/3S-CybVPQixDu6d35IaO2-b12Aw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.136.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         77:4b:ba:0a:fa:eb:5e:9d:47:2a:c6:29:8a:12:5c:47:e5:88:
         b9:45:c9:f3:81:9e:56:11:f9:47:28:e8:92:0b:c4:21:a9:27:
         63:ff:b5:d2:a6:e0:75:bf:89:d5:f8:18:70:7c:9b:60:66:c5:
         a3:98:94:5d:a4:f0:2c:0c:f9:46:d4:8f:0b:7f:80:4c:ed:1f:
         38:7d:df:92:4e:e6:7f:66:a4:59:94:08:a6:7c:da:2e:80:0e:
         8f:2b:67:24:29:62:84:dd:7b:ac:79:57:37:7e:10:99:91:6a:
         fd:44:f9:90:62:71:f5:0d:2e:ee:bb:15:1c:d5:86:5b:ce:41:
         33:ac:41:4d:97:a2:aa:4f:a7:3f:9b:7f:0e:aa:b6:ae:68:19:
         a1:4f:3d:62:a4:43:d5:3a:4d:cc:71:b3:88:a5:af:73:c9:24:
         9a:42:2b:10:5f:44:1b:f3:98:90:51:86:fe:0f:41:5b:96:81:
         c2:c2:9f:ca:a6:f7:3e:d1:20:34:8b:7d:3e:4e:90:8c:ac:fd:
         54:ce:c1:1b:26:07:89:00:ed:7a:35:2e:52:44:ff:cf:68:d5:
         4d:3e:bc:e6:b2:ff:8c:48:85:7a:ed:28:74:99:15:f6:09:40:
         40:9e:61:e2:c1:d0:f7:57:fc:e1:b1:8c:01:82:4b:3c:54:d9:
         dd:0f:57:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:10 2023 by rpki-client on console-fra.rpki-client.org