Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/4ds68MV3lPjlYhynvLq4X7sdNYE.roa
File:                     4ds68MV3lPjlYhynvLq4X7sdNYE.roa (raw, json)
Hash identifier:          CRw9pca5Igt0Wh3iXx37BkHtEraF+QDZgHoGQ28Gqys=
Subject key identifier:   E1:DB:3A:F0:C5:77:94:F8:E5:62:1C:A7:BC:BA:B8:5F:BB:1D:35:81
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       030C
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/4ds68MV3lPjlYhynvLq4X7sdNYE.roa
Signing time:             Tue 25 May 2021 02:42:02 +0000
ROA not before:           Tue 25 May 2021 02:42:02 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        202.136.192.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 780 (0x30c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:02 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=E1DB3AF0C57794F8E5621CA7BCBAB85FBB1D3581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a8:5c:45:22:1a:5f:6f:be:d7:ee:43:07:fb:
                    88:3f:6e:45:03:39:70:96:1b:b9:6e:13:fb:df:80:
                    be:17:13:07:a6:5c:f4:2c:72:55:f3:60:f2:b3:d6:
                    94:ff:dd:97:1f:45:b7:bf:25:9d:bf:d9:f2:9b:34:
                    d1:4e:cd:11:4a:17:47:fd:50:bc:7d:36:5f:7b:3d:
                    a4:7c:36:f5:32:92:ef:eb:08:54:c1:52:0b:61:14:
                    39:ad:0b:35:e6:54:b5:3b:f9:7f:09:c4:4b:55:e5:
                    f9:9c:d9:ba:00:54:b5:b1:4f:8f:ac:57:11:5f:df:
                    2e:42:9d:39:67:1c:63:e6:2b:47:b7:2e:d4:4d:53:
                    35:9d:01:c2:dd:8d:4e:ea:fe:f9:c9:0c:e9:c0:d0:
                    f6:1b:2c:44:93:b2:4d:de:28:7c:ca:2d:51:0c:67:
                    19:ea:a9:61:1f:e6:61:71:88:57:f2:f8:80:f0:43:
                    1d:8c:24:ba:b7:0a:97:bc:e5:0d:08:a5:12:d6:14:
                    32:4f:cf:ae:24:41:00:70:45:d7:36:87:16:ad:73:
                    58:71:d2:49:e8:fd:b4:40:37:6f:7f:77:66:57:bd:
                    f5:8b:28:17:c2:d7:08:76:45:a7:48:a9:1e:cc:f6:
                    87:ed:b4:6a:2a:ef:5f:f2:bf:58:a9:44:e7:1c:82:
                    b6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DB:3A:F0:C5:77:94:F8:E5:62:1C:A7:BC:BA:B8:5F:BB:1D:35:81
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/4ds68MV3lPjlYhynvLq4X7sdNYE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.136.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b0:49:94:c5:38:d2:8f:69:f8:13:fc:ae:19:d2:42:bf:1f:6b:
         43:97:67:b6:f1:c3:ff:b2:04:32:0b:c2:37:21:4b:64:53:b7:
         ac:70:f4:9a:6f:a3:1b:8a:31:3c:1c:25:54:5b:53:bd:64:a1:
         3b:c6:d2:6d:72:30:a4:0e:3d:62:23:e0:e2:6d:1a:de:06:c6:
         96:d7:f0:01:d8:40:75:1a:2d:89:74:e5:26:70:e6:17:74:55:
         8f:8f:19:88:78:f5:00:16:11:76:a1:b6:4a:e9:85:5a:45:09:
         54:4b:1e:2c:59:23:3e:8a:d9:bd:b4:7f:00:67:5a:d2:b3:dd:
         74:2b:2a:72:85:b7:8c:ba:05:86:42:db:71:ed:6f:2b:d4:8c:
         af:a3:3e:35:dd:b7:de:ee:a3:48:fa:6a:85:40:9e:be:89:6c:
         ff:5c:08:b0:d6:0f:d7:b5:c1:8f:ac:1f:7b:e0:2e:3d:ec:62:
         07:5e:18:93:f7:54:58:55:45:20:68:f3:d7:b3:d0:2d:a5:cf:
         4e:74:8e:5e:9a:1a:75:4d:57:70:36:45:c0:45:0b:bc:72:d7:
         1e:c1:ca:27:3f:69:85:b3:92:d7:24:6f:57:f5:aa:be:88:fe:
         56:4f:89:23:d9:a7:69:5b:3e:71:2a:b5:ad:1b:5f:ab:5b:64:
         9b:53:9f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org