Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/5JFNs0jrrZbowpNrImBga6oUYl8.roa
File:                     5JFNs0jrrZbowpNrImBga6oUYl8.roa (raw, json)
Hash identifier:          bNogebOD+2QHqUnuaUmWc4gpVGpSv37NzX3BBJRkGSU=
Subject key identifier:   E4:91:4D:B3:48:EB:AD:96:E8:C2:93:6B:22:60:60:6B:AA:14:62:5F
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0316
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/5JFNs0jrrZbowpNrImBga6oUYl8.roa
Signing time:             Tue 25 May 2021 02:42:48 +0000
ROA not before:           Tue 25 May 2021 02:42:48 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        42.125.240.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790 (0x316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:48 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=E4914DB348EBAD96E8C2936B2260606BAA14625F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c3:97:3d:b6:23:8a:3b:44:d3:05:6a:5a:fe:
                    5d:a0:0c:6d:be:13:2b:bf:dd:fd:6f:a2:a2:45:15:
                    30:4c:09:35:81:2f:a5:c0:fb:72:97:bb:b4:af:e4:
                    62:da:4c:82:d9:fb:a0:df:88:4e:e6:2f:00:44:e1:
                    37:3a:70:27:2c:42:02:12:22:57:e2:96:3d:d1:29:
                    39:15:54:c5:7e:e8:b3:75:01:5d:67:8d:f1:00:9b:
                    d6:07:ee:f2:2c:a0:32:94:77:57:7c:34:b9:c1:4d:
                    8a:a7:e2:4d:ec:b7:af:68:32:c5:1a:f4:19:f3:d8:
                    fe:b7:43:b1:80:ca:6c:d0:00:42:de:d5:f2:a3:42:
                    ef:0a:05:3f:24:a5:98:32:2a:31:01:c4:2d:5e:9d:
                    59:70:2f:73:f7:16:54:d7:26:06:dd:a6:26:d1:19:
                    fa:96:e0:63:d3:ae:1b:70:ad:97:80:0d:99:de:4e:
                    50:62:44:99:08:86:60:63:a0:86:6a:c1:6c:ca:90:
                    26:1f:e6:ac:c3:02:8c:07:4b:1d:e0:15:f0:f9:e7:
                    ea:a5:ae:65:5f:49:4c:db:d4:8c:83:0f:d4:df:07:
                    31:1a:e3:09:86:4f:b0:40:f6:25:a6:ba:15:5e:87:
                    e9:3a:91:48:a7:61:7d:38:7f:72:69:9f:7b:6b:a3:
                    40:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:91:4D:B3:48:EB:AD:96:E8:C2:93:6B:22:60:60:6B:AA:14:62:5F
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/5JFNs0jrrZbowpNrImBga6oUYl8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         93:d6:45:b9:63:87:58:ec:17:b4:92:44:27:ce:74:d5:35:4a:
         7e:80:4c:dc:4d:4c:66:c6:8a:8b:93:9f:1e:bf:6b:69:5b:5b:
         58:d0:7f:ae:a5:71:6a:c4:7c:6d:ff:91:54:1b:e1:bf:c8:0b:
         06:cb:3a:ae:4b:14:26:72:c5:a3:e9:95:d4:a6:cf:d1:b6:5d:
         6f:3e:9d:cc:9c:cf:2c:07:cc:48:89:1d:52:fe:05:e1:8d:42:
         cf:1b:07:d0:1a:ea:75:b8:46:6d:8b:ce:42:32:06:67:65:33:
         69:71:ef:29:44:af:71:dc:2d:61:cb:31:8e:56:08:6d:eb:f9:
         fa:ae:1d:b8:bf:0d:68:1f:53:41:31:22:bd:11:59:29:85:88:
         2c:f2:21:de:d5:17:20:90:c2:3b:86:2c:8e:7c:69:45:28:14:
         53:a2:8f:35:68:34:87:2f:d1:84:75:00:00:e0:10:8b:ee:e0:
         d4:4f:f9:9b:46:8a:e3:80:ea:be:85:75:82:d5:43:dc:be:05:
         71:d7:48:b7:a6:82:0c:84:03:7b:8f:58:fa:db:97:a7:8d:4c:
         59:e8:72:00:c4:4f:da:52:0e:ac:82:cf:3f:b2:e7:51:bd:48:
         58:4e:67:98:ce:0d:75:da:a9:f5:e5:78:a9:7e:d7:1a:51:85:
         a6:25:fa:6b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAxYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMTA1MjUw
MjQyNDhaFw0yMjA1MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU0OTE0REIzNDhFQkFE
OTZFOEMyOTM2QjIyNjA2MDZCQUExNDYyNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEw5c9tiOKO0TTBWpa/l2gDG2+Eyu/3f1voqJFFTBMCTWBL6XA
+3KXu7Sv5GLaTILZ+6DfiE7mLwBE4Tc6cCcsQgISIlfilj3RKTkVVMV+6LN1AV1n
jfEAm9YH7vIsoDKUd1d8NLnBTYqn4k3st69oMsUa9Bnz2P63Q7GAymzQAELe1fKj
Qu8KBT8kpZgyKjEBxC1enVlwL3P3FlTXJgbdpibRGfqW4GPTrhtwrZeADZneTlBi
RJkIhmBjoIZqwWzKkCYf5qzDAowHSx3gFfD55+qlrmVfSUzb1IyDD9TfBzEa4wmG
T7BA9iWmuhVeh+k6kUinYX04f3Jpn3tro0A9AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU5JFNs0jrrZbowpNrImBga6oUYl8wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTQ1LzVKRk5zMGpyclpib3dwTnJJbUJnYTZvVVlsOC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQqffAwDQYJKoZIhvcNAQELBQADggEB
AJPWRbljh1jsF7SSRCfOdNU1Sn6ATNxNTGbGiouTnx6/a2lbW1jQf66lcWrEfG3/
kVQb4b/ICwbLOq5LFCZyxaPpldSmz9G2XW8+ncyczywHzEiJHVL+BeGNQs8bB9Aa
6nW4Rm2LzkIyBmdlM2lx7ylEr3HcLWHLMY5WCG3r+fquHbi/DWgfU0ExIr0RWSmF
iCzyId7VFyCQwjuGLI58aUUoFFOijzVoNIcv0YR1AADgEIvu4NRP+ZtGiuOA6r6F
dYLVQ9y+BXHXSLemggyEA3uPWPrbl6eNTFnocgDET9pSDqyCzz+y51G9SFhOZ5jO
DXXaqfXleKl+1xpRhaYl+ms=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org