Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/648y50phCdP4iDNe_2VkgAcgPAc.roa
File:                     648y50phCdP4iDNe_2VkgAcgPAc.roa (raw, json)
Hash identifier:          bKH8+gzkO/C+HSMnHcejQ7+efIdgMAh6ywUVTGsj950=
Subject key identifier:   EB:8F:32:E7:4A:61:09:D3:F8:88:33:5E:FF:65:64:80:07:20:3C:07
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0449
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/648y50phCdP4iDNe_2VkgAcgPAc.roa
Signing time:             Thu 13 Apr 2023 09:57:44 +0000
ROA not before:           Thu 13 Apr 2023 09:57:44 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        61.206.64.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1097 (0x449)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:57:44 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=EB8F32E74A6109D3F888335EFF65648007203C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:57:a0:56:76:35:68:43:85:06:73:02:51:19:
                    97:1c:d6:95:36:33:ca:82:52:d8:b1:9d:0a:2b:5f:
                    03:fc:7e:7a:6a:2f:72:58:59:ca:46:17:af:b9:1c:
                    b4:6a:1d:05:40:80:79:01:97:be:01:d9:7b:c9:da:
                    bb:e2:9b:3b:bf:88:0b:07:7d:d6:47:49:56:ac:67:
                    4d:a0:97:f5:9c:57:00:a5:cc:c3:f0:2f:79:aa:11:
                    f5:78:c4:aa:8a:7c:2a:b4:87:b9:14:e5:64:a2:45:
                    1f:32:49:f0:b4:a3:48:1d:f4:a5:dc:86:0e:6c:7d:
                    81:b1:39:a2:28:b2:75:76:9a:2b:1c:c4:79:0b:2d:
                    a7:31:90:79:f6:79:93:66:fe:44:f5:15:09:b7:76:
                    0e:20:2c:11:4d:56:32:a1:60:5e:c5:37:b0:9b:16:
                    80:a4:06:f9:71:3c:fb:ea:1a:76:13:eb:61:57:24:
                    c1:74:ba:0e:06:b7:5e:c9:18:c6:70:27:d0:e4:99:
                    67:b7:b5:7f:e5:bd:d4:cb:03:61:77:f1:1f:b2:0e:
                    9a:8c:ef:a6:ba:07:28:42:5e:f6:71:75:f1:f7:28:
                    5e:c5:c3:3d:8d:47:a2:7d:cd:bc:fa:e0:4c:74:bb:
                    da:10:a2:c4:62:6b:43:99:8e:2f:0a:de:bc:6b:8b:
                    bb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8F:32:E7:4A:61:09:D3:F8:88:33:5E:FF:65:64:80:07:20:3C:07
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/648y50phCdP4iDNe_2VkgAcgPAc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ab:a6:75:4a:88:a1:05:40:18:20:18:e6:e7:95:34:b6:27:fd:
         39:b7:4c:ff:55:25:f4:8b:2d:56:00:d8:0e:7f:53:98:37:25:
         74:4b:b2:bb:83:7b:4d:79:0a:f1:20:94:fd:1e:9a:37:fa:12:
         46:bf:4e:17:cf:df:6c:65:2e:9d:ca:69:ce:f4:87:12:3b:98:
         6d:60:38:7b:fe:66:13:3e:13:d7:a2:5a:44:64:da:4b:7f:7a:
         aa:91:af:42:d9:f7:3b:76:c1:7c:14:80:53:c5:cb:2c:66:55:
         d1:07:da:4e:05:a2:a5:f1:49:4a:8b:68:b6:46:cf:b2:9d:64:
         54:cd:b0:57:56:a0:9e:7a:89:c4:19:5b:99:82:62:bc:41:c8:
         d9:3b:53:8f:45:4c:3e:36:fe:82:b7:40:30:a9:e1:98:4a:c4:
         9f:ff:9e:09:e5:76:ca:0a:f8:18:d5:20:65:89:2b:4c:6f:1b:
         7d:f6:9f:64:b3:16:04:4e:3c:17:96:b8:cf:fa:a2:32:9e:79:
         73:ba:20:e9:ca:23:6b:3f:2f:e4:3a:ec:00:54:96:88:6b:2e:
         96:64:42:f9:79:35:b5:22:61:16:69:44:6f:1f:34:a1:27:0e:
         74:88:8e:38:00:5b:aa:97:f1:6e:ab:60:ba:40:63:cf:01:3f:
         34:1c:f0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org