Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/6AMmfM9CzTXrlsBWh9xF1ADLuCg.roa
File:                     6AMmfM9CzTXrlsBWh9xF1ADLuCg.roa (raw, json)
Hash identifier:          XxKOwWu9a8IGtIueIPg8FP219KMzqE6aSXFHDiURDQM=
Subject key identifier:   E8:03:26:7C:CF:42:CD:35:EB:96:C0:56:87:DC:45:D4:00:CB:B8:28
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03B8
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/6AMmfM9CzTXrlsBWh9xF1ADLuCg.roa
Signing time:             Sun 01 May 2022 01:32:08 +0000
ROA not before:           Sun 01 May 2022 01:32:08 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        42.125.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952 (0x3b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:08 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=E803267CCF42CD35EB96C05687DC45D400CBB828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:54:e9:f8:62:6a:9c:e0:77:5a:da:d8:50:29:
                    ea:13:61:f9:53:84:32:0c:a0:40:29:8e:22:c1:66:
                    1e:92:6e:97:d0:db:71:ca:dc:38:da:ec:b4:f0:a7:
                    2c:b0:e1:19:fa:48:10:67:be:46:4d:78:93:13:1e:
                    56:8a:7b:c5:04:c5:e3:23:a5:73:0f:b8:14:4c:a7:
                    42:2b:6e:56:72:63:7b:8a:e5:25:03:87:27:13:6f:
                    26:0e:09:c1:eb:c4:6d:26:ec:8d:67:d3:85:3b:01:
                    b4:06:6d:75:98:f9:65:73:92:51:08:35:37:5c:a9:
                    c3:9a:17:16:76:b0:fa:32:50:b0:27:8d:78:26:3c:
                    27:f5:1b:08:38:ef:bd:33:81:83:ff:c0:97:9b:9b:
                    57:95:3e:af:14:0b:3d:b4:ec:2a:36:1b:4a:53:34:
                    79:b2:3f:00:4b:ba:c5:fa:e2:f3:96:58:ef:25:cb:
                    39:12:91:4a:b7:df:20:a2:55:32:ab:10:be:d3:76:
                    ad:6d:3e:fc:fe:df:7f:73:8b:6e:8d:8f:75:7a:51:
                    52:9d:b7:74:e7:48:25:d8:61:93:9f:e0:1b:13:57:
                    25:13:28:11:ec:58:e9:b1:80:13:83:bf:40:f2:24:
                    ed:e7:73:1b:7d:9d:0b:0f:32:09:38:d1:d8:1f:97:
                    00:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:03:26:7C:CF:42:CD:35:EB:96:C0:56:87:DC:45:D4:00:CB:B8:28
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/6AMmfM9CzTXrlsBWh9xF1ADLuCg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         82:1e:e3:df:c0:2f:c3:63:e7:4a:ea:6b:b8:67:66:e0:b8:59:
         dd:9e:65:26:ef:d7:0a:c1:70:87:7e:1d:df:0b:45:d4:0d:97:
         ad:49:56:b4:2e:12:c5:28:5f:d1:18:13:b6:7d:fa:87:9f:f6:
         dc:db:b9:0a:2c:45:e5:8b:c4:48:23:0f:6d:f0:da:32:60:0a:
         ea:6f:23:e9:e5:c2:21:c2:95:70:3a:fe:07:29:26:3f:a1:0b:
         4a:f9:fe:88:45:62:6e:12:67:8d:77:c1:f6:1c:0a:fd:ec:79:
         6c:31:db:de:e1:c8:60:ef:a0:04:ad:9b:2c:47:d4:dc:08:55:
         86:e3:75:9a:f1:cc:bc:11:d9:b1:18:83:8f:1a:db:6c:1f:25:
         ab:df:cd:d5:2e:b7:38:98:44:5b:cb:d2:4b:a9:49:d1:6e:2e:
         4e:be:9a:37:dc:5a:77:9d:41:ce:44:4b:93:5b:9f:3d:07:a0:
         87:72:76:26:49:f7:81:52:12:02:e3:c2:6b:1b:aa:9a:70:17:
         c4:46:da:da:45:39:5e:ed:5a:99:fe:61:4d:3e:4d:8b:43:b4:
         92:35:5a:35:07:ae:ce:0f:11:51:87:bf:ef:5b:25:b7:c7:2f:
         48:09:f9:65:9b:95:3d:5d:f2:1e:56:79:a9:f9:d5:fa:c2:3e:
         6b:8d:cf:24
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA7gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMjA1MDEw
MTMyMDhaFw0yMzA0MjcwOTUyMzRaMDMxMTAvBgNVBAMTKEU4MDMyNjdDQ0Y0MkNE
MzVFQjk2QzA1Njg3REM0NUQ0MDBDQkI4MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHVOn4Ymqc4Hda2thQKeoTYflThDIMoEApjiLBZh6SbpfQ23HK
3Dja7LTwpyyw4Rn6SBBnvkZNeJMTHlaKe8UExeMjpXMPuBRMp0IrblZyY3uK5SUD
hycTbyYOCcHrxG0m7I1n04U7AbQGbXWY+WVzklEINTdcqcOaFxZ2sPoyULAnjXgm
PCf1Gwg4770zgYP/wJebm1eVPq8UCz207Co2G0pTNHmyPwBLusX64vOWWO8lyzkS
kUq33yCiVTKrEL7Tdq1tPvz+339zi26Nj3V6UVKdt3TnSCXYYZOf4BsTVyUTKBHs
WOmxgBODv0DyJO3ncxt9nQsPMgk40dgflwBPAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU6AMmfM9CzTXrlsBWh9xF1ADLuCgwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1LzZBTW1mTTlDelRYcmxzQldoOXhGMUFETHVDZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAcqfQAwDQYJKoZIhvcNAQELBQADggEBAIIe49/AL8Nj50rqa7hnZuC4Wd2e
ZSbv1wrBcId+Hd8LRdQNl61JVrQuEsUoX9EYE7Z9+oef9tzbuQosReWLxEgjD23w
2jJgCupvI+nlwiHClXA6/gcpJj+hC0r5/ohFYm4SZ413wfYcCv3seWwx297hyGDv
oAStmyxH1NwIVYbjdZrxzLwR2bEYg48a22wfJavfzdUutziYRFvL0kupSdFuLk6+
mjfcWnedQc5ES5Nbnz0HoIdydiZJ94FSEgLjwmsbqppwF8RG2tpFOV7tWpn+YU0+
TYtDtJI1WjUHrs4PEVGHv+9bJbfHL0gJ+WWblT1d8h5Wean51frCPmuNzyQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org