Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/6K4UWKxxukLAjkWE7FixzKhDjMs.roa
File:                     6K4UWKxxukLAjkWE7FixzKhDjMs.roa (raw, json)
Hash identifier:          zFUrzOF6Qn/9VJs4KSVNIOD9d9WytNsOw7/jcC8VPfU=
Subject key identifier:   E8:AE:14:58:AC:71:BA:42:C0:8E:45:84:EC:58:B1:CC:A8:43:8C:CB
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03C3
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/6K4UWKxxukLAjkWE7FixzKhDjMs.roa
Signing time:             Sun 01 May 2022 01:32:11 +0000
ROA not before:           Sun 01 May 2022 01:32:11 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        219.96.32.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 963 (0x3c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:11 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=E8AE1458AC71BA42C08E4584EC58B1CCA8438CCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:2e:ed:eb:c7:06:09:14:b2:e6:ba:48:83:
                    92:c1:f5:3a:54:3f:ad:6d:ea:3c:5a:10:de:75:fa:
                    90:01:4a:51:00:93:da:90:4d:fb:74:4c:ae:cd:8c:
                    ae:11:e1:cb:cc:e5:45:db:ba:7a:af:3b:a5:9c:34:
                    91:a7:3d:53:c4:50:67:84:74:4f:26:1c:68:11:73:
                    76:3f:8a:b3:3f:22:bd:f6:08:c1:44:af:bf:9d:65:
                    f2:4e:cf:db:11:af:93:b6:2c:f3:f2:a7:0a:10:f7:
                    b6:45:34:c2:be:c9:f6:6b:fa:f3:24:7e:e5:5a:65:
                    e9:34:40:aa:0a:9a:dd:00:47:c2:1b:2a:7e:8f:26:
                    e4:28:9e:3b:f6:53:73:b3:e0:9a:b1:96:c1:7b:fd:
                    e1:16:6e:30:4e:d0:ac:78:3d:63:3e:b7:04:31:c9:
                    a0:a3:c4:03:f3:9c:3e:a4:dd:66:99:59:75:c5:9e:
                    88:76:af:b1:b7:e6:01:db:de:11:91:66:1e:8f:17:
                    7a:33:1d:a5:83:cf:72:67:e2:53:3e:b6:14:48:4c:
                    4a:c2:cb:62:91:9b:ea:67:f3:b2:1b:da:93:85:fe:
                    e3:76:c7:5f:b6:11:41:c4:33:99:69:c0:ad:e6:a9:
                    08:e1:93:3c:e0:94:9d:6a:bc:5e:9e:21:8d:39:84:
                    d0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AE:14:58:AC:71:BA:42:C0:8E:45:84:EC:58:B1:CC:A8:43:8C:CB
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/6K4UWKxxukLAjkWE7FixzKhDjMs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:8b:88:04:cd:48:b8:dc:29:e3:e3:42:7d:f3:1d:37:e7:44:
         f2:32:d3:98:43:29:19:f9:e0:92:e0:66:41:37:5b:c1:b2:15:
         2b:61:e7:bc:b6:fd:4e:64:6f:72:9c:0d:7b:80:0a:be:a6:3c:
         6e:e7:17:a6:89:99:d2:00:d0:eb:42:f4:40:67:c4:a5:41:13:
         00:a4:f4:ad:88:9c:b1:17:a2:1e:12:6f:0e:bf:59:d0:21:2b:
         0d:5e:19:6e:52:cf:fa:dd:6f:53:06:7d:2d:f1:98:78:11:fc:
         b9:49:4e:82:38:13:9a:33:61:a4:e4:d9:1b:d0:ae:f7:16:3d:
         ed:ec:54:1d:52:9f:32:ed:83:d8:c0:79:ee:79:83:7d:c3:e4:
         ae:59:b4:fd:fc:8b:38:67:52:ed:db:be:47:fb:c1:c3:ea:85:
         32:70:57:53:61:d2:79:ba:b7:aa:5f:79:6a:6d:e3:86:0d:c1:
         1e:ae:db:90:a9:53:42:6a:b7:df:db:81:f1:8b:2f:41:18:8c:
         b0:fa:75:eb:89:34:47:83:fd:82:38:1b:3c:28:25:be:ef:2a:
         8a:89:09:8b:6b:0f:a0:42:2f:6c:68:26:76:df:67:e5:6f:d7:
         17:38:24:46:da:cb:37:d9:5f:f0:81:fd:ec:f8:90:9d:22:83:
         4e:77:8f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:16 2023 by rpki-client on console-ams.rpki-client.org