Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/6aEvSd0zhDTH16z-pEFk9gKa41E.roa
File:                     6aEvSd0zhDTH16z-pEFk9gKa41E.roa (raw, json)
Hash identifier:          R74pRUk3dKvuggAM9VPU4rZNQTZdU3+6DuKlh0I7lK4=
Subject key identifier:   E9:A1:2F:49:DD:33:84:34:C7:D7:AC:FE:A4:41:64:F6:02:9A:E3:51
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0374
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/6aEvSd0zhDTH16z-pEFk9gKa41E.roa
Signing time:             Sun 01 May 2022 01:29:36 +0000
ROA not before:           Sun 01 May 2022 01:29:36 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        219.106.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884 (0x374)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:36 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=E9A12F49DD338434C7D7ACFEA44164F6029AE351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:97:77:ec:08:f6:ba:f3:0e:c3:ba:50:0d:54:
                    95:4a:93:4c:2f:6b:dd:99:b1:94:d5:bb:10:92:ca:
                    c2:98:0e:af:46:36:f6:55:a2:77:0f:1d:dc:fd:ed:
                    ad:f4:f9:21:a9:a0:a9:fc:00:28:ca:73:75:3f:2a:
                    30:53:d1:16:3a:d3:4a:3b:f2:1c:0c:ee:87:33:fe:
                    52:d4:8b:bf:e0:6c:f9:db:7c:ed:89:cf:5e:cf:49:
                    9d:a3:f5:70:5c:67:53:e3:b3:00:f7:3c:20:1d:0b:
                    c4:3d:8e:ec:d5:90:44:f1:a6:ca:e8:90:b7:c8:83:
                    cb:47:a5:98:1c:6f:9d:7a:bd:f8:01:00:93:ef:24:
                    bf:1f:3a:07:4a:f0:cd:36:e4:88:18:6f:1b:5f:6d:
                    34:ac:c9:dd:3b:db:1c:f2:86:2d:ef:a8:18:31:69:
                    6e:97:77:98:f8:ac:a8:6c:a8:19:3e:ee:2a:10:7c:
                    09:71:28:ba:21:9d:cb:7b:3d:04:7e:ef:95:8a:76:
                    9f:d1:fa:b3:e6:43:09:85:ce:35:0a:c3:ef:9e:8d:
                    72:13:f8:86:41:26:c1:6e:42:d3:82:3e:f1:d8:b5:
                    5a:b0:2c:f1:34:51:31:4b:15:61:e5:26:e9:fc:71:
                    cf:da:64:e5:b6:93:d3:fa:26:b1:2b:42:2c:31:9c:
                    c7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A1:2F:49:DD:33:84:34:C7:D7:AC:FE:A4:41:64:F6:02:9A:E3:51
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/6aEvSd0zhDTH16z-pEFk9gKa41E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.106.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0b:b4:cd:9d:02:03:c0:f8:08:f5:21:45:9e:3b:82:41:d7:a9:
         e6:8f:6b:89:58:68:90:39:2e:5a:87:32:95:2d:e6:0d:45:5f:
         ec:a9:f2:b6:31:bb:dd:6c:55:9a:50:2c:d2:bf:03:8b:1a:4a:
         d2:cd:2b:62:d3:85:06:74:62:c2:fd:d4:f6:c7:68:1c:18:8e:
         66:8c:a6:c6:0a:eb:26:dc:19:3a:6c:97:90:5f:15:31:1e:55:
         5b:8c:a0:73:68:e5:11:48:51:e0:3c:0b:dc:54:78:a8:9f:fc:
         ab:13:ae:0b:43:a8:be:c4:c7:bf:2f:14:f0:32:1c:e6:9e:d3:
         7f:27:96:cb:db:35:69:eb:dc:23:87:a7:52:bc:6c:2b:65:de:
         b3:d5:e0:5a:85:e7:f0:ed:7f:59:66:7b:d3:c8:84:61:af:7c:
         e8:af:5e:2f:7c:fb:6a:35:fe:75:a3:d7:0d:ea:e1:f5:11:0f:
         99:84:d3:ad:38:b1:17:89:98:88:09:a5:0e:77:cc:8f:16:89:
         06:92:ee:b5:85:fa:c4:63:bb:ad:1b:90:51:88:13:c2:9a:53:
         c9:77:fb:6d:a3:c3:de:1e:0e:f8:5d:54:2e:dd:3b:1a:be:b6:
         10:c1:ed:21:a3:00:28:48:52:b8:b1:fe:b5:4f:6d:93:66:72:
         51:06:38:10
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA3QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMjA1MDEw
MTI5MzZaFw0yMzA0MjcwOTUyMzRaMDMxMTAvBgNVBAMTKEU5QTEyRjQ5REQzMzg0
MzRDN0Q3QUNGRUE0NDE2NEY2MDI5QUUzNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCol3fsCPa68w7DulANVJVKk0wva92ZsZTVuxCSysKYDq9GNvZV
oncPHdz97a30+SGpoKn8ACjKc3U/KjBT0RY600o78hwM7ocz/lLUi7/gbPnbfO2J
z17PSZ2j9XBcZ1PjswD3PCAdC8Q9juzVkETxpsrokLfIg8tHpZgcb516vfgBAJPv
JL8fOgdK8M025IgYbxtfbTSsyd072xzyhi3vqBgxaW6Xd5j4rKhsqBk+7ioQfAlx
KLohnct7PQR+75WKdp/R+rPmQwmFzjUKw++ejXIT+IZBJsFuQtOCPvHYtVqwLPE0
UTFLFWHlJun8cc/aZOW2k9P6JrErQiwxnMfTAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU6aEvSd0zhDTH16z+pEFk9gKa41EwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1LzZhRXZTZDB6aERUSDE2ei1wRUZrOWdLYTQxRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXbasAwDQYJKoZIhvcNAQELBQADggEBAAu0zZ0CA8D4CPUhRZ47gkHXqeaP
a4lYaJA5LlqHMpUt5g1FX+yp8rYxu91sVZpQLNK/A4saStLNK2LThQZ0YsL91PbH
aBwYjmaMpsYK6ybcGTpsl5BfFTEeVVuMoHNo5RFIUeA8C9xUeKif/KsTrgtDqL7E
x78vFPAyHOae038nlsvbNWnr3COHp1K8bCtl3rPV4FqF5/Dtf1lme9PIhGGvfOiv
Xi98+2o1/nWj1w3q4fURD5mE0604sReJmIgJpQ53zI8WiQaS7rWF+sRju60bkFGI
E8KaU8l3+22jw94eDvhdVC7dOxq+thDB7SGjAChIUrix/rVPbZNmclEGOBA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org