Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/6sh8nJD-s_tetwEHfDZjt1Tf5Z0.roa
File:                     6sh8nJD-s_tetwEHfDZjt1Tf5Z0.roa (raw, json)
Hash identifier:          dpaVAHctoISj1Mb9e0J/jf47GtNTH9aoUT0JttHTnD0=
Subject key identifier:   EA:C8:7C:9C:90:FE:B3:FB:5E:B7:01:07:7C:36:63:B7:54:DF:E5:9D
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0420
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/6sh8nJD-s_tetwEHfDZjt1Tf5Z0.roa
Signing time:             Thu 13 Apr 2023 09:52:27 +0000
ROA not before:           Thu 13 Apr 2023 09:52:27 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        219.96.16.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1056 (0x420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:52:27 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=EAC87C9C90FEB3FB5EB701077C3663B754DFE59D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4a:a3:55:98:66:2b:4d:8f:12:78:ec:b4:e7:
                    67:21:e6:4c:12:8b:3c:03:7d:3b:02:e9:fd:87:6e:
                    e3:09:78:82:1a:e0:3b:ca:47:6d:85:22:b9:bb:a7:
                    9d:94:42:d3:2b:70:f7:a5:31:32:67:bf:76:25:7b:
                    56:c5:47:d2:d0:5b:19:37:d0:2c:87:c3:68:03:67:
                    da:95:44:fb:c3:be:18:86:cc:cd:02:46:5c:05:d5:
                    e0:a6:08:bc:d9:72:b1:4c:72:73:4a:ef:21:21:3b:
                    db:55:d3:0c:9a:74:1c:19:2d:c8:ab:e3:75:fe:eb:
                    85:70:08:c8:35:4b:d1:2e:77:dd:a9:6f:f1:3f:74:
                    ce:b9:6a:6b:8e:3d:3b:f0:c5:fc:1c:28:a6:2e:7b:
                    2f:69:d6:03:f1:a4:fb:71:7b:53:7c:9e:52:11:94:
                    43:3c:21:10:6f:8a:1a:69:82:49:1f:e4:db:c7:a2:
                    0c:ed:73:21:53:50:fc:07:8d:26:ea:01:24:6a:89:
                    13:56:25:4a:c9:5d:eb:45:4c:2f:04:b6:a8:45:7d:
                    f3:3d:78:46:67:54:73:ff:e8:7d:e2:78:dd:df:6d:
                    ba:89:0f:10:0b:c4:ce:ad:1a:cb:fa:f8:27:8c:6c:
                    a4:67:7f:4f:7a:8e:f6:36:81:1a:a7:8f:e5:0e:48:
                    e1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C8:7C:9C:90:FE:B3:FB:5E:B7:01:07:7C:36:63:B7:54:DF:E5:9D
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/6sh8nJD-s_tetwEHfDZjt1Tf5Z0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:fc:f2:35:52:78:6d:c6:1f:13:4b:fc:85:7b:f2:12:fa:ec:
         05:4e:3d:48:dc:10:16:c4:a4:fb:16:4e:38:90:d2:d9:ae:75:
         45:24:df:11:1f:bb:77:1f:7a:0a:8d:12:be:69:07:3b:fd:83:
         bd:ab:91:e7:12:07:01:62:13:b2:0f:0c:25:cd:7d:9d:84:26:
         89:23:d8:2d:2a:f2:c0:b1:a5:88:b2:16:6a:35:ca:02:e6:c2:
         cc:af:6f:7b:a1:9f:04:27:fd:cb:f9:75:f2:e0:a6:13:21:4d:
         bc:86:d8:c8:e1:96:4c:d4:32:31:d8:e0:e4:bd:1c:35:bf:ee:
         90:6e:4e:fb:4c:a1:66:19:99:f2:2e:bd:7e:b5:64:15:5d:c3:
         f6:68:46:0a:e1:26:89:5e:b0:95:6e:d0:57:02:78:2f:ea:7e:
         8b:e1:d7:48:31:51:ae:85:d0:fe:a6:42:05:33:4e:18:7b:08:
         b9:20:6c:71:e0:0c:92:02:18:f6:81:05:1a:0f:b5:7f:d9:1b:
         2a:be:8d:84:8e:67:67:cb:e5:03:84:a4:d6:cf:df:de:b6:88:
         45:53:bf:45:e6:31:f9:dd:fc:6a:47:8b:26:31:38:a6:a8:bc:
         ee:7f:ee:0f:2a:0c:41:bb:4b:a1:1e:af:9e:48:f5:d5:f0:0d:
         43:e9:3c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org