Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/7Ff7WqynfHZ84HEGAZufJbD46H4.roa
File:                     7Ff7WqynfHZ84HEGAZufJbD46H4.roa (raw, json)
Hash identifier:          bQUG452ERq1HirWKfd1xKJ2DUg5roFPk+RVxPb8dxFg=
Subject key identifier:   EC:57:FB:5A:AC:A7:7C:76:7C:E0:71:06:01:9B:9F:25:B0:F8:E8:7E
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0370
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/7Ff7WqynfHZ84HEGAZufJbD46H4.roa
Signing time:             Sun 01 May 2022 01:29:34 +0000
ROA not before:           Sun 01 May 2022 01:29:34 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        112.140.16.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880 (0x370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:34 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=EC57FB5AACA77C767CE07106019B9F25B0F8E87E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:be:9a:e6:f2:a9:49:d8:3e:7e:96:2b:c5:
                    ec:c9:30:4f:65:71:a8:43:cb:2e:bd:fc:f6:47:2d:
                    22:ef:e7:dc:a7:d2:c4:40:51:08:d6:71:c5:a3:b2:
                    6f:a7:f0:c7:d5:83:89:c0:0f:bc:76:1d:66:67:34:
                    1c:09:d6:a2:09:34:db:97:58:f0:f9:a9:95:86:a1:
                    b2:a6:79:18:52:21:89:de:92:d6:67:a7:a6:2a:2e:
                    7d:0b:2f:08:99:a8:21:d6:be:5a:b6:17:da:5f:7f:
                    4a:ad:ef:d0:27:ad:6f:c7:76:b8:31:41:a3:ca:6b:
                    27:87:da:51:1b:a3:10:25:16:c4:41:9d:b2:97:54:
                    c9:5f:31:9b:df:ee:8f:11:49:e6:0d:0e:4b:2a:34:
                    37:e7:79:0d:79:1d:2d:5e:b3:bb:d9:a7:9c:57:42:
                    78:82:df:5f:3e:67:a1:56:03:50:4f:58:e2:f6:0f:
                    3b:ea:1b:2b:07:c4:bf:c4:25:46:b6:f3:73:92:5f:
                    96:e8:b6:ee:ea:6e:dd:3a:70:cb:03:1d:6a:65:74:
                    87:e6:6c:28:81:ed:68:b9:b9:c7:61:65:3f:eb:af:
                    a5:57:02:e0:ee:d4:72:a6:f8:d9:09:50:55:e1:11:
                    ad:7c:1c:95:d8:01:74:83:d9:5f:31:2f:a8:02:a5:
                    d3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:57:FB:5A:AC:A7:7C:76:7C:E0:71:06:01:9B:9F:25:B0:F8:E8:7E
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/7Ff7WqynfHZ84HEGAZufJbD46H4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.140.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         96:d6:33:d8:d6:fc:aa:61:e8:69:2e:e1:e4:77:c4:65:df:da:
         71:0c:3a:23:b9:6e:ad:a5:41:1e:7a:25:f6:18:c3:f2:a5:7c:
         75:6f:9b:ab:63:e8:e7:6a:60:3e:e3:86:21:d0:82:0a:d3:c3:
         8b:e5:ca:d1:38:80:48:72:ec:43:f2:66:57:9c:92:f7:bc:22:
         4e:ed:61:bc:67:27:66:33:17:d1:2b:bd:86:8b:e3:3e:e5:d8:
         ba:f8:7f:6d:8e:2c:1c:15:1b:26:f9:41:c6:8d:8f:5e:b7:26:
         ad:a5:86:b5:1a:a1:85:bc:57:4f:d8:df:a3:33:4b:c4:61:65:
         2b:bc:75:d6:da:2f:b2:f2:e3:b0:5c:16:79:3e:a7:99:a4:da:
         1f:c8:88:f4:cd:0b:f0:d8:0f:30:d7:a5:d7:ad:9f:5d:7e:9a:
         6d:02:9a:b9:63:34:67:ec:4f:93:d1:1a:b4:c0:6e:01:4a:e0:
         c7:58:61:56:84:98:0b:3f:49:8c:7d:e2:7c:aa:8b:6a:03:81:
         df:9a:6e:c2:4c:07:5c:95:a2:2a:13:7a:f6:75:b0:23:39:02:
         4e:27:9d:d4:f8:92:30:48:66:ed:05:39:12:35:22:20:1b:3f:
         66:ef:c4:7b:fd:15:5f:28:1e:69:37:b6:f8:c0:ee:26:23:22:
         8e:9b:04:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org