Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/7YqoI540taI9ePL25EpDrbcSFS4.roa
File:                     7YqoI540taI9ePL25EpDrbcSFS4.roa (raw, json)
Hash identifier:          BI+66Xtu7vuQ0GBNAgYcsgegBROJ2HzAkVZvrqqDxHI=
Subject key identifier:   ED:8A:A8:23:9E:34:B5:A2:3D:78:F2:F6:E4:4A:43:AD:B7:12:15:2E
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0450
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/7YqoI540taI9ePL25EpDrbcSFS4.roa
Signing time:             Thu 13 Apr 2023 09:57:47 +0000
ROA not before:           Thu 13 Apr 2023 09:57:47 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.88.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1104 (0x450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:57:47 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=ED8AA8239E34B5A23D78F2F6E44A43ADB712152E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d7:ce:33:f2:a6:e3:69:f1:c6:8a:39:42:8d:
                    e1:47:aa:65:dd:5a:d4:78:b8:f3:06:62:a2:d3:f4:
                    8a:ae:d4:f3:14:4f:76:72:6f:91:7c:5d:29:a2:aa:
                    0b:00:1e:db:5a:ff:5c:30:a8:56:82:cd:f7:75:3f:
                    e4:ac:7a:1a:7d:21:1d:59:a0:e3:59:c0:97:e8:ca:
                    59:7c:17:70:3f:49:b7:6c:1a:80:9d:67:55:4f:77:
                    d6:f0:ce:22:36:fe:88:04:78:83:84:9b:64:c0:1b:
                    86:62:ee:4a:60:65:fb:46:f4:5c:7e:fc:c0:a0:31:
                    f9:b6:36:b4:2c:e1:c1:e1:97:60:85:89:1f:0e:73:
                    14:fd:a3:bf:85:65:40:9e:20:2f:3c:17:c5:a8:2b:
                    ef:e5:e5:a2:f5:40:67:66:37:bf:8b:10:4b:24:25:
                    bc:86:84:6c:85:1c:68:80:7a:a8:dd:36:a7:e2:e3:
                    f8:7a:b5:78:0e:db:c5:57:f5:59:20:0b:8d:8e:56:
                    08:c4:21:28:78:14:e2:49:91:13:00:ae:6f:98:a5:
                    e4:d4:91:e8:af:a3:21:d4:e2:11:4b:3c:a6:d4:69:
                    d7:dc:de:57:1a:ec:dd:ef:0f:a4:a1:3d:bb:d4:ee:
                    b9:49:da:54:da:34:1f:c8:a6:f7:2e:3c:b5:30:ad:
                    c0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8A:A8:23:9E:34:B5:A2:3D:78:F2:F6:E4:4A:43:AD:B7:12:15:2E
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/7YqoI540taI9ePL25EpDrbcSFS4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:08:58:82:b5:86:da:2b:c6:64:10:0c:a8:4b:24:bf:58:a5:
         5b:06:e6:c9:47:36:44:e6:15:34:a3:16:cc:67:cd:46:36:7e:
         ed:c9:18:8c:40:78:ce:1c:f5:ce:91:45:1e:cc:16:63:8d:bd:
         da:f3:a0:3d:23:0d:33:8f:a7:d2:56:6d:32:6f:90:c0:53:3f:
         df:c6:f8:69:be:f3:a3:4f:07:e9:1d:a7:d1:8d:c8:9c:df:a0:
         ab:af:52:16:d5:40:75:7d:c9:40:cc:f1:9e:38:33:a2:0d:87:
         27:61:aa:f6:97:cf:28:5d:39:17:c0:19:cb:49:17:e6:f6:4b:
         f6:43:92:47:81:3d:c4:43:84:3d:a0:11:5a:9a:a8:19:c1:38:
         fb:d8:a6:92:90:f4:c7:88:47:fd:9b:e6:7a:a8:01:f7:8a:82:
         8c:58:d9:2a:97:c0:66:58:4a:da:c3:4c:14:a1:f0:12:11:ec:
         4d:11:91:59:fd:a3:77:1b:67:dd:a9:23:d1:02:b7:24:b9:1e:
         9c:c8:6a:d9:0b:34:6b:e5:b3:21:91:1d:29:dd:2f:cb:94:a8:
         ea:b6:25:84:4c:b4:53:c0:42:35:52:34:78:f5:c7:6b:f0:1c:
         f4:99:e6:64:35:dd:f5:1f:38:16:f3:81:32:f6:ea:4a:ee:64:
         82:c6:bb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org