Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/8rbmdxzrxO4XfxQEWu80cA52LT4.roa
File:                     8rbmdxzrxO4XfxQEWu80cA52LT4.roa (raw, json)
Hash identifier:          e/J1cTZ2s5BveKZ7xHen3qN4QmoTsAZCBJm4SnSa1BQ=
Subject key identifier:   F2:B6:E6:77:1C:EB:C4:EE:17:7F:14:04:5A:EF:34:70:0E:76:2D:3E
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03CF
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/8rbmdxzrxO4XfxQEWu80cA52LT4.roa
Signing time:             Sun 01 May 2022 01:32:59 +0000
ROA not before:           Sun 01 May 2022 01:32:59 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        219.126.96.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 975 (0x3cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:59 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=F2B6E6771CEBC4EE177F14045AEF34700E762D3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:29:22:2d:32:66:32:4d:d8:5b:e7:c0:09:
                    fa:fe:44:f9:38:27:e1:83:32:6c:d1:e1:a2:22:b4:
                    3e:d9:0f:fc:22:e8:83:d2:45:88:69:b1:cc:de:73:
                    8f:e6:92:6d:aa:87:e7:48:2e:dd:4e:2f:73:38:2c:
                    ef:be:a8:57:f4:5c:8f:28:b7:d6:4e:8f:5f:14:38:
                    76:73:05:90:3e:80:9b:13:e4:28:8c:b3:a8:15:2e:
                    f3:e2:77:1d:c3:f2:81:46:83:13:bb:7f:bf:fb:23:
                    bb:64:db:70:4f:a6:cb:85:a8:d5:64:f2:c9:7e:e3:
                    31:f7:d2:4c:74:0f:c2:52:16:89:18:a6:41:49:13:
                    10:79:9b:c2:21:50:52:5a:4e:d8:4f:60:48:c1:81:
                    6f:f1:b0:cc:a3:f3:d3:90:3c:51:0f:30:3d:a2:85:
                    9b:52:3d:8a:ac:70:2d:ec:7f:e8:0f:a8:d4:79:22:
                    71:00:05:65:2f:bd:f0:a1:77:c0:a5:12:ac:f3:e1:
                    ae:ea:ca:e7:9f:bc:23:ac:62:33:5d:65:64:82:e8:
                    15:78:fe:b1:98:b0:c8:a7:14:f4:1a:3d:14:e1:e2:
                    8a:cc:2b:dd:82:60:d0:b0:a6:29:14:ef:65:1f:16:
                    3e:2f:21:25:d9:6a:a3:d1:42:1e:1a:41:9d:5a:bb:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B6:E6:77:1C:EB:C4:EE:17:7F:14:04:5A:EF:34:70:0E:76:2D:3E
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/8rbmdxzrxO4XfxQEWu80cA52LT4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.126.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c8:c0:d5:25:3e:43:d8:28:41:4e:50:fc:d6:e3:40:34:e3:8c:
         65:ec:0f:84:e3:9f:4a:f3:f2:cd:db:84:d9:b4:0a:d8:04:e3:
         07:bb:bb:f5:00:fe:a9:ce:b3:58:b6:d1:ce:18:59:b0:92:54:
         16:da:bf:bd:e6:e6:da:aa:8f:63:83:a4:5f:18:22:a4:e9:c7:
         64:18:7e:70:31:3c:71:38:c8:e1:c9:ee:2f:11:a5:a7:1f:de:
         fc:63:6c:9e:f1:10:70:5a:cf:16:43:77:24:a0:b1:b4:a3:7b:
         5d:e7:64:40:55:e5:c3:26:bd:0d:76:62:29:41:ff:4e:a3:7d:
         77:0d:ef:06:44:e2:e9:0e:db:cc:74:11:a5:1f:1c:d4:60:47:
         5b:69:7a:26:5b:74:7d:9a:17:1f:33:26:ce:c9:0f:bf:02:23:
         44:42:7b:ed:c2:da:26:a3:83:07:05:44:32:0a:16:a9:bc:b7:
         f0:af:65:40:f7:29:d1:24:5d:65:11:03:10:57:63:9e:6b:9f:
         40:68:a8:0d:a2:52:18:47:14:3b:da:55:99:e9:fb:07:91:3e:
         92:1e:bb:c5:32:9c:bd:5f:5a:f9:13:fa:15:cd:cb:e2:d7:ad:
         81:cc:6b:39:a5:2c:db:29:87:01:2f:f2:87:e3:d4:23:fe:3e:
         a9:49:14:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org