Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/9TxwfDQbkh7KezhNOzY-9nhRR30.roa
File:                     9TxwfDQbkh7KezhNOzY-9nhRR30.roa (raw, json)
Hash identifier:          m9HYMMTFsqcORgR12Z14hknze60n38kujIpIs2wjreo=
Subject key identifier:   F5:3C:70:7C:34:1B:92:1E:CA:7B:38:4D:3B:36:3E:F6:78:51:47:7D
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0416
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/9TxwfDQbkh7KezhNOzY-9nhRR30.roa
Signing time:             Thu 13 Apr 2023 09:52:24 +0000
ROA not before:           Thu 13 Apr 2023 09:52:24 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        112.138.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1046 (0x416)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:52:24 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=F53C707C341B921ECA7B384D3B363EF67851477D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:88:80:d2:5f:0a:eb:c6:bc:c0:ee:0f:d8:4c:
                    8a:a6:f2:fb:c6:10:27:f1:bd:35:08:a8:02:02:20:
                    1f:be:0e:a7:58:96:17:c6:c8:d7:4d:4c:7a:f9:2b:
                    d6:95:3e:65:57:c2:a4:d4:73:ec:48:cc:73:3b:b6:
                    8e:b2:8a:62:7e:73:cd:74:e7:3d:39:b1:2f:99:7f:
                    dc:f8:85:c8:48:43:ed:09:5e:3d:d7:a1:e3:cf:c8:
                    a4:9e:3c:2b:15:af:ea:7b:b7:45:eb:42:e8:69:6c:
                    60:28:6b:68:92:c1:bb:7b:2b:0f:6b:76:31:0c:b2:
                    e8:ea:73:00:12:88:c8:a7:93:17:75:db:23:7f:97:
                    5f:ca:de:4a:37:65:c2:4b:12:ba:43:6b:76:46:07:
                    c8:ea:bc:39:72:be:7a:ad:2e:99:6d:17:33:89:a4:
                    bf:0b:92:6f:da:42:70:ef:45:84:93:d7:c0:ab:5f:
                    15:08:20:25:94:1d:e2:29:f3:1f:32:11:0f:d4:62:
                    c1:bf:39:85:90:f8:0d:eb:26:81:22:48:1f:45:a7:
                    16:84:1a:80:e2:7a:51:e5:19:94:8d:e8:e9:9b:9a:
                    dc:ed:a6:d0:11:59:ed:0d:22:f9:9a:02:4c:6c:22:
                    9e:09:18:d9:9a:4c:0a:a3:f8:9c:61:56:9e:0a:4d:
                    c0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3C:70:7C:34:1B:92:1E:CA:7B:38:4D:3B:36:3E:F6:78:51:47:7D
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/9TxwfDQbkh7KezhNOzY-9nhRR30.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.138.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         47:a4:86:b0:01:a4:a0:21:fc:db:35:d5:0b:ba:81:2f:4a:ab:
         c4:ad:ad:0d:a5:05:a8:24:e8:ff:e9:5a:dc:73:f7:50:08:9f:
         ec:08:e8:dc:2e:fb:3b:2e:3e:58:60:6e:26:f7:26:7b:e2:17:
         d7:78:a9:54:26:a5:76:f2:89:e1:9c:17:8e:e2:2d:de:d0:f8:
         31:df:bb:2d:d9:2e:36:01:b0:42:39:d3:cc:dd:97:d2:db:13:
         da:e5:e3:27:c4:11:f3:da:a6:02:2a:44:14:60:76:18:a2:3f:
         c2:a1:e5:72:e7:01:5e:03:ef:d9:62:34:e3:00:7b:a8:31:4f:
         ad:ae:fd:49:06:9f:84:79:37:e6:c0:95:2f:ad:ff:c4:57:8f:
         72:66:d7:76:92:f3:3f:61:89:d8:2d:eb:e2:62:eb:fd:36:3b:
         bf:44:88:81:8f:75:6c:23:47:55:76:12:c4:d6:69:1b:65:45:
         5b:e3:6d:fb:94:ff:aa:0e:00:eb:ac:04:5d:36:ba:1b:12:31:
         8b:fd:a7:70:13:98:3c:e6:e8:6b:a9:89:0b:7f:1a:3d:10:58:
         f1:af:fc:32:c8:13:49:0e:66:39:9c:1d:5e:c8:c0:b7:d1:a9:
         92:53:64:d4:b5:bf:bf:9f:08:0a:7e:78:e0:b9:16:72:e9:25:
         95:82:3d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org