Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/9oscDbkvC7PBFe3YK5qOIbO0A3s.roa
File:                     9oscDbkvC7PBFe3YK5qOIbO0A3s.roa (raw, json)
Hash identifier:          46Lifjex35RQ8VNpn9k+Y9Afcayg0INyotlQoG0NryM=
Subject key identifier:   F6:8B:1C:0D:B9:2F:0B:B3:C1:15:ED:D8:2B:9A:8E:21:B3:B4:03:7B
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       02F2
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/9oscDbkvC7PBFe3YK5qOIbO0A3s.roa
Signing time:             Tue 25 May 2021 02:41:56 +0000
ROA not before:           Tue 25 May 2021 02:41:56 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        112.138.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 754 (0x2f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:41:56 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=F68B1C0DB92F0BB3C115EDD82B9A8E21B3B4037B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c3:39:b9:d7:86:a1:06:b6:3a:8e:4a:3d:ac:
                    e6:74:a0:fc:83:6a:74:aa:88:96:4c:59:0a:f7:4d:
                    ab:0a:d1:04:74:b2:2f:78:dd:d8:13:68:36:ef:d1:
                    2a:02:56:5b:7a:a7:c8:1b:ce:44:85:59:ac:4b:ac:
                    26:91:83:77:55:e4:73:a9:56:49:46:9c:c5:8b:b1:
                    8c:03:f5:d2:c9:60:57:4d:54:a4:5e:88:03:4c:8d:
                    9e:fd:fd:49:22:08:04:ac:05:1d:9b:b1:4c:6f:d8:
                    b3:24:8a:1d:03:c7:43:ad:aa:00:77:fb:9f:32:f9:
                    3f:aa:a9:35:0c:5e:a9:44:85:de:8c:e2:f3:be:80:
                    e4:38:07:e4:ca:6d:5c:3e:67:61:10:b3:74:fe:89:
                    3a:c2:3d:24:ec:5d:9d:bc:41:09:60:af:38:f1:0b:
                    ba:ae:72:a5:d9:69:a1:01:08:b8:4e:4b:81:b0:d5:
                    b5:4f:af:32:d2:7e:3d:f8:47:0c:65:4a:3f:b6:bf:
                    09:37:95:c8:bb:0e:ef:94:30:19:0f:e3:2b:fa:c1:
                    ad:5a:bf:4c:c7:40:87:ae:e5:1d:1e:ef:bc:7c:d4:
                    65:10:eb:4b:0b:bf:8e:5a:14:fd:da:42:78:de:12:
                    f2:b6:70:9e:3c:22:9f:80:83:2f:47:fb:54:d1:89:
                    7f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8B:1C:0D:B9:2F:0B:B3:C1:15:ED:D8:2B:9A:8E:21:B3:B4:03:7B
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/9oscDbkvC7PBFe3YK5qOIbO0A3s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.138.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a1:e5:af:c2:18:0d:3e:f5:8e:d6:78:be:c6:d2:11:0a:7c:86:
         a9:ec:1c:bf:8e:b8:23:16:b2:4e:e9:66:66:d5:5f:82:9f:a6:
         e0:3b:75:eb:62:0e:67:39:c3:14:b0:25:87:43:25:f2:a0:28:
         3e:07:0a:21:f3:40:d7:ac:22:e8:70:e8:81:91:03:95:9c:10:
         7b:c6:4f:dc:85:7b:ea:c7:c7:dc:41:9c:f5:f9:82:82:6b:ef:
         12:d7:df:2d:4c:4c:a2:58:f4:ba:58:12:5d:f6:da:8e:22:0b:
         99:9f:60:3c:28:c8:09:be:cc:7b:13:29:3c:8b:45:f6:37:fe:
         0f:c8:41:87:4f:42:80:57:5d:4b:8f:02:39:92:3d:c0:4a:46:
         a9:a8:75:d4:a6:4e:f9:ce:d5:37:20:5b:e5:cd:99:92:10:37:
         93:6f:c8:8b:52:8d:ca:c9:e6:68:18:7b:d0:8b:35:d5:f3:f6:
         ba:62:8a:47:3d:05:c7:bf:11:05:5f:82:99:bf:86:07:91:0d:
         e0:61:4c:c8:9c:9e:d2:9d:02:b9:bf:c4:d8:d5:d0:38:fb:88:
         b6:56:cd:93:e4:eb:4a:fd:0f:40:21:0f:b3:43:76:1f:75:ea:
         5a:ce:1d:88:43:92:0f:cc:fc:53:9a:02:87:f5:4b:7e:02:a2:
         d3:32:81:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org