Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/9r2o_kM1mUAGa4oi9BAaK2smP8g.roa
File:                     9r2o_kM1mUAGa4oi9BAaK2smP8g.roa (raw, json)
Hash identifier:          fl2+OOlT2q20awVvdQIB+3Z4XITzrK/coOT1sRgDVzM=
Subject key identifier:   F6:BD:A8:FE:43:35:99:40:06:6B:8A:22:F4:10:1A:2B:6B:26:3F:C8
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0351
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/9r2o_kM1mUAGa4oi9BAaK2smP8g.roa
Signing time:             Tue 25 May 2021 02:43:05 +0000
ROA not before:           Tue 25 May 2021 02:43:05 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        61.211.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 849 (0x351)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:43:05 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=F6BDA8FE43359940066B8A22F4101A2B6B263FC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4e:b7:74:ac:f8:70:3d:d0:53:68:d2:b9:43:
                    d0:f3:32:fd:2c:cc:81:2b:11:66:57:d2:16:54:35:
                    d8:31:90:6b:2f:00:17:7a:60:37:0c:de:de:0b:0e:
                    a4:2e:37:b1:ba:9b:71:97:2e:75:3a:3b:c5:a5:21:
                    09:74:1f:22:69:37:f0:bf:aa:43:c6:f9:a3:8f:63:
                    41:1b:07:84:b2:e6:91:b8:18:ee:c8:a2:d9:26:6f:
                    b7:60:52:05:16:95:6c:02:e0:17:8c:65:d3:b3:70:
                    6d:e8:24:33:17:5a:47:e1:9f:8e:8a:09:ed:fa:c4:
                    6f:e3:b4:62:c7:97:8c:de:66:07:1a:8d:4a:49:3d:
                    be:87:d1:f5:3c:dd:0e:33:60:f9:80:0d:b5:db:5e:
                    44:e5:c5:78:45:c7:72:ca:98:14:39:90:06:f8:e6:
                    b9:8f:85:d9:b3:d2:1c:b3:be:2a:85:d7:c4:4c:97:
                    c7:0a:15:00:10:cf:5d:77:fe:4a:be:cb:6c:53:8b:
                    f4:8d:29:14:a4:75:87:9b:93:79:a8:a9:90:3d:a4:
                    23:30:d5:16:88:88:66:db:3a:25:a8:7b:38:ba:a0:
                    f7:7d:ad:00:84:55:f9:5f:fa:16:bd:4e:34:e7:41:
                    e4:00:39:03:36:77:20:47:eb:0c:f8:7a:cc:32:04:
                    15:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BD:A8:FE:43:35:99:40:06:6B:8A:22:F4:10:1A:2B:6B:26:3F:C8
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/9r2o_kM1mUAGa4oi9BAaK2smP8g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         99:40:d1:85:5b:28:ae:11:79:3c:83:77:43:60:c8:52:7d:f4:
         18:7a:33:e2:fa:41:6e:eb:f9:df:dc:29:92:98:bb:49:26:17:
         1b:6f:c7:ce:9a:ed:b5:7d:56:db:56:55:77:1d:43:f0:87:be:
         c4:a9:63:12:6e:6c:f2:05:39:19:3f:db:34:d7:fe:78:cc:1e:
         77:fe:03:1b:82:96:95:93:bd:bd:eb:d8:49:d6:49:b3:63:21:
         66:85:1b:75:a2:12:7a:64:b8:4c:86:36:14:5b:1f:73:b7:91:
         82:cd:5f:dd:40:25:bf:3c:ed:12:4c:5c:cd:5e:a3:ed:9b:6a:
         ef:40:75:25:13:82:77:07:f3:f8:d6:cd:56:44:81:aa:1f:22:
         34:91:49:73:48:2d:28:ad:a0:87:2f:f6:ba:e9:95:c7:2f:a7:
         99:14:34:2e:02:32:4a:30:a5:6e:0d:09:1d:34:b1:b5:27:b9:
         a7:63:0f:1e:d8:86:bd:ac:d1:9d:2e:96:e2:e7:a6:a4:ac:d0:
         0a:be:9a:41:d7:5e:d3:be:e3:21:58:f1:b8:6c:7c:1c:9e:7b:
         ea:c2:83:72:6e:f5:b2:1f:42:4a:c5:47:e9:6d:22:32:fa:3b:
         88:de:05:5e:02:64:74:e1:8d:e8:90:a7:9d:df:2c:b4:ae:f8:
         d7:04:a4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org