Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/ANC9sAsMctDaTwC8WW2ISMkbViY.roa
File:                     ANC9sAsMctDaTwC8WW2ISMkbViY.roa (raw, json)
Hash identifier:          uMs7xoryijTvoCvtyxec5hy8ZgCPonX+EJ3+NOwxpYk=
Subject key identifier:   00:D0:BD:B0:0B:0C:72:D0:DA:4F:00:BC:59:6D:88:48:C9:1B:56:26
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0480
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ANC9sAsMctDaTwC8WW2ISMkbViY.roa
Signing time:             Thu 13 Apr 2023 09:59:55 +0000
ROA not before:           Thu 13 Apr 2023 09:59:55 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        220.148.96.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1152 (0x480)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:59:55 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=00D0BDB00B0C72D0DA4F00BC596D8848C91B5626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:20:ef:ca:3d:2f:23:22:56:35:81:89:fe:a1:
                    fb:4f:ca:72:07:0b:29:1c:51:63:43:93:1f:5a:fa:
                    1a:4a:03:73:50:0c:7d:10:0a:b5:58:31:23:94:a0:
                    49:a4:6d:dd:f6:90:33:c0:66:e0:32:20:5f:ce:64:
                    3d:63:6b:0b:4a:74:68:3a:5b:94:0c:13:8a:95:9a:
                    5e:c5:10:bc:c1:34:cb:14:e7:5d:d1:a3:ae:ab:be:
                    8d:b3:c7:fb:02:fd:02:16:c4:9b:0a:d9:4b:ff:6a:
                    7b:dc:e5:63:5a:2b:3b:3f:5b:fe:a8:6a:ba:1c:27:
                    b1:45:b7:f0:f7:23:88:6c:b7:1c:ea:a9:ca:11:0b:
                    e7:87:c5:3f:13:cf:f0:df:eb:2a:4c:2d:bf:64:96:
                    31:17:4e:f1:5e:11:05:bf:62:b5:cc:e1:d8:20:63:
                    22:d4:c2:0a:0e:97:06:e4:14:54:14:d3:cc:b1:32:
                    76:5e:be:c2:07:86:33:f8:ee:24:15:a9:5b:04:57:
                    a4:18:ea:e2:53:e8:7d:f7:7b:bf:66:d0:89:4e:65:
                    02:2d:4c:76:14:c3:6c:47:9a:8b:99:69:b1:83:4d:
                    12:8f:46:b4:41:6e:0d:27:21:ad:b3:38:45:27:43:
                    c2:a1:00:61:0a:39:c9:86:45:e6:2d:8c:49:02:3d:
                    5e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D0:BD:B0:0B:0C:72:D0:DA:4F:00:BC:59:6D:88:48:C9:1B:56:26
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ANC9sAsMctDaTwC8WW2ISMkbViY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:b4:02:84:f4:75:75:1d:f4:15:2d:19:0a:60:b1:f1:b2:d6:
         c3:2f:6b:92:e7:d0:2c:ce:0f:5d:4e:ac:38:f7:b4:8a:dc:cd:
         06:54:9b:30:1e:7a:2e:e7:58:c1:2e:69:a3:b7:22:86:8f:10:
         27:98:c2:13:41:e8:77:db:82:c8:2c:1c:f7:71:96:6d:15:80:
         dc:c5:c3:68:0f:d1:e7:24:32:cb:3e:0d:3d:14:af:e3:e0:9c:
         07:f8:8d:d4:d6:96:3d:6a:a2:c9:a7:91:83:64:ee:41:67:b8:
         19:21:84:5a:37:e2:09:a5:61:9c:49:05:a8:4e:7a:bf:dc:56:
         ae:45:7a:73:a6:57:32:29:93:d1:3d:a5:a0:a9:92:b4:03:38:
         b3:c6:d7:71:10:07:32:bd:78:e0:99:3f:2c:f7:03:00:53:1d:
         0e:f0:5e:f3:b3:82:80:8d:31:a3:2d:6a:ec:8c:88:a4:38:a1:
         f5:3a:10:7b:0e:62:eb:97:10:1a:45:3a:93:60:82:c0:08:89:
         32:15:a7:96:36:9d:d0:5b:91:2f:08:e7:48:e0:0c:a8:35:be:
         ac:77:98:a3:e5:1e:b6:37:1e:d0:bf:f6:8e:f7:a0:69:dc:dd:
         3c:51:db:b3:6c:6a:56:55:a0:96:c7:37:35:78:bb:5e:65:a3:
         77:57:de:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org