Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/BIatpdqwEz2EBXqXsNEGiAsLn-w.roa
File:                     BIatpdqwEz2EBXqXsNEGiAsLn-w.roa (raw, json)
Hash identifier:          ypwI2E0TWzRjIbi4KS9SfkfMmGLuciud64bhjJSrXM8=
Subject key identifier:   04:86:AD:A5:DA:B0:13:3D:84:05:7A:97:B0:D1:06:88:0B:0B:9F:EC
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03C4
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/BIatpdqwEz2EBXqXsNEGiAsLn-w.roa
Signing time:             Sun 01 May 2022 01:32:11 +0000
ROA not before:           Sun 01 May 2022 01:32:11 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        42.125.225.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 964 (0x3c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:11 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=0486ADA5DAB0133D84057A97B0D106880B0B9FEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:39:4d:74:83:0f:a8:b7:37:1a:93:26:08:5f:
                    1a:bb:70:a1:4d:9b:aa:be:2b:45:6c:5a:f9:52:2b:
                    4a:25:9a:55:1e:5e:71:d6:4b:6b:9d:ac:ca:ce:10:
                    c9:3f:8c:13:76:cd:04:3c:dd:18:3d:80:10:7d:96:
                    3b:f8:91:8d:ef:4c:56:3c:e1:95:7f:1b:57:0b:36:
                    c6:91:f9:43:5f:01:75:39:25:17:99:18:ab:de:f1:
                    1c:a1:42:24:66:2c:d4:ef:a1:29:58:56:1a:ad:4f:
                    37:58:aa:2a:74:24:d1:65:47:65:a6:f9:3e:40:4d:
                    2b:3c:55:41:cc:8c:50:96:86:98:2f:3c:0d:73:2d:
                    95:89:7c:1f:e4:1b:ee:ff:38:4d:8e:bd:21:ba:c9:
                    8b:96:7e:14:27:fa:97:a0:43:f9:01:2e:fb:20:df:
                    35:1a:79:77:e2:4b:3b:7e:d6:2e:c2:4a:3a:4d:16:
                    d7:53:a0:e5:a8:5f:b6:1f:e7:c3:95:04:0a:7a:04:
                    2b:63:53:29:25:e6:51:82:74:66:12:f6:81:d7:90:
                    c3:44:71:26:bf:12:7e:b0:7f:61:0e:6f:40:d5:e4:
                    5d:22:08:e3:a0:91:bd:85:f8:18:e2:59:c9:b0:58:
                    49:93:39:fc:1f:0c:fa:47:d7:89:b2:59:3d:bc:d1:
                    ff:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:86:AD:A5:DA:B0:13:3D:84:05:7A:97:B0:D1:06:88:0B:0B:9F:EC
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/BIatpdqwEz2EBXqXsNEGiAsLn-w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:f0:bd:e6:c6:e6:d6:9b:3a:80:13:b3:cb:7d:77:4d:7f:65:
         b4:f8:69:5a:c7:91:82:1a:76:32:43:e4:41:78:75:69:66:a0:
         84:c8:66:cf:4b:b0:c9:28:8a:de:a1:c1:19:08:13:08:57:4c:
         82:67:e3:03:c1:95:2e:1b:6f:d9:16:9e:63:b7:7c:f0:02:00:
         db:52:71:b3:0d:5b:94:0d:4e:44:41:aa:4a:0a:d9:36:c2:10:
         60:9b:3c:8f:4a:84:23:34:59:a9:1d:21:3d:b6:b7:a0:b2:1e:
         9d:06:14:81:72:f0:7d:2c:b9:57:9b:7c:de:d4:e6:88:ad:8e:
         57:43:34:68:fe:b2:79:32:34:bc:17:07:33:d1:bc:0e:47:18:
         d3:cc:00:0a:0f:ad:01:c3:9b:17:20:fd:e7:00:46:17:d5:4e:
         79:38:f3:2d:0c:30:1b:c9:c7:f9:42:8a:db:fb:72:8e:36:b2:
         b8:9f:b5:d8:b6:9d:35:96:d6:54:e2:20:fa:ca:81:94:ce:6d:
         31:ae:d8:2f:6a:d2:a6:23:d4:48:ba:e4:17:2c:e1:ec:41:eb:
         8c:93:94:76:78:d3:b3:14:a4:ac:fd:60:c5:b5:cd:a2:bc:fc:
         ec:af:5e:0c:e4:6b:b5:4d:b6:af:40:da:53:fe:9a:eb:9e:8b:
         d7:96:a8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org