Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/CKuGb-6gn1BFUFjRth-11Dgj_Ao.roa
File:                     CKuGb-6gn1BFUFjRth-11Dgj_Ao.roa (raw, json)
Hash identifier:          jib2i1x3SnZfoBDPyvPRi0aAICftHVfYFmZhatNicLw=
Subject key identifier:   08:AB:86:6F:EE:A0:9F:50:45:50:58:D1:B6:1F:B5:D4:38:23:FC:0A
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       047E
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/CKuGb-6gn1BFUFjRth-11Dgj_Ao.roa
Signing time:             Thu 13 Apr 2023 09:59:54 +0000
ROA not before:           Thu 13 Apr 2023 09:59:54 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        182.20.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1150 (0x47e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:59:54 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=08AB866FEEA09F50455058D1B61FB5D43823FC0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:44:44:36:a3:6f:9a:75:52:29:1c:34:7b:9e:
                    b3:9a:b8:89:93:3e:db:07:57:e2:ae:9c:67:53:22:
                    e6:d9:e9:4c:1d:fd:63:40:3d:95:31:f7:76:1e:8d:
                    83:68:74:c4:56:a9:1b:1f:3a:ec:c8:fd:96:43:38:
                    d8:d2:81:7a:8b:05:4c:12:32:4a:06:03:11:07:54:
                    48:45:4d:d7:8c:3b:b3:13:93:2a:bb:4b:e1:35:d2:
                    a6:b7:55:94:aa:2f:03:38:55:e2:76:47:49:e9:82:
                    b3:25:44:ca:ae:d8:85:f9:20:4e:70:51:d1:19:0e:
                    b9:c5:10:30:96:06:cf:32:9c:47:0c:98:76:41:be:
                    2d:3a:43:82:24:24:1c:76:a6:10:8f:18:b2:5e:d0:
                    70:d9:82:2d:99:f6:52:ee:83:b6:28:bf:2c:94:e1:
                    b3:77:57:63:50:45:bd:77:78:06:c5:cb:af:cd:7e:
                    4d:2a:a9:71:63:c2:87:0a:6c:7f:a7:ca:97:94:d8:
                    27:c6:c9:54:ea:45:92:c2:f1:71:59:5c:1c:26:34:
                    1f:ad:f0:ca:93:24:c5:49:8e:11:cb:b4:47:28:5f:
                    22:a9:42:21:80:4f:91:34:25:a2:c3:f8:c0:7c:26:
                    08:3e:71:b0:68:42:21:c3:a4:ea:95:63:2c:8c:0a:
                    74:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AB:86:6F:EE:A0:9F:50:45:50:58:D1:B6:1F:B5:D4:38:23:FC:0A
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/CKuGb-6gn1BFUFjRth-11Dgj_Ao.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.20.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c4:1a:b6:cf:b8:58:dd:a4:d7:e8:82:8b:75:b2:ef:8e:02:95:
         0c:61:ab:54:ed:65:34:76:9a:4b:50:75:07:46:a5:46:0f:61:
         65:c3:df:f4:45:6f:4d:c8:4d:16:e1:c0:b2:d6:83:65:2b:b1:
         02:2c:9a:ac:24:19:8c:81:20:85:4d:22:9a:46:a2:59:18:dd:
         55:25:c2:8e:82:cc:b2:6f:10:02:53:9c:0a:d6:12:b7:70:93:
         b0:de:a4:c2:29:81:b0:49:4a:af:40:af:52:c0:17:c8:5e:ba:
         ef:ef:81:80:8f:4b:cb:6e:40:f2:36:94:fe:ca:c0:b9:8f:ee:
         16:11:37:e6:5f:97:78:d3:4a:7f:61:90:c2:18:e0:fe:0f:17:
         84:7f:e0:b1:3e:e8:80:a6:a6:81:ac:02:42:59:5f:c3:91:f0:
         40:d0:ec:f4:a7:a4:15:56:df:62:09:1f:2e:40:13:f0:f7:5e:
         e0:9b:cd:30:99:d0:47:26:82:eb:97:a4:b6:ca:c7:e8:fa:e0:
         51:4b:46:f7:84:f5:66:8a:ab:7e:63:56:7c:e3:8b:bf:91:2b:
         61:01:c8:05:12:40:a0:89:a3:3b:6d:e8:1b:63:63:4a:45:06:
         e4:f6:e9:82:ad:65:ea:eb:fc:20:86:97:78:8b:46:90:f9:c2:
         48:a2:51:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org