Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/CudJp_7DFX0bk6bPQ__iR2Naj7A.roa
File:                     CudJp_7DFX0bk6bPQ__iR2Naj7A.roa (raw, json)
Hash identifier:          gGkOA/ghO1MPV5QF6dHfyca9LuwE3hTdvWZ1/sSFg/k=
Subject key identifier:   0A:E7:49:A7:FE:C3:15:7D:1B:93:A6:CF:43:FF:E2:47:63:5A:8F:B0
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0346
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/CudJp_7DFX0bk6bPQ__iR2Naj7A.roa
Signing time:             Tue 25 May 2021 02:43:01 +0000
ROA not before:           Tue 25 May 2021 02:43:01 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.68.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838 (0x346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:43:01 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=0AE749A7FEC3157D1B93A6CF43FFE247635A8FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:68:05:80:af:51:22:44:4e:69:5a:4d:fa:a9:
                    5f:d4:9b:46:23:15:84:d0:33:34:52:fa:7a:93:d3:
                    79:04:42:0b:98:43:e8:88:3b:f2:07:55:e8:0d:bf:
                    58:09:5c:b3:f3:16:ac:a9:a5:06:d4:b8:b6:20:8f:
                    47:b6:bc:81:40:f5:3f:44:9d:2a:2a:8f:77:28:26:
                    79:67:f6:7f:01:64:84:23:17:02:d4:58:73:5d:f8:
                    d8:56:1d:1a:7a:a8:01:c6:36:86:e8:d0:fa:40:5b:
                    a1:97:77:03:d5:ba:6f:10:77:76:98:36:6b:ed:e6:
                    0e:89:83:05:04:95:98:2f:65:37:be:ae:7e:00:3e:
                    81:43:0a:4c:ac:a0:28:d0:fd:25:2a:e0:a8:11:df:
                    c4:50:f3:7d:7e:13:20:bb:28:75:77:04:2a:aa:42:
                    67:e4:42:09:3d:8d:8e:9a:b5:bb:f2:fc:20:69:7e:
                    50:8d:04:46:29:68:b1:af:85:0f:e4:8c:7d:59:27:
                    3a:c9:50:39:77:ac:36:b7:70:c5:d9:86:ba:81:44:
                    e7:47:c2:00:a2:58:c4:c1:47:e9:a3:69:18:e2:69:
                    dc:76:ea:26:f5:a4:f1:48:d7:ea:f7:40:bb:11:cc:
                    81:61:e9:34:35:8a:cd:96:7f:93:64:fe:8d:9d:36:
                    8b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E7:49:A7:FE:C3:15:7D:1B:93:A6:CF:43:FF:E2:47:63:5A:8F:B0
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/CudJp_7DFX0bk6bPQ__iR2Naj7A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:ec:27:75:b1:c3:7a:a9:57:db:29:67:98:58:fe:bc:31:aa:
         2f:90:06:37:7f:f7:62:2c:dd:31:a2:89:81:c2:f8:14:95:27:
         75:f0:8c:ca:28:32:3d:0a:52:54:6d:ec:b6:7c:4a:af:03:b3:
         3d:df:e6:fa:c0:c0:98:75:1b:ff:38:de:45:48:06:ac:b3:fa:
         c2:15:fa:82:b6:a3:fc:14:44:29:5c:80:96:d9:99:f5:ec:3c:
         14:53:34:84:15:ef:a8:06:1e:e4:86:a8:cb:47:33:6d:d9:57:
         cf:00:5e:a9:b9:24:1a:19:c5:72:13:a7:81:27:11:51:bf:2e:
         1c:f6:c8:6f:c6:79:23:c6:d4:4f:59:e9:93:11:57:8c:9f:c3:
         fc:9d:cb:53:67:57:63:f3:3e:34:bb:bf:4e:7d:b2:44:f0:f1:
         65:25:a8:00:a7:71:10:70:14:4d:62:73:ec:b2:30:96:c1:9e:
         d6:86:69:98:9d:cc:86:a6:fe:71:6f:45:7e:b5:84:c9:d8:e8:
         89:d9:93:dd:85:ee:06:07:ae:88:ab:75:c7:dd:f6:91:0e:95:
         18:41:81:81:9b:ee:dd:39:45:11:e1:11:c8:3e:b5:c8:ae:e2:
         dc:a8:33:df:d2:8a:05:e0:d2:f2:86:af:cf:46:a1:c9:83:21:
         a0:da:e1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org