Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/DCWYOfbdVvrauO1CSiYp_KFVm_0.roa
File:                     DCWYOfbdVvrauO1CSiYp_KFVm_0.roa (raw, json)
Hash identifier:          K+rCxX9alYrQqLocFEgzbErGT7rEBToXGnUaxxwPxqg=
Subject key identifier:   0C:25:98:39:F6:DD:56:FA:DA:B8:ED:42:4A:26:29:FC:A1:55:9B:FD
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0424
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/DCWYOfbdVvrauO1CSiYp_KFVm_0.roa
Signing time:             Thu 13 Apr 2023 09:55:18 +0000
ROA not before:           Thu 13 Apr 2023 09:55:18 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        111.67.124.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1060 (0x424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:55:18 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=0C259839F6DD56FADAB8ED424A2629FCA1559BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e7:fa:0e:3c:dd:27:32:17:66:6a:f0:48:58:
                    e3:b5:be:25:e0:2b:9e:0c:c4:ab:86:ed:c0:36:03:
                    f1:21:2c:c0:7b:35:b2:80:20:7b:02:30:d8:79:4c:
                    b1:ce:9f:b3:2c:8f:1a:30:89:ad:08:48:40:10:7b:
                    3e:95:6a:40:48:5d:f6:36:9e:a2:df:cb:f6:d8:1d:
                    1b:68:08:24:a8:17:a4:f3:59:29:d3:83:d3:45:52:
                    64:0e:bb:9a:3c:b0:85:7a:ed:53:e6:1c:8c:c3:0a:
                    e1:83:23:37:8a:83:1c:20:ba:80:3d:2c:16:a9:d4:
                    3a:63:b8:7c:59:5b:01:75:1d:0c:87:20:3a:d8:ce:
                    09:02:df:cd:63:df:04:e3:83:d9:30:bf:2f:4c:60:
                    69:1a:7c:ba:72:9b:f1:cb:77:70:68:7f:14:f4:00:
                    54:38:64:07:a4:90:fd:50:27:88:0a:12:b5:e3:46:
                    0d:6f:4b:1d:ac:0b:34:2d:d7:01:d8:82:00:1d:1b:
                    83:44:27:14:85:69:74:20:db:f7:bf:45:3e:eb:9a:
                    f8:ae:84:97:ea:aa:79:de:da:56:55:da:7f:99:98:
                    56:8c:4f:f0:b2:b7:fa:3c:ad:91:85:99:ae:b2:07:
                    d3:16:7a:88:65:86:0a:d3:6a:30:f6:fa:c4:d5:0b:
                    11:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:25:98:39:F6:DD:56:FA:DA:B8:ED:42:4A:26:29:FC:A1:55:9B:FD
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/DCWYOfbdVvrauO1CSiYp_KFVm_0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.67.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:16:36:5d:ff:ee:a0:41:cc:90:a5:3e:b8:dc:1b:9b:cc:a8:
         54:ba:89:fe:bc:4d:7d:fc:38:08:35:80:07:30:93:08:64:d6:
         a4:5c:9d:b4:37:25:9d:27:c5:38:4a:6c:f9:6f:8a:8c:3c:03:
         90:2d:23:0a:20:6e:90:06:89:11:22:89:5e:12:79:42:e8:47:
         d7:ba:ec:24:d3:dd:4e:4f:0e:21:b9:fa:1d:4f:bb:a4:05:31:
         2a:ab:fd:a1:f9:9e:e4:5a:ae:83:80:5e:8d:c0:1b:03:1b:18:
         53:37:a0:18:20:c8:49:8f:05:cb:52:70:8d:d6:0f:69:9f:21:
         b5:e0:10:a8:24:29:b6:fa:bf:d9:22:23:ab:c0:5b:39:e0:83:
         10:7f:ca:4c:8f:8c:03:75:4f:0f:a5:b5:35:81:cf:e9:96:8b:
         a0:1f:44:d2:7a:0e:a0:0c:75:bd:01:74:5e:06:ff:19:83:60:
         e9:dc:bc:99:83:3b:b8:67:d8:e5:d1:6d:0b:f6:cc:2d:f0:dd:
         b4:81:6b:56:b0:98:f6:f7:c5:f9:39:2b:89:18:5a:da:4f:4a:
         db:c5:f0:76:2a:fa:46:28:99:62:e6:00:1b:f6:bc:cc:67:c7:
         15:9e:88:fa:80:7c:bc:ac:e5:48:9b:db:39:57:ff:c5:ac:2b:
         eb:2d:cc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org