Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/DaLHgFUqDjbqfZ9pirGMtHP7jBA.roa
File:                     DaLHgFUqDjbqfZ9pirGMtHP7jBA.roa (raw, json)
Hash identifier:          4HCv8sDNC1C7e0WO4IGvLHNTbDC8Z0HzhilrWSf7P28=
Subject key identifier:   0D:A2:C7:80:55:2A:0E:36:EA:7D:9F:69:8A:B1:8C:B4:73:FB:8C:10
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03A7
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/DaLHgFUqDjbqfZ9pirGMtHP7jBA.roa
Signing time:             Sun 01 May 2022 01:32:03 +0000
ROA not before:           Sun 01 May 2022 01:32:03 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        203.114.228.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 935 (0x3a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:03 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=0DA2C780552A0E36EA7D9F698AB18CB473FB8C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:ee:2b:6c:17:20:16:e0:90:67:f1:7a:bc:
                    42:d0:38:61:06:c7:5f:52:62:ba:a2:27:c7:79:25:
                    cc:bd:72:2c:1e:cf:c6:e4:ab:07:f9:5e:c2:c6:0a:
                    2f:8b:e0:aa:54:43:92:6e:6a:52:2d:31:c5:62:27:
                    23:6f:ca:f8:41:15:03:55:20:ae:d8:55:bf:ca:50:
                    ed:1b:ce:51:37:d5:10:28:fb:b3:c5:f3:21:9e:15:
                    18:5f:fe:3b:2b:aa:d4:be:85:8c:8e:ce:d7:18:98:
                    d0:83:bf:0e:d9:a0:e8:cc:a9:95:f3:d1:df:f1:c7:
                    86:0c:85:79:1b:ec:db:a6:73:85:76:ab:69:c5:b5:
                    16:7d:7e:f3:29:49:ac:65:39:26:6e:fb:aa:26:11:
                    41:97:29:6a:c6:a2:4b:2d:dd:74:3d:f4:d1:24:65:
                    76:cf:91:e9:fb:8f:8a:73:9d:04:43:12:5c:72:9c:
                    25:9a:83:24:f3:09:d1:d1:cb:a0:82:39:c4:10:59:
                    8e:53:f7:ad:5f:a1:47:2f:5e:28:d8:c0:b9:42:df:
                    af:b6:de:84:d1:5f:6c:d1:40:94:99:84:46:d4:26:
                    36:fb:a6:2f:54:5f:d8:b8:fa:95:98:92:62:2f:a5:
                    b2:75:9f:f4:12:f0:1c:82:d0:ec:92:c6:5e:34:63:
                    90:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A2:C7:80:55:2A:0E:36:EA:7D:9F:69:8A:B1:8C:B4:73:FB:8C:10
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/DaLHgFUqDjbqfZ9pirGMtHP7jBA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.114.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:b4:54:fe:dd:d5:59:ac:48:6b:9f:f6:15:f7:ac:4a:47:3e:
         c1:86:93:30:e7:e9:ec:45:91:2b:71:e3:be:6a:f1:98:6a:b7:
         02:ab:9d:d9:98:76:7f:43:9a:4c:50:c3:64:29:d1:46:aa:21:
         35:20:8d:26:dc:d7:eb:29:4c:f7:e6:71:c3:62:49:ed:83:dd:
         67:96:a3:ca:fb:60:a8:68:33:a5:3d:75:9b:70:74:36:c8:d9:
         81:d1:e6:7b:85:75:5f:82:55:2b:09:60:73:59:77:d7:13:89:
         5a:f5:dc:8e:a9:56:6b:aa:5c:40:b3:2b:85:cc:02:e7:42:8c:
         34:52:9a:94:c7:8b:58:0f:62:22:de:99:cc:d6:19:f7:7a:f2:
         d1:77:0c:34:e0:33:53:d4:fa:66:0f:91:86:08:83:05:a5:2f:
         11:b9:1c:c6:8a:db:64:3a:90:d7:2f:b0:a9:48:23:58:be:5b:
         16:03:8c:7c:8f:0e:23:42:10:2a:fd:f3:78:9e:a6:97:84:50:
         c8:38:90:c3:ac:5e:e2:73:9f:b6:b0:ec:c1:68:6b:cd:40:26:
         1a:52:f4:c3:81:c5:a0:55:c9:35:c5:cf:8a:0f:d1:80:ef:ff:
         f9:35:5a:fa:4c:6d:7b:4b:7d:61:16:d5:7e:94:43:04:94:a4:
         c6:b0:88:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org