Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/Duh2EV8ZFb_QZRm4hOCPpTfYM9k.roa
File:                     Duh2EV8ZFb_QZRm4hOCPpTfYM9k.roa (raw, json)
Hash identifier:          U8ehvFbgNN9+kLkAg+YqA686tOlDdYzqSyBGnJHjD8U=
Subject key identifier:   0E:E8:76:11:5F:19:15:BF:D0:65:19:B8:84:E0:8F:A5:37:D8:33:D9
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0393
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Duh2EV8ZFb_QZRm4hOCPpTfYM9k.roa
Signing time:             Sun 01 May 2022 01:29:47 +0000
ROA not before:           Sun 01 May 2022 01:29:47 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        210.146.96.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915 (0x393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:47 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=0EE876115F1915BFD06519B884E08FA537D833D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:5b:57:80:64:64:66:6a:39:ca:9f:82:f9:
                    47:e9:b8:12:ca:b5:01:58:a9:b1:44:39:4b:3f:b6:
                    bd:f8:41:9f:cc:97:e9:f1:78:e8:5b:8d:9d:b1:df:
                    42:8f:80:ae:88:03:7d:13:6d:d8:e0:0f:66:c6:99:
                    76:5c:b8:12:00:6d:ed:0e:05:6a:27:64:22:cd:65:
                    60:56:d4:35:8a:2c:c7:2e:16:09:a7:34:09:07:87:
                    1e:a6:d2:94:7a:e4:1e:33:c8:c3:95:dd:b2:b9:ff:
                    f4:f5:27:a1:0d:a4:c2:03:61:07:cd:e8:77:ed:bb:
                    eb:12:48:b4:60:c2:8e:3f:ac:2b:61:a9:cb:3e:ff:
                    68:c5:1f:95:97:be:e7:17:18:0f:f9:a8:f1:33:08:
                    6e:9c:72:c5:fa:b3:83:ef:ee:db:8a:3b:ac:22:63:
                    55:43:74:49:7c:76:06:aa:33:6e:2f:50:03:fa:c2:
                    1d:23:7f:e9:30:b2:5c:6c:04:8d:09:77:2c:81:af:
                    75:d6:fe:a4:df:2a:1c:66:5d:b8:29:51:a3:b6:c3:
                    40:93:6c:97:df:68:e4:cc:64:fa:40:3d:8a:38:20:
                    88:7b:72:a0:9c:16:44:8a:cc:67:d1:c4:29:5a:3f:
                    74:dc:8d:c4:55:0c:48:12:a9:8e:8c:ba:0d:02:ec:
                    f2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E8:76:11:5F:19:15:BF:D0:65:19:B8:84:E0:8F:A5:37:D8:33:D9
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Duh2EV8ZFb_QZRm4hOCPpTfYM9k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.146.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         00:64:34:4f:6e:9d:28:4a:af:fd:22:8c:d4:54:a5:0e:59:b2:
         ce:6e:c3:74:05:b8:f8:02:f1:ce:56:88:44:ee:e1:e7:17:4e:
         47:a4:30:b7:39:69:c9:91:e0:89:1f:04:9e:cb:ea:2e:04:00:
         1c:1d:39:a1:34:d0:12:d1:cb:c3:82:44:ef:ed:cd:b8:da:a3:
         e6:f2:f7:4f:7a:32:64:57:38:ed:40:e1:f6:eb:7f:21:9c:ad:
         3c:93:42:1e:fc:75:2c:77:b9:b5:d5:c2:f8:d6:1c:4f:d5:68:
         6b:69:c1:51:e7:17:f2:56:2d:56:3e:dc:48:e0:02:3e:e8:44:
         1e:12:06:5e:ed:1f:b7:fa:1b:40:c4:6b:95:65:ae:e3:9a:fc:
         0c:5b:5c:42:d3:b0:7d:2e:64:7d:b7:bd:55:a8:29:d6:92:aa:
         fa:68:11:b2:bd:c2:34:4a:81:d4:5f:15:6f:c9:b9:f2:6c:cd:
         0d:b3:c4:44:3f:75:5f:b8:2c:c0:27:4f:29:44:4c:93:2d:79:
         46:4d:49:c6:1b:8f:8b:25:f8:21:cb:8a:58:e9:1b:27:c5:c2:
         43:4e:62:58:b4:8e:fe:df:3f:a0:8f:d7:9b:91:05:bb:32:20:
         1c:20:57:f6:d6:ca:4c:a3:01:6e:b1:d3:91:05:9c:37:f8:19:
         30:f9:04:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:10 2023 by rpki-client on console-fra.rpki-client.org