Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/FDCyKB00bM-VXUJNx0ysRiuZYnM.roa
File:                     FDCyKB00bM-VXUJNx0ysRiuZYnM.roa (raw, json)
Hash identifier:          nrNH6LUR4dTMpuJdl2N9DQOxjMvvv8S7VW70NmIsX4g=
Subject key identifier:   14:30:B2:28:1D:34:6C:CF:95:5D:42:4D:C7:4C:AC:46:2B:99:62:73
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0349
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/FDCyKB00bM-VXUJNx0ysRiuZYnM.roa
Signing time:             Tue 25 May 2021 02:43:02 +0000
ROA not before:           Tue 25 May 2021 02:43:02 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.104.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 841 (0x349)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:43:02 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=1430B2281D346CCF955D424DC74CAC462B996273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:76:b7:0e:a9:ca:d3:68:8f:ba:59:31:a8:10:
                    d6:04:4a:eb:fd:af:7c:43:8f:e5:db:0a:31:ad:76:
                    2d:f8:cb:e5:4e:72:f5:68:5c:cf:3a:f6:59:16:60:
                    10:c5:b0:b2:46:29:7b:e9:db:ab:1f:ae:99:27:4f:
                    8e:a7:f1:76:4b:36:f3:04:d9:d2:84:42:37:f9:a7:
                    9c:d8:17:07:83:1a:50:9f:f0:6a:67:2b:fe:19:74:
                    df:4d:a9:37:b7:02:51:c0:8c:e1:a0:63:3e:46:50:
                    10:8c:7f:f5:2c:4c:bb:f8:01:0c:5e:7b:c1:81:a4:
                    61:fd:1a:e8:9e:b1:20:12:a9:d3:66:34:d7:8a:53:
                    81:fe:9b:2f:ce:f4:b2:8e:2d:3a:f2:c4:c2:fe:0f:
                    28:76:82:c6:e1:91:cd:cb:3f:ce:42:83:76:c3:c6:
                    40:ca:f9:23:b8:aa:a9:8e:25:1f:c5:5a:5b:28:17:
                    4c:a9:fe:57:98:56:e4:83:6b:9f:54:36:17:bb:a5:
                    70:90:1f:94:af:7b:2f:35:93:46:88:48:ae:80:91:
                    e1:8d:29:59:08:b1:2d:0b:6e:e8:16:f0:9b:e0:23:
                    21:5f:b5:e5:b6:f6:7f:22:06:a0:1e:a1:11:72:02:
                    56:ab:07:b7:81:e1:cb:01:c3:12:e7:24:78:a1:ae:
                    24:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:30:B2:28:1D:34:6C:CF:95:5D:42:4D:C7:4C:AC:46:2B:99:62:73
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/FDCyKB00bM-VXUJNx0ysRiuZYnM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:b0:db:42:44:72:82:20:c2:ef:f5:eb:ce:bc:27:94:43:77:
         c8:b5:c3:0a:52:2c:7a:9e:b0:88:4f:fb:a1:04:c7:71:84:c4:
         79:68:10:59:39:42:c3:58:b3:43:39:fe:3b:26:db:14:27:a0:
         a3:29:da:b6:43:9b:d9:d6:ec:f4:78:9e:68:1a:b0:67:8e:b1:
         90:0d:cf:98:b7:27:3d:c1:ad:47:95:69:fa:8f:d3:5d:51:df:
         3a:dd:8b:7a:ed:03:49:ad:97:5f:35:0b:3c:0e:0c:f8:e4:9d:
         95:0f:b3:f9:e4:60:6a:ea:59:1d:d0:82:76:2a:e8:f6:82:d2:
         04:75:8f:bd:c4:53:37:e6:a3:6b:4f:8b:d4:5d:64:34:7e:25:
         99:b2:d4:40:4d:1e:d7:95:1e:8e:0b:02:78:64:eb:18:c1:21:
         b7:5b:a4:07:57:78:a9:17:5e:3a:72:aa:06:f4:92:7e:02:37:
         ac:a2:a7:9d:55:86:9c:bc:cf:df:b0:62:d9:07:74:03:a6:b7:
         28:4e:34:54:06:17:dc:b7:82:42:59:78:aa:c8:05:db:49:70:
         df:fa:5a:4c:6a:a2:28:5f:77:87:e4:dd:00:0e:20:44:88:fd:
         22:03:ee:19:4e:92:e0:97:74:12:dd:37:35:0d:8f:44:b2:c2:
         1a:10:9b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org