Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/FZN4MjQowM-BKlRrlOZBezcRcCw.roa
File:                     FZN4MjQowM-BKlRrlOZBezcRcCw.roa (raw, json)
Hash identifier:          mx0YP4V/lKx3URZYPaxVc2AuDgrJTv7IMHFxHGosQaA=
Subject key identifier:   15:93:78:32:34:28:C0:CF:81:2A:54:6B:94:E6:41:7B:37:11:70:2C
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0338
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/FZN4MjQowM-BKlRrlOZBezcRcCw.roa
Signing time:             Tue 25 May 2021 02:42:57 +0000
ROA not before:           Tue 25 May 2021 02:42:57 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        218.219.48.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 824 (0x338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:57 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=159378323428C0CF812A546B94E6417B3711702C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:a1:15:85:41:90:67:2f:ca:46:1a:b2:04:
                    4b:94:65:7f:17:0d:70:d3:64:eb:6e:6e:e5:0a:37:
                    38:4b:a2:2c:aa:1d:0e:8b:53:50:8c:ab:31:0e:03:
                    19:0e:a4:3f:95:e2:ba:ef:49:e9:1c:46:9c:50:73:
                    8b:33:de:b6:d5:d0:9b:c8:e3:6d:82:75:bb:82:30:
                    7d:27:c3:c6:54:1f:87:56:ce:d9:06:3a:cb:28:e4:
                    3e:1f:b2:0b:33:1b:59:d3:d0:d1:22:65:f6:d3:d1:
                    99:fd:82:04:e5:46:9f:f8:21:e5:99:88:d0:c2:33:
                    4f:76:b4:78:c1:d3:62:92:a9:39:41:f9:8d:12:da:
                    5b:29:8c:ba:80:48:ff:44:e8:a3:fc:56:57:f7:05:
                    e0:85:0c:76:94:9a:58:8f:1b:7d:c6:0f:86:5e:6b:
                    fa:44:b3:08:3d:fd:a9:c3:d9:99:d9:2b:40:69:cb:
                    d6:b8:4b:6c:bb:b8:21:c3:6e:69:27:9f:5e:21:30:
                    db:de:4e:74:25:b8:24:de:b1:3f:a3:ea:d3:a8:c9:
                    6b:a5:a5:7e:df:6c:98:d5:95:85:9a:35:c9:90:98:
                    bf:e1:e1:e2:22:2c:32:2d:c4:2f:c5:80:97:46:c9:
                    14:ae:ff:2e:e7:e4:43:f8:4d:94:85:ba:ba:51:b4:
                    1c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:93:78:32:34:28:C0:CF:81:2A:54:6B:94:E6:41:7B:37:11:70:2C
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/FZN4MjQowM-BKlRrlOZBezcRcCw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:08:70:f5:dd:7b:42:b6:0c:7e:78:32:cd:84:00:34:bb:f1:
         d3:10:ac:e9:1a:e7:d6:94:6e:7e:e6:94:31:01:4b:17:e8:1e:
         4a:7d:2c:e2:49:80:a0:f7:03:e5:69:54:c9:f7:36:40:08:bb:
         01:7c:06:2e:df:52:bf:8d:5f:9c:71:13:d2:54:b4:6c:69:33:
         2e:34:a0:49:43:16:fb:b0:07:9b:6d:c6:3c:45:25:8e:19:cf:
         76:9c:f6:04:16:41:fc:1b:f1:27:81:9d:81:0b:28:46:cc:f1:
         84:31:34:04:e7:8a:6b:85:fb:66:17:fd:67:27:64:0d:22:db:
         0c:c9:89:3f:73:6a:ff:b3:e0:21:00:73:85:8e:3e:2d:1c:fc:
         cd:f7:17:93:8a:28:c4:f1:21:67:99:09:89:34:a0:dc:f6:5f:
         60:42:b5:97:5b:a5:56:53:10:27:ee:00:aa:6d:d9:4b:1c:36:
         94:e5:b1:f8:b6:6d:86:36:45:e7:d3:4d:36:aa:b0:85:81:d2:
         6a:43:f6:68:b2:04:b7:0d:f1:3a:a2:18:d2:81:8e:ae:4f:ee:
         5f:6a:d9:ea:2c:8d:9b:93:ad:7c:d7:72:e5:11:ed:8e:2d:19:
         82:e6:37:be:65:e2:f4:0e:82:f0:de:40:87:08:3b:6c:23:cc:
         28:2e:42:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:16 2023 by rpki-client on console-ams.rpki-client.org