Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/FaGbZisAzXnJmFlYmYYfG-FhwvI.roa
File:                     FaGbZisAzXnJmFlYmYYfG-FhwvI.roa (raw, json)
Hash identifier:          K43BS0+1ABT5oGsj+tsXaLIq19aFQDbifYq3mEWdEzA=
Subject key identifier:   15:A1:9B:66:2B:00:CD:79:C9:98:59:58:99:86:1F:1B:E1:61:C2:F2
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       033E
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/FaGbZisAzXnJmFlYmYYfG-FhwvI.roa
Signing time:             Tue 25 May 2021 02:42:58 +0000
ROA not before:           Tue 25 May 2021 02:42:58 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        219.112.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 830 (0x33e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:58 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=15A19B662B00CD79C998595899861F1BE161C2F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:96:7c:24:8e:70:a8:10:f3:b2:10:83:46:78:
                    6f:31:54:1b:1e:b7:2e:36:59:fb:56:f9:ac:a5:14:
                    6e:5e:23:94:ac:6c:fe:60:8f:d7:b1:cb:4d:80:08:
                    32:45:18:6e:66:7b:9c:05:ae:99:92:25:f8:08:dc:
                    1c:e9:08:d4:ef:7d:01:06:94:4f:5a:ed:e3:35:96:
                    9f:e0:cd:ae:34:65:c2:fe:cd:07:51:d1:6e:47:a5:
                    49:4c:4e:47:58:e1:cc:7a:f0:73:eb:75:cf:07:bb:
                    43:b1:89:9d:2e:39:b2:34:96:fd:2d:f8:67:c1:92:
                    ab:e8:42:f3:92:16:d5:9e:3b:fe:e6:97:66:9b:a2:
                    88:9c:d6:b3:ba:e0:74:7a:1b:9c:1b:2f:f7:de:05:
                    e5:7c:9b:e5:58:73:6d:18:c3:f3:4f:22:56:cc:37:
                    30:93:92:97:09:51:10:6d:ab:94:56:22:63:2a:0e:
                    38:ea:db:c2:af:d1:5c:31:bd:f6:bf:12:55:86:6b:
                    ca:eb:65:f8:33:d0:37:e1:c1:70:be:f1:75:e7:c4:
                    56:89:d0:eb:95:dd:f9:4e:0b:89:f7:f1:1d:c1:b6:
                    e3:10:87:b7:14:c7:9a:da:1d:27:8a:7f:ea:32:b0:
                    0f:b9:3b:c5:7d:e3:23:c5:44:08:1e:80:f7:1f:da:
                    ce:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A1:9B:66:2B:00:CD:79:C9:98:59:58:99:86:1F:1B:E1:61:C2:F2
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/FaGbZisAzXnJmFlYmYYfG-FhwvI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.112.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:ec:48:e2:e7:fa:57:96:d1:5a:94:17:50:7f:8f:e4:44:aa:
         76:30:2f:a9:5d:82:e6:26:84:72:28:46:e7:9e:0d:4f:5a:5d:
         16:0a:d3:d6:c9:26:77:88:8f:8f:53:ca:d1:ba:28:25:d0:50:
         a4:75:93:da:a1:42:91:c6:14:f8:53:32:e4:7f:b2:c5:64:11:
         ca:bd:95:2f:37:d2:33:c9:79:c9:a8:a4:cc:cb:49:99:f5:af:
         95:35:07:76:d4:03:a6:1c:73:3b:ef:bf:38:3d:d8:ef:c4:cb:
         a5:5d:6d:89:0b:75:34:72:4c:fc:4e:eb:34:f1:78:c1:3e:4c:
         6b:0a:fe:58:36:44:7e:67:1d:00:1a:4d:c3:37:f4:28:e1:69:
         54:26:fe:d4:b2:b0:0b:d0:53:ff:9a:85:2c:b3:f4:26:07:6d:
         8a:92:5d:cc:b7:b8:83:08:73:57:e0:76:67:0a:5c:8b:e0:18:
         75:e7:86:0a:63:e6:2e:25:3d:30:a5:01:5c:65:89:75:eb:e1:
         4c:4f:05:72:40:32:cd:c6:43:91:a7:20:c7:15:36:5c:d0:22:
         17:a1:26:8e:a0:a5:a2:e5:0c:4d:3e:40:df:de:c4:6d:44:87:
         fc:0e:ed:ed:24:78:08:21:a5:92:d0:41:15:f6:7b:b5:ed:2d:
         03:15:be:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org