Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/G8qjoBGTocdQ3xMlLyE2BpZKkJc.roa
File:                     G8qjoBGTocdQ3xMlLyE2BpZKkJc.roa (raw, json)
Hash identifier:          Bbf4q2Ryyw7AR8kHktkAj150kBoxartStykSdxagndA=
Subject key identifier:   1B:CA:A3:A0:11:93:A1:C7:50:DF:13:25:2F:21:36:06:96:4A:90:97
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       038E
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/G8qjoBGTocdQ3xMlLyE2BpZKkJc.roa
Signing time:             Sun 01 May 2022 01:29:46 +0000
ROA not before:           Sun 01 May 2022 01:29:46 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        219.96.16.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910 (0x38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:46 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=1BCAA3A01193A1C750DF13252F213606964A9097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:35:c8:6c:49:73:0a:30:90:b4:5a:d6:d4:ea:
                    18:2a:66:76:4d:c9:c8:95:16:32:43:76:16:f8:17:
                    65:f9:b7:09:d0:94:a9:f3:9f:55:90:57:68:7b:1c:
                    71:3a:42:df:fb:7e:09:b9:a7:0d:c4:38:53:46:a8:
                    e4:4f:6d:49:07:b0:c9:ae:b5:f6:ac:98:5e:e0:81:
                    a2:e4:05:18:ab:2a:54:1b:76:94:cb:d2:17:75:0c:
                    e2:70:2c:12:3e:3a:8f:53:21:8b:35:7c:2d:55:10:
                    df:ee:26:5a:0a:2b:34:57:8e:a3:39:22:d4:57:63:
                    7b:4b:78:9a:dc:b4:73:2a:d6:d5:2d:ba:ca:87:e4:
                    e3:7f:b5:e7:b4:92:53:d1:6d:f0:9c:09:56:c8:42:
                    51:82:21:f3:44:2c:32:f5:52:da:52:89:48:12:22:
                    ea:52:03:f1:73:cb:34:02:0e:8b:6d:ad:60:4c:90:
                    04:78:b5:8f:6c:c7:94:83:46:15:2a:38:1a:f8:bb:
                    ad:57:a2:b9:9a:7e:57:77:b9:13:a7:10:bf:8e:27:
                    40:f0:da:42:0b:f8:80:8a:71:7e:3c:1c:90:06:d2:
                    77:c4:5c:53:b5:42:94:b4:b5:46:af:d9:ec:77:88:
                    7e:b7:40:aa:aa:b6:ad:f3:2b:2a:80:19:20:a8:7c:
                    86:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CA:A3:A0:11:93:A1:C7:50:DF:13:25:2F:21:36:06:96:4A:90:97
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/G8qjoBGTocdQ3xMlLyE2BpZKkJc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6f:20:62:10:80:67:08:db:05:12:0b:73:c4:a7:d9:73:96:36:
         3d:a2:1a:4b:71:27:6e:bb:f0:4e:30:f8:0b:16:d1:b6:67:d4:
         cf:9f:3e:b5:ce:21:6b:39:c3:ab:42:23:8f:06:d5:17:74:39:
         ef:fc:74:1d:3e:ab:0b:57:05:44:f8:af:b2:be:0e:9a:8e:52:
         e2:6d:12:0c:22:2f:b8:cc:5b:cd:55:26:24:38:20:c4:55:30:
         94:3b:44:98:4e:3a:d8:5f:22:d8:9c:af:a9:3c:10:35:bd:45:
         a1:24:61:e9:fa:44:03:68:79:1b:4b:a1:1f:85:66:9c:3b:98:
         27:47:20:83:a2:02:2a:95:7d:18:4e:93:2a:12:12:d5:ba:fb:
         45:99:60:08:39:a5:f9:ef:3c:18:ee:8b:70:47:a7:b6:16:b8:
         c3:fb:15:bc:8f:ba:96:b6:db:06:e9:59:5a:e1:6d:3e:6c:4c:
         73:37:0a:b5:3f:80:d7:7b:6a:ce:ff:a1:c6:77:e8:06:e2:52:
         c2:4c:97:a8:2b:56:da:0c:21:bb:63:76:64:4e:96:79:89:f3:
         e3:35:2e:5d:b1:86:dd:19:6e:79:93:74:11:76:a3:6e:83:2a:
         5d:1d:c7:c5:f8:72:b4:2d:9d:2b:b9:6e:d6:fc:9a:9e:27:66:
         67:c4:13:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org