Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/HHkwhoRgEP2li4_GiF0PDYiWbNk.roa
File:                     HHkwhoRgEP2li4_GiF0PDYiWbNk.roa (raw, json)
Hash identifier:          oE5QPxN7muVhj7HMwlyBQVq/YBR5PjeKZjbt+HuzDeY=
Subject key identifier:   1C:79:30:86:84:60:10:FD:A5:8B:8F:C6:88:5D:0F:0D:88:96:6C:D9
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0425
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/HHkwhoRgEP2li4_GiF0PDYiWbNk.roa
Signing time:             Thu 13 Apr 2023 09:55:19 +0000
ROA not before:           Thu 13 Apr 2023 09:55:19 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        210.146.96.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061 (0x425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:55:19 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=1C793086846010FDA58B8FC6885D0F0D88966CD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a4:7b:61:8a:30:0d:40:0a:6a:fb:67:72:74:
                    ca:65:4f:fe:3e:7c:68:42:f1:2b:b5:d8:46:22:06:
                    67:e1:e3:4d:93:0e:1a:04:fc:18:52:77:1c:c8:62:
                    67:76:e7:7c:ce:de:48:0b:3b:11:50:af:80:9b:7d:
                    fe:03:77:9c:2b:9a:f5:17:c6:2e:3b:e1:1e:92:74:
                    55:09:79:4b:8b:ed:de:0b:30:d5:d3:0c:99:86:06:
                    ec:83:f9:6e:07:34:50:fc:78:b5:aa:42:f5:f0:b2:
                    c8:53:34:05:82:5b:9e:2c:a1:8b:18:2b:02:83:6d:
                    98:d6:3d:27:79:00:a9:9a:2e:91:28:55:10:c7:4e:
                    a6:06:0c:c8:e4:d2:bd:32:4c:64:e4:10:0e:12:5c:
                    2d:45:8c:ac:f1:b6:2d:85:76:ec:18:60:16:b3:90:
                    e0:f6:60:f9:38:c1:23:da:71:8b:65:f3:a6:6f:0b:
                    2f:f3:2d:16:57:b2:88:de:67:95:71:be:21:12:4f:
                    ee:1a:2e:c2:c5:70:1a:eb:82:fb:28:e9:1a:90:0b:
                    fb:c0:6f:1a:fa:66:7e:94:81:cc:41:3d:66:21:eb:
                    b5:43:0c:e3:d0:56:d6:f5:d3:86:bd:fd:ab:6d:f9:
                    7f:81:4b:11:12:c9:c1:0d:fc:b2:6c:61:d4:f1:d6:
                    db:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:79:30:86:84:60:10:FD:A5:8B:8F:C6:88:5D:0F:0D:88:96:6C:D9
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/HHkwhoRgEP2li4_GiF0PDYiWbNk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.146.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:2d:51:ac:b7:c6:20:df:3f:7e:5e:58:aa:93:e2:ab:28:65:
         d2:72:f8:2f:22:2d:88:e4:f2:0e:e5:53:74:61:bc:04:76:02:
         29:fc:b6:c6:c4:04:b8:5a:c3:99:35:ee:88:e5:d6:45:1b:76:
         d6:f1:9e:73:44:6b:62:45:ca:59:65:16:7d:2a:b0:f9:19:77:
         1e:67:b2:75:c0:f5:d5:e8:8b:43:fa:a5:1b:24:53:84:24:e0:
         be:a3:1d:07:8f:b9:cf:48:ae:7b:59:77:7f:25:c3:f9:af:9c:
         39:d4:64:d9:f9:f5:9e:73:ef:77:f7:b8:a8:f9:f6:1e:45:1d:
         29:62:d7:c9:18:02:78:fa:37:f4:ce:d7:e7:92:43:43:34:f4:
         9b:39:5a:2f:6a:76:47:c8:7c:e8:55:82:9a:9d:97:4d:2c:61:
         22:57:63:85:87:25:a1:94:af:20:fe:d8:3c:df:85:24:c0:41:
         11:f1:e6:c5:2e:58:d3:db:aa:5b:ef:bd:80:3e:41:41:3d:11:
         d2:b2:c0:51:77:b8:d1:c2:9e:62:56:d6:61:78:68:9f:ae:97:
         d9:a1:7a:63:9e:02:e2:7b:bc:90:5a:b3:40:d1:8c:17:78:29:
         a4:1d:42:b8:49:55:c6:a0:66:f8:0f:b2:f4:fb:19:16:54:77:
         6b:94:ed:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org