Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/HK5LvJ1O9ESduyiUed7ysMNzMtE.roa
File:                     HK5LvJ1O9ESduyiUed7ysMNzMtE.roa (raw, json)
Hash identifier:          MnH7ir1gSkvzs99M7XnLahC2+G7pitLx7nX/oGlnx4Y=
Subject key identifier:   1C:AE:4B:BC:9D:4E:F4:44:9D:BB:28:94:79:DE:F2:B0:C3:73:32:D1
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03DE
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/HK5LvJ1O9ESduyiUed7ysMNzMtE.roa
Signing time:             Sun 01 May 2022 01:33:03 +0000
ROA not before:           Sun 01 May 2022 01:33:03 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        120.137.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 990 (0x3de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:33:03 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=1CAE4BBC9D4EF4449DBB289479DEF2B0C37332D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:48:b7:9f:1a:9b:8b:78:e7:05:8b:7a:f7:ff:
                    f3:63:07:16:a2:6c:f9:44:e7:7b:0c:1b:45:18:d6:
                    cf:66:37:74:6f:23:fa:05:73:33:97:f7:38:a9:a1:
                    72:91:4e:4b:88:6f:18:fa:17:17:4b:59:c8:b7:09:
                    ca:36:4c:b7:90:b5:d1:76:91:00:9c:23:57:1d:ad:
                    6d:05:36:c4:f7:f3:b5:63:af:6c:9a:f9:cf:94:f6:
                    03:0a:b0:96:a9:a7:2d:4c:9b:8b:8a:6e:e3:fd:a1:
                    33:5a:8e:45:01:c5:d7:23:29:7a:3c:12:57:5c:52:
                    1c:f8:29:f2:44:7d:89:ec:d9:0f:c9:ce:aa:a3:69:
                    d2:97:29:7e:df:5b:5e:70:1f:b5:4d:88:19:27:f8:
                    c7:b7:67:d5:e1:a5:7a:07:4e:d2:a1:e9:07:ce:01:
                    0a:32:e5:98:65:e8:30:0d:ae:60:48:0f:e1:6c:e5:
                    8a:51:fd:c1:59:0d:76:9f:87:85:99:a1:14:d3:dc:
                    74:d6:ef:88:1d:d9:c8:5b:de:54:8d:b9:a1:fd:3b:
                    d1:a6:00:ce:dd:4f:22:2c:a5:0c:11:eb:d2:84:4e:
                    f8:19:63:a4:eb:f7:27:96:83:54:eb:3a:bf:f8:00:
                    4b:bd:94:3b:28:ca:03:cb:4c:e5:f7:82:46:f0:69:
                    78:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AE:4B:BC:9D:4E:F4:44:9D:BB:28:94:79:DE:F2:B0:C3:73:32:D1
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/HK5LvJ1O9ESduyiUed7ysMNzMtE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.137.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         74:54:9a:cf:47:da:26:7d:cf:ac:62:bd:11:da:7d:af:2c:b2:
         44:4a:45:19:99:32:0c:4a:bc:ab:4f:58:46:e8:2b:c5:7c:2a:
         4a:2d:c1:31:e3:f4:89:1c:f7:bb:64:c5:ef:8b:e8:4e:a6:1b:
         19:3b:9e:96:6d:60:c9:bd:71:f0:a9:5c:ef:97:65:91:24:b1:
         3d:d3:d5:b9:41:07:7e:18:75:92:75:13:29:de:f1:d5:aa:5f:
         2f:43:0a:c1:6f:8f:11:ee:e6:3f:ce:88:9d:cf:03:47:a8:82:
         8f:b9:09:77:9a:a2:c9:11:5a:43:1f:56:82:07:40:26:4f:5b:
         d6:51:d7:63:43:a2:81:26:87:34:75:5b:6f:69:cf:e1:bc:0c:
         2c:88:ce:c8:22:d1:44:b4:1a:ab:de:fa:6b:e6:f0:94:99:ec:
         cb:8a:22:20:73:ec:a5:5a:b2:ca:4b:c6:f9:d7:0c:83:c5:22:
         cb:63:4f:14:33:97:b5:11:2a:11:58:7c:ab:cf:d5:3c:1f:4d:
         57:7f:27:87:4c:e2:77:a2:a2:d6:a1:f6:95:59:3a:f5:e1:9f:
         43:7d:5e:80:0a:ea:ca:f4:60:af:93:a1:58:19:a6:19:b9:52:
         94:8a:bd:97:91:f9:d4:00:c9:e0:b1:2c:16:b9:0d:81:1b:63:
         5e:bd:6e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org