Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/HLQyxJhdhmPVbg3dqOLkjbu2kYg.roa
File:                     HLQyxJhdhmPVbg3dqOLkjbu2kYg.roa (raw, json)
Hash identifier:          QLas06e+NwY3DK042tUMFTHkLCH/8Q63UHUDYuSZtVg=
Subject key identifier:   1C:B4:32:C4:98:5D:86:63:D5:6E:0D:DD:A8:E2:E4:8D:BB:B6:91:88
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0388
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/HLQyxJhdhmPVbg3dqOLkjbu2kYg.roa
Signing time:             Sun 01 May 2022 01:29:43 +0000
ROA not before:           Sun 01 May 2022 01:29:43 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        124.47.192.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 904 (0x388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:43 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=1CB432C4985D8663D56E0DDDA8E2E48DBBB69188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2d:31:dd:07:ab:f6:77:41:b0:dd:c8:bd:f8:
                    29:c5:b6:af:b9:8a:c7:70:b3:38:a8:ee:9b:b6:39:
                    21:35:31:13:a7:46:09:15:64:4e:04:1e:18:90:f8:
                    16:f5:cc:db:01:d2:dc:d9:66:59:65:29:f8:d2:84:
                    1e:82:47:5f:c0:81:ae:9d:60:72:84:b1:fd:5b:fe:
                    0e:d1:15:57:a8:70:5f:e7:dc:ec:f4:4f:b0:45:1e:
                    26:f0:d0:21:4f:1e:f6:86:c8:f4:8d:a6:13:28:53:
                    33:75:81:69:53:90:b7:46:86:9b:e4:8d:70:7e:c3:
                    a8:f8:4c:64:9c:5a:e4:53:33:2d:82:7f:67:e8:6b:
                    e1:96:07:04:6f:18:6b:ec:5b:26:76:58:a6:e7:f3:
                    a8:99:02:61:0e:89:ee:e9:35:07:7f:7f:65:04:53:
                    2a:a3:e7:19:d5:2b:a8:3c:4b:1c:4a:b1:84:49:72:
                    18:eb:f7:d3:ee:21:80:d4:d8:24:98:6d:74:a5:c8:
                    5b:db:72:f9:5e:33:5a:ce:5a:21:ed:1b:9e:ab:5b:
                    a3:ff:5a:a5:30:55:a6:91:bb:a1:f6:16:30:0c:dd:
                    c4:1d:e2:a0:b7:ab:7b:ee:d5:a3:1b:ef:1b:ca:a8:
                    38:54:35:66:02:6d:93:9c:ff:26:64:d5:ae:25:50:
                    5c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B4:32:C4:98:5D:86:63:D5:6E:0D:DD:A8:E2:E4:8D:BB:B6:91:88
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/HLQyxJhdhmPVbg3dqOLkjbu2kYg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.47.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         19:ed:97:49:a9:e7:35:0a:8d:98:9f:84:8b:b4:44:e6:aa:32:
         90:02:c0:f1:00:3f:b9:39:d3:5a:2e:14:fc:dc:e2:1f:f6:a0:
         4f:cf:76:bd:c5:e5:14:e7:89:c4:12:f8:72:d6:41:e0:d2:50:
         a9:1d:54:ac:08:a2:40:0b:da:1d:a0:0e:35:5b:13:42:84:6f:
         40:57:5d:02:37:9a:d7:76:f4:46:72:dc:f2:f3:da:37:21:da:
         01:b8:ee:1f:c2:cd:50:f6:7d:bd:9f:64:1d:c3:ca:b9:9a:0e:
         53:35:39:3e:f8:83:53:a1:5d:29:1c:82:72:8c:f9:56:60:30:
         16:5c:c5:2b:86:9c:f2:2b:4b:4a:6e:d3:bd:4e:9a:01:13:b3:
         db:1c:48:9f:24:2f:86:71:f9:e7:56:03:15:fb:eb:17:df:d2:
         9c:cf:05:cb:b7:23:7f:2c:4e:a7:52:4e:89:ca:ff:cf:1a:dc:
         13:10:07:16:18:0c:72:63:1a:d4:9f:16:ad:6b:43:00:98:dc:
         2e:aa:4c:a3:e6:0e:a9:2c:dd:66:a8:2d:3d:11:bf:74:10:da:
         07:2c:7c:03:ff:c6:cc:4e:fb:04:a2:d5:94:37:f8:e4:2f:87:
         c5:e9:57:0f:f1:c3:51:1e:16:d1:5f:2d:e2:c4:27:8e:67:f2:
         9c:3f:d0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org