Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/HbuBoB9aVLfDhPCQDUxyc8Qqhmg.roa
File:                     HbuBoB9aVLfDhPCQDUxyc8Qqhmg.roa (raw, json)
Hash identifier:          y0CWWvRl7wOkpU7qGNEiSg5mQK56I6AZHo6oAXA3IuI=
Subject key identifier:   1D:BB:81:A0:1F:5A:54:B7:C3:84:F0:90:0D:4C:72:73:C4:2A:86:68
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0475
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/HbuBoB9aVLfDhPCQDUxyc8Qqhmg.roa
Signing time:             Thu 13 Apr 2023 09:59:49 +0000
ROA not before:           Thu 13 Apr 2023 09:59:49 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        61.211.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1141 (0x475)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:59:49 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=1DBB81A01F5A54B7C384F0900D4C7273C42A8668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9e:af:c3:84:bd:55:55:95:97:0e:a5:88:97:
                    95:e4:3e:bc:85:1b:01:e3:5f:db:5d:4a:87:3c:c5:
                    fb:af:d7:b0:25:e4:23:b0:6f:fc:01:e0:6d:aa:50:
                    b9:58:e1:85:c2:dd:d9:e8:6e:8a:c1:86:da:45:61:
                    4e:30:08:43:8d:68:6c:04:66:17:b0:eb:11:80:b1:
                    9f:32:47:8b:ba:46:1b:47:e6:2d:32:ac:5c:e8:34:
                    5f:66:f3:6a:96:db:5c:0f:75:1a:9c:c0:ec:16:ae:
                    09:c5:ca:d2:75:ac:10:c5:1c:ed:76:fe:fb:7f:7e:
                    70:17:d9:63:ff:ed:25:05:5c:72:00:5a:41:12:90:
                    b4:a1:e7:bb:b9:1b:65:ce:3c:bf:b4:63:b0:d8:37:
                    4a:1a:fc:1c:58:86:2c:96:14:f2:f4:00:ab:8b:57:
                    52:ed:fb:95:05:57:63:52:a0:0a:c1:42:fb:95:ca:
                    86:f6:60:d1:f6:8c:b4:5c:90:41:e0:b8:e7:66:bc:
                    ab:15:62:97:07:11:f6:13:80:43:25:c1:fe:6b:67:
                    12:eb:26:11:4d:02:c2:37:3b:6d:35:bb:de:d9:9f:
                    50:62:07:d4:43:12:a5:85:8c:1a:fc:80:17:54:02:
                    d0:64:00:b6:f2:b5:89:fa:8e:38:33:3b:f5:30:a6:
                    bc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BB:81:A0:1F:5A:54:B7:C3:84:F0:90:0D:4C:72:73:C4:2A:86:68
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/HbuBoB9aVLfDhPCQDUxyc8Qqhmg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ba:5c:fe:90:e5:32:41:a5:0b:fc:12:d3:42:32:4f:fd:35:d2:
         f6:88:22:81:38:db:72:62:a4:d9:0a:e2:f4:37:de:c7:33:d1:
         9c:3f:ad:30:83:a3:e3:a3:bc:55:dc:c0:10:f0:40:d3:db:0c:
         ab:65:85:a8:3a:37:52:a6:d1:64:dc:15:0a:b0:22:20:c5:a4:
         b4:73:11:95:ac:69:5d:7c:8a:1f:1f:2d:1f:dd:ce:7d:43:d1:
         5d:b7:39:2a:03:99:25:72:54:94:79:84:0d:fa:fd:41:02:16:
         6f:70:4e:a9:78:4c:61:55:40:ec:e1:da:cc:68:dd:dc:b8:81:
         67:6a:72:19:0f:78:fe:3e:e6:1c:95:d9:37:9f:ed:aa:80:7b:
         35:7a:6e:4d:dc:af:51:7a:94:32:40:b9:65:87:19:21:3e:87:
         c3:17:5d:6b:95:d5:a3:07:9a:c6:ef:10:4c:71:da:b9:d6:25:
         70:45:9b:a6:c6:67:41:96:04:88:7a:93:5b:82:a2:65:3e:c1:
         0d:f6:a3:3a:62:f6:11:35:a0:64:0e:ce:48:5b:b6:dd:00:fb:
         6a:1f:f4:cf:40:c2:a0:76:7d:a5:b6:e0:53:7a:ab:6d:b0:3a:
         58:c9:e9:ff:5a:4d:31:54:52:08:af:f6:eb:82:f8:1d:6a:f9:
         15:23:00:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org