Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/IGa4LCGBO30LXgffknCvWB9IC1s.roa
File:                     IGa4LCGBO30LXgffknCvWB9IC1s.roa (raw, json)
Hash identifier:          gLfTzlPpVWum/ULZXz8K4N3Wq1m7gWUm6wwcGSFtYo4=
Subject key identifier:   20:66:B8:2C:21:81:3B:7D:0B:5E:07:DF:92:70:AF:58:1F:48:0B:5B
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0375
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/IGa4LCGBO30LXgffknCvWB9IC1s.roa
Signing time:             Sun 01 May 2022 01:29:36 +0000
ROA not before:           Sun 01 May 2022 01:29:36 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        220.148.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 885 (0x375)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:36 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=2066B82C21813B7D0B5E07DF9270AF581F480B5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:37:26:4b:d2:8e:ee:8b:79:ca:92:78:a5:99:
                    34:1f:bf:c0:2e:27:28:c7:8e:db:f0:a3:e9:a5:b7:
                    a9:6f:77:b9:41:4e:04:e9:29:3e:b9:5f:41:c4:40:
                    28:6d:23:f3:77:10:6a:50:d5:ba:e5:1d:83:c6:d0:
                    f7:7d:44:01:3b:f6:52:86:d9:8b:ff:32:0f:93:2e:
                    75:03:38:05:77:83:c7:f5:73:40:d0:1d:95:a8:ee:
                    7f:8b:fd:5d:9f:d3:01:fc:15:aa:82:1c:55:c4:43:
                    c8:66:d5:18:bb:4a:39:a2:2c:6e:1c:db:b2:cc:a7:
                    f1:ed:bb:df:83:03:a3:de:99:d2:3a:15:46:f6:99:
                    91:36:37:8b:21:c0:9f:d5:a0:62:15:25:51:b4:34:
                    37:10:11:f1:63:b7:a4:ea:fc:69:0c:dc:7d:e5:73:
                    b0:d9:5b:93:d8:a4:85:58:3a:f0:84:83:8c:b6:db:
                    40:38:37:d7:61:1c:bb:4d:ce:3f:91:77:43:f2:b8:
                    09:97:80:f9:69:5f:f4:a2:cc:54:aa:1e:cf:20:a9:
                    91:11:4a:0c:be:8c:45:64:ba:f7:b5:1d:58:b8:aa:
                    f0:89:15:7f:67:9e:78:a8:4a:ae:26:9e:d7:cd:90:
                    2d:82:be:63:8c:31:74:49:5e:dc:a9:f5:9a:ed:ba:
                    e6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:66:B8:2C:21:81:3B:7D:0B:5E:07:DF:92:70:AF:58:1F:48:0B:5B
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/IGa4LCGBO30LXgffknCvWB9IC1s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c8:cd:da:d2:b8:f7:2f:5a:ec:37:35:36:a2:a6:ad:4d:34:a2:
         9f:3e:c6:1b:1d:e0:06:6b:b6:19:c4:10:65:a9:72:1d:bd:21:
         5f:60:06:12:04:12:67:ab:ca:fa:fc:33:8f:54:03:60:7b:04:
         12:88:ac:64:66:e6:18:e4:ce:e5:ac:d3:59:2d:06:ab:17:c7:
         26:6f:18:4e:b0:b1:87:cf:77:9d:4b:b2:2d:6b:98:b0:c4:55:
         30:6d:6c:8d:18:27:a7:02:52:bf:8b:6b:3b:ff:59:65:21:74:
         81:14:72:17:de:13:b8:d0:d3:c9:2f:80:33:60:9f:98:be:ff:
         34:a4:5e:4d:19:02:d5:fd:16:f6:3f:f4:d2:63:d1:b6:49:36:
         f4:86:6b:d9:35:11:5a:b7:a9:f8:3c:62:58:7c:1a:c0:74:a7:
         46:36:a3:1b:60:79:b7:04:cb:71:fd:53:ce:2a:2f:75:08:72:
         8d:e2:f2:62:6b:eb:4b:ff:6b:9b:6a:0a:1e:cd:a0:0f:1b:90:
         3b:2d:a1:d8:2e:f0:8a:2a:0f:f3:14:4c:07:88:97:d4:01:e0:
         be:b9:06:86:c8:18:7c:9c:a4:0b:da:d2:70:69:09:46:77:33:
         db:6c:99:fe:ee:70:8e:67:b3:eb:1d:19:46:46:82:51:9b:69:
         80:e6:37:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:10 2023 by rpki-client on console-fra.rpki-client.org