Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/IntblPkkk0mWpkqmI8xaMMsv9HQ.roa
File:                     IntblPkkk0mWpkqmI8xaMMsv9HQ.roa (raw, json)
Hash identifier:          N7v1grMbUtjOXnTR+CaeCANSP7hgmfCl+vKiIkRtkJ4=
Subject key identifier:   22:7B:5B:94:F9:24:93:49:96:A6:4A:A6:23:CC:5A:30:CB:2F:F4:74
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0394
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/IntblPkkk0mWpkqmI8xaMMsv9HQ.roa
Signing time:             Sun 01 May 2022 01:29:48 +0000
ROA not before:           Sun 01 May 2022 01:29:48 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        42.125.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 916 (0x394)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:48 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=227B5B94F924934996A64AA623CC5A30CB2FF474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6d:89:2e:a5:ff:21:78:89:b7:de:8b:99:e7:
                    6a:ae:16:53:bd:65:24:a3:25:e9:5b:3d:6b:8d:c3:
                    6c:b4:17:6b:bb:a6:e4:e4:67:f8:f0:8f:2b:92:34:
                    9f:f3:0e:81:51:3f:1c:7e:fb:4a:3f:2c:df:b1:f8:
                    ad:fa:85:5a:39:be:98:60:98:50:71:07:a3:25:e0:
                    e7:3f:b5:ad:cc:f4:73:78:3d:17:38:ba:5d:cf:f6:
                    1b:df:cc:94:9c:26:45:74:7a:2a:93:c5:28:31:73:
                    45:59:1b:33:fd:67:90:77:1c:9d:d9:5b:c4:7c:3e:
                    1d:6b:02:78:55:cf:f7:ff:69:97:2f:ba:fc:af:e3:
                    f2:13:46:d9:b6:3f:c6:f6:e2:48:fa:a9:47:cc:1d:
                    9f:47:2a:9f:b3:41:2b:1d:34:06:a1:af:9c:7d:fd:
                    f4:0e:f7:fd:3e:53:cf:89:d1:32:95:97:ac:dd:7f:
                    01:ed:c4:b1:15:8e:41:9b:e4:c0:2a:dd:34:d0:48:
                    05:34:72:e0:1e:b2:f1:73:a8:09:25:d7:81:f1:c2:
                    e1:4d:9b:27:3a:ba:46:e3:36:3f:02:02:6e:13:34:
                    b0:c4:3a:6a:1c:be:e2:23:91:d2:a9:14:46:bd:ef:
                    4c:36:5f:f6:12:69:ca:23:f6:86:87:24:c3:5f:cd:
                    75:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7B:5B:94:F9:24:93:49:96:A6:4A:A6:23:CC:5A:30:CB:2F:F4:74
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/IntblPkkk0mWpkqmI8xaMMsv9HQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:4e:8b:72:5e:45:93:be:97:dc:e9:1d:58:81:76:42:8f:9e:
         ab:ad:e0:32:fd:25:a0:a2:77:63:60:c3:89:f9:c4:d3:23:c7:
         11:09:f3:eb:28:85:42:0d:d8:73:d2:b8:0a:99:d1:9a:98:43:
         41:0c:77:99:db:c1:43:76:cd:67:aa:98:7e:66:a4:8c:4b:ac:
         3e:6d:90:40:31:39:07:e0:e4:d7:06:0d:98:d0:f9:d2:74:e4:
         ba:5a:8c:09:8c:b8:cb:5f:51:7f:c3:56:37:38:48:ca:65:b8:
         98:7c:23:44:1a:a9:d3:f7:d9:e0:40:82:85:b1:36:29:9e:2d:
         6a:09:40:6d:2c:c2:29:95:06:2a:53:4f:09:ef:31:35:65:29:
         8d:f6:26:c9:01:3b:06:dc:b9:08:c9:b1:b4:a4:31:1e:cd:47:
         2d:a5:37:52:d8:16:f0:ad:27:e6:59:40:aa:dc:60:72:8c:45:
         ed:50:c4:a8:f3:03:c6:ca:69:2e:3a:0f:88:29:be:c1:8b:fe:
         1f:6c:c4:33:c7:10:15:c8:1d:88:d1:b8:46:e1:b3:7b:53:1d:
         ed:13:de:7a:b8:f5:9b:cb:fa:43:4a:de:a5:70:a8:0c:e4:8b:
         a2:c3:93:14:e2:98:be:15:05:30:cc:65:b0:0f:f2:57:57:ac:
         df:8a:8f:20
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA5QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMjA1MDEw
MTI5NDhaFw0yMzA0MjcwOTUyMzRaMDMxMTAvBgNVBAMTKDIyN0I1Qjk0RjkyNDkz
NDk5NkE2NEFBNjIzQ0M1QTMwQ0IyRkY0NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8bYkupf8heIm33ouZ52quFlO9ZSSjJelbPWuNw2y0F2u7puTk
Z/jwjyuSNJ/zDoFRPxx++0o/LN+x+K36hVo5vphgmFBxB6Ml4Oc/ta3M9HN4PRc4
ul3P9hvfzJScJkV0eiqTxSgxc0VZGzP9Z5B3HJ3ZW8R8Ph1rAnhVz/f/aZcvuvyv
4/ITRtm2P8b24kj6qUfMHZ9HKp+zQSsdNAahr5x9/fQO9/0+U8+J0TKVl6zdfwHt
xLEVjkGb5MAq3TTQSAU0cuAesvFzqAkl14HxwuFNmyc6ukbjNj8CAm4TNLDEOmoc
vuIjkdKpFEa970w2X/YSacoj9oaHJMNfzXWXAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUIntblPkkk0mWpkqmI8xaMMsv9HQwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L0ludGJsUGtrazBtV3BrcW1JOHhhTU1zdjlIUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAqffUwDQYJKoZIhvcNAQELBQADggEBAHpOi3JeRZO+l9zpHViBdkKPnqut
4DL9JaCid2Ngw4n5xNMjxxEJ8+sohUIN2HPSuAqZ0ZqYQ0EMd5nbwUN2zWeqmH5m
pIxLrD5tkEAxOQfg5NcGDZjQ+dJ05LpajAmMuMtfUX/DVjc4SMpluJh8I0QaqdP3
2eBAgoWxNimeLWoJQG0swimVBipTTwnvMTVlKY32JskBOwbcuQjJsbSkMR7NRy2l
N1LYFvCtJ+ZZQKrcYHKMRe1QxKjzA8bKaS46D4gpvsGL/h9sxDPHEBXIHYjRuEbh
s3tTHe0T3nq49ZvL+kNK3qVwqAzki6LDkxTimL4VBTDMZbAP8ldXrN+KjyA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org