Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/IpCHL23ltGbTibjS6HOk5ZArzkA.roa
File:                     IpCHL23ltGbTibjS6HOk5ZArzkA.roa (raw, json)
Hash identifier:          CAgQNgtUpoY0oHDoJHAl2cv8rNLRFLCh4RPZF0AerUY=
Subject key identifier:   22:90:87:2F:6D:E5:B4:66:D3:89:B8:D2:E8:73:A4:E5:90:2B:CE:40
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       042A
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/IpCHL23ltGbTibjS6HOk5ZArzkA.roa
Signing time:             Thu 13 Apr 2023 09:55:21 +0000
ROA not before:           Thu 13 Apr 2023 09:55:21 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        42.125.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1066 (0x42a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:55:21 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=2290872F6DE5B466D389B8D2E873A4E5902BCE40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:69:78:f5:44:54:eb:8b:f1:71:54:bf:29:28:
                    14:44:58:1a:7e:64:f3:c2:3e:f5:f2:9a:35:ac:12:
                    73:58:75:87:c6:20:be:05:3c:6d:f8:4a:6a:fa:d7:
                    60:92:a9:e6:14:56:17:0d:6e:25:bf:87:dc:68:b4:
                    7c:fb:a1:b6:d7:a8:f7:af:da:07:88:e3:8a:c9:4f:
                    5d:2e:96:b5:73:64:20:01:e4:3e:a5:9f:08:fa:14:
                    92:0e:10:8e:42:56:95:f3:f6:6e:b7:e8:ee:84:40:
                    4c:90:0a:f1:e5:3a:e2:3c:6c:ae:b7:1e:e3:47:5a:
                    12:60:77:57:ab:5a:65:9c:73:23:13:15:1e:81:53:
                    ca:1e:ff:82:de:5d:82:c0:f3:19:4f:50:7a:c0:38:
                    31:a8:aa:bd:01:24:d4:c7:de:4f:82:35:cd:42:69:
                    03:b0:53:cf:67:63:78:33:13:a9:97:8b:18:d6:bd:
                    6f:cf:3b:a7:00:a6:80:ee:a0:49:11:84:56:78:b5:
                    ee:e2:d3:ff:49:70:de:da:28:f6:52:69:06:77:09:
                    d3:19:2e:8b:f9:a7:4b:08:4b:1d:ae:78:c5:65:f8:
                    25:4d:ed:2f:58:e4:b7:4f:be:7c:71:60:23:c5:eb:
                    24:ac:18:82:7f:08:92:ce:a6:d7:dc:a6:6c:39:41:
                    51:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:90:87:2F:6D:E5:B4:66:D3:89:B8:D2:E8:73:A4:E5:90:2B:CE:40
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/IpCHL23ltGbTibjS6HOk5ZArzkA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:d1:11:6d:2f:f4:8a:a7:d8:04:8b:54:67:80:a7:d7:46:ef:
         8a:ee:55:17:44:77:28:b4:d1:44:89:e6:25:d6:6e:46:14:2c:
         59:e7:a7:9b:a6:bb:d4:82:d0:9c:78:bf:47:94:56:a4:b3:52:
         6e:5e:23:86:85:6e:91:1a:a9:42:7d:9d:8c:a6:89:5e:09:d6:
         6e:e2:f6:82:a4:cf:75:85:c0:58:35:db:f2:d1:33:cd:0f:e4:
         4b:0d:4b:c2:e1:64:78:b4:e2:18:32:d6:b7:05:eb:e6:d5:9e:
         cc:5e:42:08:b0:e2:99:fd:32:2d:fb:96:97:7d:a5:d2:f3:f0:
         ba:22:b7:be:cd:18:ff:1f:74:fd:13:41:aa:71:e2:4a:97:33:
         7e:cf:83:f1:48:9c:20:05:33:60:10:ab:30:d5:26:ce:19:04:
         cb:89:98:84:34:bd:21:5c:4b:c6:92:bc:17:6a:b6:04:93:76:
         5a:52:3e:65:cc:b3:df:b7:10:c5:0b:2c:1e:4d:c2:cf:4a:12:
         ec:0c:a8:b3:08:19:96:b2:dd:f0:19:b9:31:d0:7e:48:8a:7b:
         db:14:59:39:66:ab:5e:22:09:d0:3a:3e:06:d5:7d:2d:9a:e8:
         9d:db:f1:20:60:2a:59:92:a2:3f:a2:1f:5a:d6:e9:a7:a5:5c:
         83:f0:69:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org