Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/J3xhMasmOAzq9KM_8RHKZrxAfMU.roa
File:                     J3xhMasmOAzq9KM_8RHKZrxAfMU.roa (raw, json)
Hash identifier:          L5yo6TrE2bp097+WfoEG/O1yFd3mryCaec681oGorDY=
Subject key identifier:   27:7C:61:31:AB:26:38:0C:EA:F4:A3:3F:F1:11:CA:66:BC:40:7C:C5
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0406
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/J3xhMasmOAzq9KM_8RHKZrxAfMU.roa
Signing time:             Thu 13 Apr 2023 09:52:15 +0000
ROA not before:           Thu 13 Apr 2023 09:52:15 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        219.106.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1030 (0x406)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:52:15 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=277C6131AB26380CEAF4A33FF111CA66BC407CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:10:84:59:17:5d:88:2d:39:f7:71:b9:dc:4b:
                    fc:de:2a:cf:e7:21:f6:12:37:f1:d9:f9:38:a1:14:
                    2b:51:a0:26:72:a4:41:ab:ef:45:91:bf:f1:fd:95:
                    f4:06:51:d3:01:cb:87:70:61:ec:9a:ae:7e:b5:9f:
                    76:ed:f0:ca:ee:84:1b:bc:5c:fd:26:85:bd:e8:6d:
                    34:37:ab:2c:cc:8c:b8:44:f2:a2:07:ed:b9:f6:2d:
                    f7:1a:98:4b:fe:58:a1:09:a0:88:de:fd:44:f7:14:
                    f7:be:64:dc:5c:ca:74:5b:ec:72:8b:73:f7:64:bc:
                    ed:0b:dc:72:43:71:84:e6:76:e6:ae:62:b8:0b:1c:
                    de:fa:4b:e8:04:55:c5:15:ed:fb:69:5e:f3:db:bd:
                    a0:4f:af:77:3b:66:58:44:ea:3e:73:a2:d3:69:1e:
                    8b:8f:9d:b1:34:06:ce:41:66:af:60:de:0a:a3:a8:
                    2e:ed:4b:cc:2c:74:8b:5e:c1:d6:61:3a:88:3d:79:
                    0b:81:a8:12:09:40:3a:d7:0d:71:b9:a8:71:f2:0b:
                    d9:fc:61:4b:0d:cd:cb:93:2d:0a:b3:ad:5e:2b:14:
                    70:6f:c5:8b:ba:3b:dc:e8:e7:a1:39:21:88:f0:5b:
                    d0:67:bc:ff:6c:3d:27:b7:12:84:5d:7d:ed:3a:56:
                    b8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7C:61:31:AB:26:38:0C:EA:F4:A3:3F:F1:11:CA:66:BC:40:7C:C5
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/J3xhMasmOAzq9KM_8RHKZrxAfMU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.106.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0c:87:5f:9c:86:43:b2:17:3d:08:06:25:f4:93:cc:20:eb:df:
         29:10:80:96:5d:62:1a:15:6f:77:b4:aa:ff:9f:aa:e7:d5:0c:
         ba:60:75:1e:dd:91:fb:33:da:f3:bf:33:ef:a6:4f:3a:68:ed:
         75:22:32:31:c8:4e:71:71:67:02:6f:7f:91:2f:08:08:ab:3f:
         18:e2:fa:b8:4f:42:a7:da:8f:39:9e:9a:d5:61:c0:16:5a:2f:
         1a:c3:1f:43:a7:1b:b6:d2:35:90:18:73:52:21:56:c4:89:23:
         5b:60:d3:a7:df:86:c3:c0:0c:0f:89:5a:8a:8c:f5:3d:33:f4:
         97:1e:b8:67:0b:f0:11:ca:e6:3a:c7:31:56:43:57:e9:2c:68:
         0a:4e:e3:a5:57:2a:45:03:02:b2:87:21:29:9f:6c:69:93:4e:
         c9:23:27:5b:fd:56:09:9b:63:96:d1:29:f6:66:04:05:1b:72:
         8e:e1:92:43:0b:83:2c:86:5b:b6:ed:28:f2:09:76:bb:60:ae:
         1a:5b:f9:33:f9:5d:63:df:1f:66:34:fb:ae:92:8f:ac:d8:5b:
         92:84:c9:60:f0:1d:4c:62:cb:90:a9:66:76:e9:7e:89:b6:44:
         60:bc:0c:d3:71:c5:26:f5:b7:74:5e:59:71:7d:27:60:e8:8e:
         7f:db:70:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org