Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/M1AWza7CgyM78gm6QGxlOd9o83E.roa
File:                     M1AWza7CgyM78gm6QGxlOd9o83E.roa (raw, json)
Hash identifier:          k69fFZwWg38fkKPzxpQtVFGF7RvZjytVSKQhHXFSorw=
Subject key identifier:   33:50:16:CD:AE:C2:83:23:3B:F2:09:BA:40:6C:65:39:DF:68:F3:71
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       039D
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/M1AWza7CgyM78gm6QGxlOd9o83E.roa
Signing time:             Sun 01 May 2022 01:32:00 +0000
ROA not before:           Sun 01 May 2022 01:32:00 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        42.125.244.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 925 (0x39d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:00 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=335016CDAEC283233BF209BA406C6539DF68F371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d3:3a:27:22:83:5a:14:ca:76:26:e0:06:d8:
                    74:b3:bc:04:fe:f3:84:9d:af:0e:aa:26:f7:e3:84:
                    5a:18:a3:73:96:e2:58:84:ec:a9:5f:3b:78:80:b8:
                    91:06:06:58:96:f6:78:e7:e0:e3:9d:67:b4:9f:fb:
                    1a:bf:31:ae:c7:fc:dc:4d:b3:fe:17:4f:48:5b:8a:
                    cd:a8:cd:86:ba:e9:b1:6a:b5:9a:52:dd:6f:d4:5b:
                    de:5b:d6:02:4c:cd:ce:13:72:88:3b:f7:c3:31:72:
                    c8:48:e5:03:8d:23:2c:f5:01:7b:5a:54:6d:f4:51:
                    1b:4f:9a:e4:0f:75:65:98:91:fd:2b:9b:fc:e8:0a:
                    87:f7:3d:c9:8e:58:bc:7b:15:fe:bc:c0:ac:9f:50:
                    fc:ab:53:93:a4:59:a5:c4:74:fa:0b:07:c0:0c:ea:
                    12:45:c3:e4:ef:ee:0f:d8:b6:dd:df:37:76:69:2d:
                    2b:6e:38:cd:bf:fc:ff:e4:06:af:2c:69:88:71:db:
                    3f:af:74:15:e5:d4:94:f8:93:3a:dc:5e:3c:f2:11:
                    7a:c9:88:f9:57:67:2f:0c:a3:a8:ac:70:fb:ef:44:
                    39:0d:73:8d:d2:7f:a3:5f:6f:92:d7:12:e2:4c:43:
                    05:e2:52:7d:53:e6:b9:72:e0:6e:84:d2:99:0c:6c:
                    16:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:50:16:CD:AE:C2:83:23:3B:F2:09:BA:40:6C:65:39:DF:68:F3:71
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/M1AWza7CgyM78gm6QGxlOd9o83E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:cb:e0:4b:5d:36:24:80:5d:9d:e6:c7:58:6c:69:af:8e:59:
         78:f3:1a:23:8b:b4:8e:c2:fd:9d:ba:19:dd:3d:d8:bd:a7:e1:
         14:a4:82:d9:ed:f6:58:fe:60:f8:fa:35:6c:a6:40:1a:05:40:
         7f:28:12:fb:e2:29:d3:4c:b4:d2:17:f2:bc:65:85:b3:f6:17:
         28:07:af:21:3c:e5:43:5e:6d:b6:ec:1b:58:e1:fa:91:5e:26:
         6d:99:ff:97:4a:06:73:fe:1b:0f:13:0e:b0:35:1f:97:9a:91:
         4f:b8:cc:7a:bb:00:98:20:4e:ce:4b:e6:32:32:41:28:26:cf:
         ee:3f:0f:9f:54:d3:dd:b6:db:ce:b3:b7:3b:d2:f3:39:00:1b:
         ae:7e:46:a1:3e:92:d5:8a:58:ec:86:0b:f2:93:8e:33:c6:77:
         9e:65:91:65:3b:44:62:55:c7:b9:9e:25:b4:8f:6e:50:18:3e:
         56:f2:4b:99:88:cd:c3:8a:f5:3a:31:42:f3:96:95:d8:6a:42:
         de:74:2b:57:1e:d4:4b:75:6c:9b:f9:0b:bc:dc:da:03:8f:9d:
         a1:64:70:35:25:93:7e:83:16:20:77:90:00:81:d5:c8:6e:c6:
         fe:40:74:b9:d0:90:7f:62:73:c9:08:6e:4c:d6:e9:00:f7:2f:
         df:77:13:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org