Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/MCBVriK1umcB0LBTJhad_G_g3Xc.roa
File:                     MCBVriK1umcB0LBTJhad_G_g3Xc.roa (raw, json)
Hash identifier:          J7KcAZuKC1dymY77ccDto7RHtaZZjARvFw3bVCTOXwc=
Subject key identifier:   30:20:55:AE:22:B5:BA:67:01:D0:B0:53:26:16:9D:FC:6F:E0:DD:77
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03CD
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/MCBVriK1umcB0LBTJhad_G_g3Xc.roa
Signing time:             Sun 01 May 2022 01:32:58 +0000
ROA not before:           Sun 01 May 2022 01:32:58 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        42.125.243.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 973 (0x3cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:58 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=302055AE22B5BA6701D0B05326169DFC6FE0DD77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:07:e2:62:3a:3f:29:48:40:5f:92:22:4d:ce:
                    22:a2:c5:c8:5b:75:3d:a2:30:02:5d:54:bd:25:aa:
                    6b:e9:7d:ba:a1:a2:08:e5:71:6a:33:09:11:44:ae:
                    b8:b4:f2:09:17:34:5c:0c:87:13:2c:17:f4:f2:0f:
                    37:68:bc:ba:da:a3:49:63:02:7c:19:60:1a:f2:0a:
                    9b:28:29:ea:1e:13:d0:56:e3:4a:73:0c:55:fc:1f:
                    e0:07:08:48:2c:dc:a5:f7:08:3a:6d:28:0f:ed:b9:
                    c9:dd:16:c7:5a:a6:da:7f:f8:eb:06:8e:66:d8:5d:
                    02:18:50:dc:de:fc:98:88:03:2c:82:b1:fd:7d:a3:
                    1c:e8:be:15:53:02:b7:a7:fd:f0:b6:2c:e0:13:f1:
                    a4:4e:e7:f7:7e:4d:9c:9b:9f:2d:07:ec:8a:06:26:
                    ee:4f:90:96:48:59:06:ab:1e:4b:77:56:87:93:69:
                    e3:d3:98:c9:93:e6:74:00:e3:c4:e6:0b:23:26:f0:
                    d3:88:e2:3b:97:da:c5:d0:ac:0a:ea:f3:cf:dd:d3:
                    68:b2:ba:fc:32:de:ca:07:b4:e7:fc:4e:7f:65:41:
                    8a:5f:95:78:4a:e3:4c:95:04:9b:5d:fb:ba:47:4e:
                    25:86:ef:85:6f:01:c2:fc:af:2f:d8:e0:ab:82:90:
                    9e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:20:55:AE:22:B5:BA:67:01:D0:B0:53:26:16:9D:FC:6F:E0:DD:77
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/MCBVriK1umcB0LBTJhad_G_g3Xc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:e6:67:31:33:03:28:92:96:fc:d4:ab:14:e0:ad:01:81:5d:
         fb:06:c3:a9:d2:f5:ce:95:93:5d:45:dc:74:7d:64:51:eb:4f:
         30:b1:f6:d7:51:d2:81:97:60:9f:d7:bf:d2:88:0e:80:a1:89:
         6f:5d:56:46:0e:42:c6:e8:82:37:66:74:03:99:4b:c8:1b:d2:
         8c:74:7a:32:e3:37:25:f5:d7:6f:42:ee:71:08:07:26:2c:ed:
         e7:c7:b4:60:4f:52:dc:2e:8e:cb:2a:ea:d0:b5:81:f2:a9:44:
         34:70:2d:84:3d:61:81:e3:6b:96:19:18:33:ba:b3:7b:5f:a9:
         ce:05:b4:a5:e8:bd:92:92:78:f4:4e:e2:97:b1:d0:4e:b3:e3:
         bc:be:0c:d8:f7:93:e6:46:5c:f3:59:a5:fe:e9:d6:53:15:9f:
         4a:45:65:ec:ac:c3:7c:fa:95:9f:4d:25:74:01:70:8a:63:f4:
         00:00:8d:b2:27:9b:78:f1:23:65:b7:b5:8d:17:f0:da:7f:d9:
         87:d9:4f:36:9d:e2:a0:1e:09:02:42:d6:b2:44:1a:26:e9:e9:
         4e:58:58:36:3b:5c:33:c2:52:35:61:f2:7c:8c:ea:4f:89:40:
         ea:f3:b6:0e:52:92:7a:75:23:ad:ea:59:92:49:09:1e:84:a5:
         fd:ae:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org