Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/MM-vwyZ90Esy5BeUzWcVs0nb3A4.roa
File:                     MM-vwyZ90Esy5BeUzWcVs0nb3A4.roa (raw, json)
Hash identifier:          Ob2KScE+SyxI264bXtnCk/TvnfYdQunYN6aUD55rMMo=
Subject key identifier:   30:CF:AF:C3:26:7D:D0:4B:32:E4:17:94:CD:67:15:B3:49:DB:DC:0E
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03A4
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/MM-vwyZ90Esy5BeUzWcVs0nb3A4.roa
Signing time:             Sun 01 May 2022 01:32:02 +0000
ROA not before:           Sun 01 May 2022 01:32:02 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        27.121.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932 (0x3a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:02 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=30CFAFC3267DD04B32E41794CD6715B349DBDC0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2c:35:63:c3:80:9b:36:fb:74:e1:cf:a9:75:
                    f0:fa:a3:0b:94:62:a9:9c:10:29:dd:1a:61:90:4d:
                    1d:1b:40:bf:67:31:d1:4d:70:42:6f:9e:a7:a2:71:
                    1a:4c:3c:43:31:d5:03:64:45:ff:7d:77:2e:b8:a9:
                    c9:6f:e0:bb:10:79:78:f6:7e:da:0b:2e:fe:c7:7a:
                    39:50:13:04:52:ba:9f:47:87:67:a0:ae:28:2d:5c:
                    28:f0:a0:e0:56:58:fd:73:b6:50:fe:ab:87:03:86:
                    27:e3:d4:c5:3b:8e:76:45:5b:49:eb:2b:5a:c5:cd:
                    07:21:12:a9:6d:6d:b2:86:3f:6d:4c:8b:39:1d:94:
                    78:4d:70:dd:8c:f9:a6:ad:b3:70:e7:62:ea:20:61:
                    28:46:d6:8e:6a:5d:db:36:34:94:86:c8:c8:b8:18:
                    cc:53:2e:ab:8b:c8:b5:60:46:b2:40:00:28:08:8f:
                    42:b3:ea:24:59:ed:27:5c:14:ba:95:21:6a:f7:48:
                    7a:1b:ae:4a:83:c7:84:5b:95:55:6e:d3:1e:92:35:
                    33:5e:9f:f7:e0:d2:79:97:9e:eb:4e:ac:5c:00:52:
                    58:14:15:9f:22:e4:9b:6a:7b:8f:20:3f:a3:8a:02:
                    1c:26:93:cf:ee:89:47:ed:f3:c4:0e:0d:0b:65:85:
                    76:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CF:AF:C3:26:7D:D0:4B:32:E4:17:94:CD:67:15:B3:49:DB:DC:0E
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/MM-vwyZ90Esy5BeUzWcVs0nb3A4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.121.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ca:a5:71:3b:8a:c8:14:9e:c0:a0:93:b3:c2:d8:0b:cb:eb:6d:
         62:d4:37:0f:df:75:36:f5:18:1b:6b:5a:f8:07:13:16:e8:75:
         75:38:f5:a3:98:46:aa:3a:20:2f:59:44:47:5e:85:b6:3d:27:
         18:b9:e8:e5:1e:10:ca:b7:ee:51:34:c0:f1:7c:1f:b3:b7:e5:
         cf:7d:84:86:fb:32:6e:54:cf:c3:c5:10:26:7c:99:c5:19:8e:
         d4:e7:99:95:c6:40:ea:d7:56:69:21:6c:37:32:f9:61:ef:1f:
         59:d6:78:0f:31:4b:83:b3:e9:f0:84:53:9f:3a:5f:78:ac:dd:
         10:a7:7a:70:17:9b:2c:5e:eb:bf:58:2f:a9:fe:13:f7:8c:8d:
         38:ad:69:f4:98:62:d7:83:7a:8c:c4:20:05:1c:70:f5:fd:4e:
         e0:4f:02:d7:39:ca:2c:9a:bd:50:48:f0:8b:d2:4e:b3:b9:63:
         ad:cb:15:07:57:ac:f5:d1:89:f2:b5:4b:b3:3c:47:36:57:87:
         94:49:f4:79:77:57:a9:78:0b:28:39:92:c3:30:11:18:0f:86:
         26:7b:ef:a3:5b:0e:92:4e:90:b7:8d:93:8c:d9:cd:c7:4c:e4:
         49:4b:ca:3f:06:a1:93:82:cc:72:f1:c6:4d:aa:d2:34:6a:b8:
         7a:f9:df:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:16 2023 by rpki-client on console-ams.rpki-client.org