Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/NHI2b6C-JsrMF3krNnntHEn4K9U.roa
File:                     NHI2b6C-JsrMF3krNnntHEn4K9U.roa (raw, json)
Hash identifier:          cq09d/ZIP/ljiR1oBhIchP/Ccn0hKC8dIFjhMOFZpQo=
Subject key identifier:   34:72:36:6F:A0:BE:26:CA:CC:17:79:2B:36:79:ED:1C:49:F8:2B:D5
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03CE
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/NHI2b6C-JsrMF3krNnntHEn4K9U.roa
Signing time:             Sun 01 May 2022 01:32:58 +0000
ROA not before:           Sun 01 May 2022 01:32:58 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        119.83.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 974 (0x3ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:58 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=3472366FA0BE26CACC17792B3679ED1C49F82BD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7a:81:9f:10:df:80:0d:03:0c:37:75:a1:42:
                    51:7a:47:0f:d0:4f:26:75:8b:34:b1:55:6c:9a:3a:
                    19:31:8e:a2:d7:11:b6:43:b9:09:c6:74:42:37:ee:
                    74:59:06:21:d9:5d:b3:b7:ba:c6:d9:f3:cf:3f:e7:
                    49:dd:a8:b1:a5:b6:bf:f7:37:f4:1f:a9:b3:f0:27:
                    fe:8a:69:f3:fd:8c:47:7c:a4:bc:a1:66:06:b5:b7:
                    4b:0a:a2:74:42:c5:5b:dd:c6:f9:1e:20:5a:80:d3:
                    d1:49:5b:50:a2:e0:a5:7f:05:03:6f:36:56:d9:16:
                    e4:02:53:4b:1d:16:64:a1:47:12:54:1e:1b:5d:98:
                    78:7b:be:7d:f4:a4:a8:7a:9f:b7:f2:c1:38:4d:aa:
                    c1:5e:96:f8:43:99:48:78:87:2e:6b:94:c4:52:61:
                    77:be:03:7a:91:2d:99:39:b5:80:40:91:31:05:4f:
                    bd:42:67:7e:15:b9:29:05:56:b8:e4:72:91:48:b7:
                    32:b5:1b:be:a4:b0:97:92:15:0f:51:05:c2:a4:11:
                    7d:c3:06:fa:bf:96:11:da:e0:4f:f1:8b:7d:cb:d4:
                    2f:e3:13:5c:54:eb:ab:82:36:c8:c3:6b:06:8d:3b:
                    ea:55:19:8f:ad:83:d1:11:50:b8:83:10:95:66:bd:
                    b7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:72:36:6F:A0:BE:26:CA:CC:17:79:2B:36:79:ED:1C:49:F8:2B:D5
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/NHI2b6C-JsrMF3krNnntHEn4K9U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.83.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         63:b4:b6:86:4f:bc:92:21:24:cd:49:57:af:d6:77:69:fe:c8:
         1a:77:26:40:52:3a:2d:59:94:05:f4:9c:9a:e1:6e:fc:8c:98:
         8d:32:ca:fc:8f:37:7d:c1:44:83:79:b7:bc:2e:06:c8:23:ca:
         4e:84:11:62:fa:a2:d3:ef:d6:f2:3b:02:38:cb:05:13:1f:f4:
         69:eb:f1:a5:9c:02:33:8f:b2:02:65:13:82:77:10:35:d4:8c:
         c3:7c:24:40:8a:c4:f2:06:a8:35:8a:c0:49:79:c0:46:0c:aa:
         68:dd:86:98:a8:f0:95:50:df:22:ba:23:7f:31:a7:c7:b7:f6:
         7c:16:30:fb:1d:7e:97:c5:2c:79:df:fa:0f:e3:de:fc:dc:c6:
         04:e1:e4:a1:8a:34:61:a1:0d:a6:8e:11:29:68:ea:af:12:d8:
         86:38:ef:78:d7:ee:d5:13:9b:ab:f0:aa:fc:74:9d:be:b8:f1:
         11:88:b7:d8:5b:22:55:97:6b:1a:60:ea:4b:7f:8f:9d:ff:d2:
         87:89:b2:21:cd:cd:f4:f7:d5:bf:4d:78:c1:c5:26:c7:85:a6:
         34:20:af:87:f8:d2:bb:21:3d:fa:cc:8e:61:ff:fc:f9:98:3c:
         e8:55:d2:a7:3d:ff:8a:ee:9a:b7:85:08:8c:50:89:c4:ee:6c:
         73:0a:49:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org