Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/NPhKWxYMR2sirk5HUvoUPR9A2N4.roa
File:                     NPhKWxYMR2sirk5HUvoUPR9A2N4.roa (raw, json)
Hash identifier:          Q8b6t/NJAiO1KjAOZF72BWwSRuBzyK8meXuyucdum58=
Subject key identifier:   34:F8:4A:5B:16:0C:47:6B:22:AE:4E:47:52:FA:14:3D:1F:40:D8:DE
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0345
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/NPhKWxYMR2sirk5HUvoUPR9A2N4.roa
Signing time:             Tue 25 May 2021 02:43:00 +0000
ROA not before:           Tue 25 May 2021 02:43:00 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        219.124.128.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 837 (0x345)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:43:00 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=34F84A5B160C476B22AE4E4752FA143D1F40D8DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9d:71:18:93:ad:70:d0:a0:fd:b7:81:bf:94:
                    65:97:6b:5e:b1:8c:08:b7:66:78:75:42:2c:c6:d7:
                    55:d9:69:8d:53:68:c2:cc:c7:13:88:d2:ab:18:55:
                    8b:1f:c3:1b:12:61:ef:40:3c:8a:19:6b:5f:5b:eb:
                    10:4a:22:03:be:be:94:92:de:68:e3:c2:99:ba:51:
                    db:b1:f5:6e:03:e1:3b:89:59:85:92:00:d8:0e:bf:
                    81:b4:8b:ef:a3:db:9b:d6:ca:89:24:d5:a2:22:99:
                    8c:5b:60:9c:e0:95:fb:7b:2f:d5:d4:92:6a:84:57:
                    4c:00:dc:90:97:6b:77:03:1a:0c:c1:96:c2:1a:7b:
                    1a:89:1a:b6:19:53:14:2c:c3:ff:47:c5:9c:4d:fb:
                    28:23:ba:8f:a5:08:85:30:e5:e0:fe:da:52:71:b1:
                    79:1d:50:f3:a0:c8:85:b3:42:c1:3f:9c:87:76:34:
                    b1:8e:63:d7:7c:3a:08:6c:a2:22:5d:ec:6b:b1:ea:
                    48:f7:cb:01:92:e3:77:f8:df:ee:d3:49:e0:9f:b4:
                    b0:91:9a:9a:3b:d8:07:98:bf:39:5a:b0:ee:95:dc:
                    81:8e:23:42:8f:6d:7d:ba:ed:e4:eb:13:a8:6b:f8:
                    1f:f6:ba:07:74:86:3c:63:34:49:90:aa:fc:e6:84:
                    b2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F8:4A:5B:16:0C:47:6B:22:AE:4E:47:52:FA:14:3D:1F:40:D8:DE
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/NPhKWxYMR2sirk5HUvoUPR9A2N4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.124.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cc:86:e1:09:41:62:60:ca:a7:b7:e8:d4:4a:a9:f2:ae:79:2c:
         ca:f2:8b:b3:d4:2a:81:f5:3a:6d:2f:ad:b4:9b:07:f2:a8:7e:
         98:15:6d:e1:86:f4:3a:06:dc:c5:89:22:ef:4c:56:08:30:6d:
         38:ff:40:a9:9a:6d:0a:09:9b:09:51:45:99:98:05:b6:02:73:
         6d:bc:a4:c2:ca:c5:d0:2a:2e:ed:bc:a3:3b:bb:8f:69:75:89:
         bd:99:50:20:06:70:d4:d9:24:17:4f:17:e0:51:81:d5:8b:d1:
         92:12:2b:cd:01:78:dd:14:df:a2:29:f5:d5:90:94:59:40:d5:
         19:06:fc:ed:42:d6:4e:33:b2:e1:94:a1:20:23:46:24:5c:40:
         ff:b8:81:da:c0:2b:fb:01:0f:9f:46:0f:f3:32:5f:a0:9b:d5:
         36:78:bd:78:0f:1c:20:1a:55:1b:83:19:22:b4:a8:ac:fd:da:
         42:23:8d:c7:6e:2e:99:44:43:7c:a8:88:a4:3e:a5:69:28:55:
         a3:f1:45:17:bd:f4:54:3f:22:ca:fb:33:da:e9:5f:13:e4:8c:
         71:6e:64:d1:3f:fa:dd:2d:55:19:b3:1f:68:3a:3e:e6:ac:69:
         1c:c7:cb:6b:c9:95:37:71:3f:68:70:7c:31:9a:f1:19:91:ac:
         d6:58:97:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org