Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/O62wfkbdf2TogcIsZ_Lw6T61mCI.roa
File:                     O62wfkbdf2TogcIsZ_Lw6T61mCI.roa (raw, json)
Hash identifier:          ZMhXR+ilpK5dr/iLXk3sWRBwRqk4/a2mOIS4uXBgnTE=
Subject key identifier:   3B:AD:B0:7E:46:DD:7F:64:E8:81:C2:2C:67:F2:F0:E9:3E:B5:98:22
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03E4
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/O62wfkbdf2TogcIsZ_Lw6T61mCI.roa
Signing time:             Sun 01 May 2022 01:33:05 +0000
ROA not before:           Sun 01 May 2022 01:33:05 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        220.148.180.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 996 (0x3e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:33:05 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=3BADB07E46DD7F64E881C22C67F2F0E93EB59822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0d:42:e6:e4:24:c2:26:49:16:ba:0d:2f:d1:
                    48:87:14:fc:13:31:e4:bb:fd:47:c5:03:66:8d:35:
                    73:52:5f:77:70:51:39:95:13:65:86:05:44:4b:01:
                    93:ef:1d:f6:b1:ba:9b:76:65:6c:ef:bc:c5:ba:39:
                    2e:2c:a8:7b:30:52:0f:1f:87:5a:b6:1a:50:2b:3b:
                    5e:74:c1:e6:17:63:6a:14:94:42:96:fa:2d:d7:21:
                    60:e8:38:73:56:eb:28:de:65:ff:1d:6d:4a:a7:47:
                    07:12:a1:63:9b:ba:bc:42:bc:b9:ea:04:71:93:16:
                    66:55:13:8a:0e:6b:c8:20:e3:b8:fa:7b:c9:b1:4a:
                    bd:e9:e8:49:ce:aa:d7:8c:21:6b:d4:04:18:7c:8a:
                    62:24:cf:3a:8a:ac:4e:4d:e3:e4:44:6d:b4:55:27:
                    46:9d:ad:c9:3f:95:dc:c9:2a:92:bd:61:9e:58:bd:
                    cb:70:dd:cd:3d:ce:cf:da:61:a4:fd:d2:08:1b:e2:
                    b2:ef:c9:be:a8:de:3b:7c:8a:7d:a6:07:d4:70:7f:
                    87:1d:33:0a:e8:93:ed:c0:b3:43:09:b6:c6:5e:e3:
                    25:fa:03:ca:0e:6b:44:b7:3b:56:51:83:c6:8b:20:
                    89:f6:ff:08:c5:6b:d1:57:6c:bd:27:7c:45:08:5c:
                    d7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AD:B0:7E:46:DD:7F:64:E8:81:C2:2C:67:F2:F0:E9:3E:B5:98:22
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/O62wfkbdf2TogcIsZ_Lw6T61mCI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:c2:8b:40:84:94:f8:ca:02:c3:77:8c:7a:ec:60:1c:73:90:
         ea:dd:fe:69:e9:6d:3b:73:1a:04:8b:db:54:ac:e3:52:81:14:
         72:c1:8e:a2:ce:6a:a6:8d:ba:d4:57:31:f5:70:c7:83:b6:97:
         46:8c:e5:3b:79:cc:b8:15:b4:29:ff:6d:e6:2d:ff:ea:b4:6e:
         b5:f3:3d:69:7c:b5:c7:a2:83:a9:a1:c8:38:08:cc:ad:6e:78:
         1d:63:bb:a0:02:3a:da:92:0d:63:61:ec:2d:26:fe:9a:5c:eb:
         50:71:5a:ef:36:d8:3b:93:cd:81:8b:fa:78:00:a1:06:41:c2:
         f3:e0:49:2f:11:a2:a1:72:a6:9f:e6:75:6d:12:0e:ec:f1:ca:
         fb:92:85:fe:bf:04:83:99:d7:0a:dd:40:44:be:37:38:e4:28:
         84:1d:34:a7:c7:3f:d6:50:b2:d2:42:46:9d:cc:d6:5e:ab:7c:
         ef:3a:de:14:53:f5:51:0a:c2:e1:d8:57:04:5a:19:42:af:29:
         f7:5a:40:7d:8b:66:8c:99:b1:37:c8:07:9c:aa:70:8a:30:07:
         91:a4:bd:15:68:fb:a8:21:0d:aa:a2:7b:0c:a6:9e:17:20:70:
         df:8f:a5:b6:8e:52:23:1c:a8:5f:8b:0b:e7:20:e0:35:70:9f:
         6c:e5:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org