Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/OodJ352qE4kklVgk8hyrInu8dKI.roa
File:                     OodJ352qE4kklVgk8hyrInu8dKI.roa (raw, json)
Hash identifier:          +i4e2oYKjQt+o2K65UhZaeoe6n/FSD/Vs5JRQAJlMW4=
Subject key identifier:   3A:87:49:DF:9D:AA:13:89:24:95:58:24:F2:1C:AB:22:7B:BC:74:A2
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       02FA
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/OodJ352qE4kklVgk8hyrInu8dKI.roa
Signing time:             Tue 25 May 2021 02:41:58 +0000
ROA not before:           Tue 25 May 2021 02:41:58 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        220.148.188.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 762 (0x2fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:41:58 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=3A8749DF9DAA138924955824F21CAB227BBC74A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:62:d2:03:27:37:aa:6f:85:9d:37:c1:cc:80:
                    07:83:53:0d:db:44:68:8d:bd:0e:7a:7f:01:3a:0a:
                    ec:80:01:a8:a4:b7:35:13:8b:ef:7e:11:1c:01:30:
                    d2:c3:8f:59:30:10:e7:24:f4:d0:4c:03:33:24:db:
                    2e:c3:d5:7a:81:4c:ea:7b:5c:ef:6e:b9:8c:78:a9:
                    36:52:60:fe:d6:00:11:af:1a:81:28:4d:d8:db:d6:
                    15:d7:34:a3:b5:56:0a:36:cc:e9:fe:ce:93:73:63:
                    56:2a:d1:b4:f2:64:b0:5d:a0:1b:c1:9f:ec:8e:18:
                    b2:45:77:b7:b6:5e:28:44:f4:b2:9d:9e:31:0f:86:
                    92:53:ce:9c:16:64:30:97:c5:56:f3:f6:76:92:96:
                    e7:73:dc:b8:a4:c7:58:7a:62:bf:aa:f9:ce:08:0a:
                    cf:3e:a9:01:b7:fb:b0:ff:bf:a7:bf:94:85:2a:68:
                    7c:e5:33:c0:e9:98:7d:0d:16:6e:61:9c:ec:63:db:
                    fb:3b:f7:ab:5b:94:4d:65:77:41:64:92:a7:b3:f1:
                    cd:7a:88:de:89:17:6a:39:a0:ed:64:a3:65:c4:b3:
                    c2:87:a2:4d:ec:7d:05:e7:95:45:60:de:db:35:9f:
                    6b:f2:32:bc:c4:99:08:00:ad:0d:e7:03:a1:73:ac:
                    2a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:87:49:DF:9D:AA:13:89:24:95:58:24:F2:1C:AB:22:7B:BC:74:A2
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/OodJ352qE4kklVgk8hyrInu8dKI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:37:be:b4:92:97:30:dd:17:57:94:78:a0:00:fe:34:0c:72:
         fa:29:e8:6c:7b:e5:94:e0:73:74:b8:a1:5f:4d:3d:2f:0d:1b:
         af:f6:17:92:07:79:66:f5:28:1d:42:79:b7:3b:db:d4:08:08:
         bc:12:e2:39:9b:5a:0b:71:f2:6d:86:1b:f2:83:56:7f:ba:2c:
         50:2d:2e:89:7a:1f:ae:c7:4d:4f:98:5b:c3:17:69:0f:ef:49:
         74:5c:67:00:b5:3f:c5:ce:73:d2:60:21:3a:59:5f:7d:d0:30:
         cd:be:ac:2b:1c:de:50:b8:73:cc:84:6f:8d:83:7e:4a:ee:71:
         c6:09:07:47:0f:60:e2:7d:3e:a5:d4:1f:79:df:cc:aa:23:03:
         0e:8e:cc:81:1e:79:66:70:96:14:5d:0a:c7:4f:4c:7b:e2:e9:
         d0:7a:88:b0:09:b6:19:b3:13:4b:2d:74:60:a8:a3:71:69:3d:
         53:f2:57:c8:6a:d2:5b:fe:40:65:73:af:16:98:f2:85:38:d5:
         58:32:c8:71:13:5e:4d:35:34:ad:bc:6a:9f:34:d3:38:fc:0f:
         00:f6:4f:1e:0c:fa:07:6d:52:a8:e0:b8:4c:16:a8:0f:75:a9:
         ce:c1:b0:39:09:9c:e0:01:da:4f:35:d5:f6:49:78:3f:cc:c5:
         3e:79:d6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org