Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/PV97QBJUKPBsyiMl2WGHP3dV31g.roa
File:                     PV97QBJUKPBsyiMl2WGHP3dV31g.roa (raw, json)
Hash identifier:          bE6gqpDF4cpfzXbSL04p2mgoElRex9SiOR8lhuEwlXc=
Subject key identifier:   3D:5F:7B:40:12:54:28:F0:6C:CA:23:25:D9:61:87:3F:77:55:DF:58
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       045C
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PV97QBJUKPBsyiMl2WGHP3dV31g.roa
Signing time:             Thu 13 Apr 2023 09:57:54 +0000
ROA not before:           Thu 13 Apr 2023 09:57:54 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        218.219.48.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1116 (0x45c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:57:54 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=3D5F7B40125428F06CCA2325D961873F7755DF58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fe:0a:0b:5f:94:f9:bd:2e:73:7a:86:00:03:
                    01:5e:44:74:4a:7c:de:f9:0c:cc:62:e7:b3:3c:e8:
                    28:e0:41:df:c0:1c:41:95:9b:e2:79:9b:2e:f9:38:
                    19:c0:46:2b:2d:8d:91:90:01:ab:c6:83:ab:9c:10:
                    f1:a5:f3:e5:03:cf:b8:00:4b:24:25:ff:da:6a:ac:
                    b4:82:38:7c:45:55:d8:01:59:d2:38:12:0f:3a:cd:
                    bc:7a:b5:9b:14:15:5c:7a:57:14:91:d6:c5:93:ff:
                    a1:d7:22:1d:b3:2d:74:77:30:0a:e6:fd:6c:ae:b2:
                    ef:37:ee:ba:5f:90:f9:6d:62:22:c4:5a:54:7f:b3:
                    63:a3:ef:b9:ed:65:67:d8:06:b5:d0:fd:a1:4a:84:
                    e7:97:fb:e1:94:c9:91:e3:d2:9b:43:32:46:86:26:
                    48:0d:ec:11:71:2a:f7:a4:b6:95:02:ea:ab:d0:9d:
                    41:cb:3f:21:8a:a1:25:33:7a:7e:b0:c3:a7:f9:28:
                    59:df:0c:27:2c:5f:58:e7:c8:a2:57:fd:a7:5d:05:
                    b6:33:9f:6d:95:33:87:24:21:0c:1e:45:ba:17:af:
                    12:af:8a:95:3d:90:ff:75:52:4d:84:4f:1e:7b:02:
                    e9:6f:f5:9e:2b:08:a8:04:3b:38:df:4d:fd:67:9b:
                    5f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5F:7B:40:12:54:28:F0:6C:CA:23:25:D9:61:87:3F:77:55:DF:58
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PV97QBJUKPBsyiMl2WGHP3dV31g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:34:cb:31:e1:7f:ae:82:71:ff:b3:81:db:ff:40:1f:11:0b:
         8b:9d:2b:e2:af:11:9a:21:b5:c9:19:5a:96:8b:fc:cc:e9:5f:
         ae:f8:e3:10:38:d5:dc:7b:2e:f8:32:df:70:0c:9c:59:3c:3e:
         90:bc:83:29:c0:80:03:29:58:8e:70:63:11:a1:e6:54:ba:82:
         86:d4:ad:45:b2:77:06:8c:2b:4d:3f:df:f1:0d:b8:8b:9d:51:
         6a:ee:90:8c:7a:ba:25:d0:6c:6c:2a:fe:46:97:25:68:9f:92:
         b0:df:97:b0:d1:9d:16:88:f6:2b:a8:6d:8b:5e:8e:75:a3:c9:
         a5:36:59:a2:87:67:dd:08:78:8d:4e:05:6a:eb:ca:9b:a4:76:
         f6:39:3b:86:aa:b6:25:7f:95:f6:76:c4:36:7e:05:38:da:18:
         05:2b:e8:4f:04:48:ee:e4:75:c1:8c:db:bc:c0:1c:15:e6:72:
         d3:ac:bd:b3:75:20:c8:2d:a4:b6:6e:ff:1a:8a:9c:b9:be:35:
         dd:0f:25:fb:fb:bb:ee:73:2c:8e:d2:71:cd:9e:66:2a:21:fb:
         92:9a:c3:4a:73:dc:1f:4d:e2:46:af:d1:6b:93:a6:19:b9:e9:
         c7:eb:cf:97:13:6f:3e:95:38:4e:c2:43:9f:42:1a:c4:8a:7e:
         8c:ad:a0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org