Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/PnQM0xL5PwY5woN3bbWLy4X-sfE.roa
File:                     PnQM0xL5PwY5woN3bbWLy4X-sfE.roa (raw, json)
Hash identifier:          nxpJoVvWHflLHZNVZ+E1Npn9w+T1c6+V1xLafSlwRKI=
Subject key identifier:   3E:74:0C:D3:12:F9:3F:06:39:C2:83:77:6D:B5:8B:CB:85:FE:B1:F1
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03EB
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PnQM0xL5PwY5woN3bbWLy4X-sfE.roa
Signing time:             Sun 01 May 2022 01:33:07 +0000
ROA not before:           Sun 01 May 2022 01:33:07 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        211.7.64.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1003 (0x3eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:33:07 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=3E740CD312F93F0639C283776DB58BCB85FEB1F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:22:34:ed:74:aa:10:2d:24:14:8b:63:bb:16:
                    8b:ce:3f:1e:7d:20:8e:5f:00:83:1d:76:b1:f4:9f:
                    c9:68:f0:5a:52:e4:cd:b9:4e:39:1b:f6:30:6e:9c:
                    a8:94:ef:f8:9f:62:ce:99:4e:8f:f2:60:20:7f:7b:
                    10:4a:85:a3:14:27:7a:7b:2c:78:3d:12:b7:8e:0d:
                    8d:40:c0:f6:10:93:65:98:ba:aa:bc:e1:b7:3d:a6:
                    36:34:70:3d:e6:08:ed:73:46:b5:2b:0e:7c:68:2d:
                    3a:93:f2:67:8a:14:6c:b9:06:70:66:40:19:8e:34:
                    e6:82:69:05:38:f6:6e:1f:95:a3:93:f9:21:40:38:
                    40:d6:74:03:17:ae:58:3b:f4:b1:bf:76:e8:1f:eb:
                    2f:e8:a2:74:17:ce:2e:72:6b:96:9b:e5:f7:cb:d9:
                    5d:ff:8f:16:bc:ba:f6:55:01:25:a5:35:35:24:c9:
                    db:31:4f:c6:b0:1e:a1:70:bd:ca:bc:26:97:67:71:
                    47:17:0a:09:80:b4:b7:c5:a6:ce:24:94:1e:04:99:
                    c2:6a:bf:ec:b9:8c:45:c1:f2:bd:aa:b7:93:90:0f:
                    05:74:29:62:5a:f2:eb:42:e2:6c:47:6f:5a:c6:07:
                    55:e6:c5:f0:34:16:13:61:6b:6f:7d:f7:88:3b:d7:
                    a7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:74:0C:D3:12:F9:3F:06:39:C2:83:77:6D:B5:8B:CB:85:FE:B1:F1
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PnQM0xL5PwY5woN3bbWLy4X-sfE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         51:21:91:f9:c7:5e:a8:0a:f1:61:02:d6:c9:11:c3:5c:be:05:
         c4:0c:0a:1b:3a:48:99:40:20:8d:b6:d3:2a:99:49:b1:d5:1a:
         70:24:a6:64:e3:12:0c:b2:1b:94:10:93:ea:1f:a9:aa:b8:59:
         90:59:0d:67:c1:2d:f9:5c:6a:53:69:ea:b1:7d:86:6c:c5:fd:
         0a:4d:f2:3c:ba:30:ce:26:33:77:a9:d4:b9:85:9c:4d:98:34:
         c9:22:2c:20:29:eb:be:7f:c7:01:4d:7f:40:68:8c:b4:66:cb:
         26:53:cf:03:f1:c2:a6:91:05:43:da:71:b2:5b:b3:80:f5:d1:
         35:55:06:b7:b9:df:c3:1e:b6:21:db:d5:39:62:9f:71:ff:04:
         8f:0c:c9:43:3b:e2:f7:d6:22:83:fe:de:08:d3:ef:80:1a:af:
         f7:17:ec:8f:fa:78:9a:cf:9d:c8:5e:f4:c4:63:5d:6d:0d:cc:
         7a:d9:fd:aa:f2:5f:64:eb:d6:0f:26:68:1e:30:c4:51:74:46:
         3e:b9:c9:b2:47:b4:f4:61:d5:a4:7b:8d:1d:ca:90:46:16:c5:
         90:ae:18:17:e8:4b:b8:ed:a2:f4:aa:df:6f:1f:3b:58:dd:71:
         d3:3c:2f:de:38:b3:08:a1:b1:88:97:b2:86:58:87:03:10:2f:
         f5:7b:54:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org