Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/PwsZwjU_7vwlnLwyFjXfKFoZQ38.roa
File:                     PwsZwjU_7vwlnLwyFjXfKFoZQ38.roa (raw, json)
Hash identifier:          nFhtZbhEkzckSg3wosSTjthaOhxtHdmYjc79ZMbQjQk=
Subject key identifier:   3F:0B:19:C2:35:3F:EE:FC:25:9C:BC:32:16:35:DF:28:5A:19:43:7F
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       035A
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PwsZwjU_7vwlnLwyFjXfKFoZQ38.roa
Signing time:             Tue 25 May 2021 02:43:07 +0000
ROA not before:           Tue 25 May 2021 02:43:07 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        182.20.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858 (0x35a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:43:07 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=3F0B19C2353FEEFC259CBC321635DF285A19437F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:63:fc:8f:ce:00:bb:b3:64:0d:58:14:0d:
                    a5:8b:d7:3d:97:65:99:11:44:53:07:ea:d0:f7:ea:
                    20:42:c4:af:7b:b8:4f:0c:b7:2c:ba:52:b2:c4:59:
                    b2:59:1a:3c:4e:2a:4d:64:75:bd:d0:9d:e6:c0:a2:
                    76:32:02:5b:9e:56:5f:69:70:35:55:6a:01:cd:ec:
                    8d:aa:15:2d:aa:25:f4:96:f0:ed:5f:19:42:4f:4b:
                    c1:41:18:7e:b4:8c:bd:5d:02:35:e7:1d:bb:ce:f5:
                    5c:29:f7:73:0d:d4:72:31:95:1e:53:a1:cd:14:0f:
                    71:63:4d:2e:20:08:c0:df:cb:ea:d2:90:af:f8:4b:
                    44:9a:0e:b5:4a:a1:56:0c:0b:08:46:f2:58:bf:63:
                    7b:0c:97:15:66:d2:1e:c5:90:8e:30:a5:e3:87:e0:
                    6f:71:e0:a0:e3:5a:29:3d:b6:dc:fa:48:80:85:38:
                    68:fd:86:ed:24:fa:3e:9b:eb:f8:48:8e:76:26:cc:
                    b9:10:19:49:4c:98:bc:7d:24:db:be:eb:83:25:82:
                    3e:e5:e7:80:93:04:bc:a0:e9:c6:ef:ba:3f:05:a2:
                    58:87:83:1f:d9:b5:21:22:d5:cd:c8:57:1b:49:2c:
                    c4:b4:84:7f:46:f0:5f:78:0b:69:4c:f9:fc:d8:66:
                    61:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0B:19:C2:35:3F:EE:FC:25:9C:BC:32:16:35:DF:28:5A:19:43:7F
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PwsZwjU_7vwlnLwyFjXfKFoZQ38.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.20.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3d:ca:fb:ce:6f:6c:8e:d5:29:d9:70:fa:5f:55:d6:14:a0:12:
         82:9e:d5:bb:c0:51:11:72:32:77:c4:f9:f3:02:1b:02:ea:f9:
         ef:db:6f:a2:5f:3b:35:5c:f6:a8:36:a0:89:f6:7b:6e:2e:ad:
         62:4c:84:19:8e:90:b4:67:d4:9d:05:89:ef:6e:1c:23:82:f8:
         b7:ed:cd:b1:25:ac:5d:47:cc:a4:0a:7f:9c:3b:59:a2:c9:38:
         02:de:c1:fa:c9:f4:e5:7a:2c:8e:83:d2:b3:57:23:1b:c0:5d:
         9f:d0:88:bc:e4:2a:23:15:40:82:f9:c2:c1:20:1a:d1:30:a3:
         c2:72:e2:69:4e:65:ca:83:ef:c2:58:e2:e2:f6:ba:2e:5d:a0:
         78:f1:c7:2f:b5:63:f9:01:8a:52:f6:b6:39:7d:de:e6:f2:b7:
         d8:61:4e:7e:76:33:9b:b5:21:94:6b:f1:18:ae:2e:82:8b:7a:
         10:19:1c:20:1b:d0:c0:77:36:c3:08:e9:9f:7d:95:a1:d5:ff:
         02:41:eb:b4:b1:1b:20:ea:e6:ae:34:19:bb:a4:80:20:ed:06:
         bb:4d:d8:fb:65:c5:8f:1a:87:37:45:58:1f:0d:1f:54:41:af:
         7e:1d:b7:cb:8b:6f:b1:f6:e5:e0:3c:6f:ea:c0:2f:ac:0b:94:
         80:1d:10:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org