Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/QChexlyJnYrTDtbkc5QlJhjuar4.roa
File:                     QChexlyJnYrTDtbkc5QlJhjuar4.roa (raw, json)
Hash identifier:          AtHBYgC/a0IUvN4QYLxxXRqWVCSLq2co8t+S82WrVKw=
Subject key identifier:   40:28:5E:C6:5C:89:9D:8A:D3:0E:D6:E4:73:94:25:26:18:EE:6A:BE
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0348
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/QChexlyJnYrTDtbkc5QlJhjuar4.roa
Signing time:             Tue 25 May 2021 02:43:01 +0000
ROA not before:           Tue 25 May 2021 02:43:01 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        42.127.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 840 (0x348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:43:01 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=40285EC65C899D8AD30ED6E47394252618EE6ABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ae:d9:90:ac:09:9f:7b:1a:fd:5b:61:64:77:
                    40:ed:c8:e6:bf:43:f0:e5:1c:23:32:04:ec:70:cf:
                    a7:28:b2:b4:8b:30:45:7b:a5:7d:8d:eb:74:ab:fd:
                    2e:3d:86:ca:11:cc:4e:a7:f2:90:f7:77:99:45:19:
                    37:60:23:4e:84:a4:29:e6:9c:b6:f4:1f:27:4d:d6:
                    b1:2d:04:4c:bf:de:17:36:68:d8:0a:9f:b4:51:00:
                    9b:24:e6:dc:fa:e2:8c:94:a2:a5:8a:6a:24:1b:fd:
                    49:ef:4e:af:19:02:15:d0:0f:90:91:c5:8e:9a:dc:
                    5e:cf:1b:55:df:b7:58:83:e1:73:ef:3e:c2:d5:dd:
                    21:81:ed:77:43:9e:8a:a8:b2:bc:54:7b:2a:e1:ca:
                    27:bf:3a:ad:c4:b0:40:0d:71:b2:b4:86:f9:82:3b:
                    51:66:f3:0a:4e:6c:9c:e7:d5:f8:b9:29:ce:d9:09:
                    c3:58:ab:a6:12:1f:09:05:ab:ab:ce:34:83:bf:a6:
                    a1:7f:e2:e2:c7:cd:09:13:71:70:b9:c4:c0:04:25:
                    f2:31:42:4e:f9:76:4f:d0:c2:24:19:bc:b8:cf:ae:
                    40:ec:62:37:3f:d8:2e:57:d8:9d:99:2c:f1:de:b8:
                    5b:d4:80:7b:f0:c4:5c:3b:15:99:97:28:bc:b2:9e:
                    eb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:28:5E:C6:5C:89:9D:8A:D3:0E:D6:E4:73:94:25:26:18:EE:6A:BE
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/QChexlyJnYrTDtbkc5QlJhjuar4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.127.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         49:94:1e:e5:67:ca:30:b0:0a:5b:6a:3c:53:97:90:e0:d8:1a:
         66:f2:b5:bf:f7:e0:64:7d:a1:9c:49:5e:82:5f:64:ba:84:45:
         9e:03:9a:9e:50:b7:bc:bb:81:00:9f:55:c1:1b:be:e8:9c:91:
         bc:c1:ea:87:b0:4f:dd:ee:14:10:47:bf:ab:34:4f:2e:9e:22:
         8d:23:cc:64:1b:51:f5:9f:c6:f0:7b:53:56:c7:7e:25:4c:97:
         6e:ce:f9:29:b9:40:02:0b:ed:f2:49:91:9e:f4:cf:9a:ec:cf:
         dc:a7:db:f8:a2:78:1e:f6:12:f9:b0:15:77:6b:a2:cb:21:7c:
         22:66:7d:6e:c1:f6:e7:ac:4d:8f:47:28:ea:48:5d:ab:c2:b7:
         a4:52:be:11:72:fc:16:8f:e5:04:1a:cb:0c:11:61:b6:36:ef:
         19:47:3d:60:f7:a7:d3:8e:93:6e:10:27:d6:4e:c0:cf:56:a9:
         3f:7c:15:a9:69:c4:78:2f:c0:63:61:32:7f:a1:94:7a:d0:52:
         0d:c9:84:a0:31:f2:c2:fa:7f:cc:0b:32:a4:46:13:1b:f7:cb:
         09:4e:a6:71:5d:65:a9:3b:e0:73:2e:9a:4c:24:6f:d5:b1:63:
         e2:34:90:dd:49:cb:b5:50:8d:05:38:70:51:a3:6e:f7:f3:76:
         05:41:54:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org