Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/QfQ2rUJRKp31cOp-OJ6lLJns5IE.roa
File:                     QfQ2rUJRKp31cOp-OJ6lLJns5IE.roa (raw, json)
Hash identifier:          k/AvYG2HSweUjfgqPlTTUmYeVhhWUpWBUt9zfz3JMEI=
Subject key identifier:   41:F4:36:AD:42:51:2A:9D:F5:70:EA:7E:38:9E:A5:2C:99:EC:E4:81
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       037F
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/QfQ2rUJRKp31cOp-OJ6lLJns5IE.roa
Signing time:             Sun 01 May 2022 01:29:40 +0000
ROA not before:           Sun 01 May 2022 01:29:40 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        27.98.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895 (0x37f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:40 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=41F436AD42512A9DF570EA7E389EA52C99ECE481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:91:48:49:51:6f:16:16:3d:54:4b:c6:fa:
                    26:d0:68:08:f3:e3:ce:b8:28:02:ce:50:bc:ad:b1:
                    8b:9a:81:61:a6:37:68:01:3d:b7:ba:19:f2:52:64:
                    96:1e:74:99:48:ac:f5:42:04:24:17:53:82:87:5f:
                    39:7d:3a:17:90:de:26:51:3c:01:e1:15:84:54:26:
                    4d:4f:72:fa:71:dc:ea:39:17:0a:e0:d0:3f:34:92:
                    80:e9:5d:ae:96:2e:12:14:4f:85:d5:5a:b6:76:0e:
                    4f:e1:b0:92:ac:6d:ab:d8:58:cf:42:a5:e0:d3:2b:
                    ed:66:47:09:dd:8a:bb:a4:0b:57:e4:ff:1d:00:a6:
                    2b:7c:93:3f:d0:24:7e:06:f9:42:d3:7f:8f:52:4d:
                    c4:ca:6c:d3:8b:d5:14:cd:af:8d:76:a6:ae:1f:43:
                    e3:f9:73:b4:fc:18:21:ee:af:62:c6:17:13:df:55:
                    aa:64:aa:73:7b:63:06:f6:d4:54:4b:bd:c9:5f:91:
                    97:c1:b3:f2:0f:be:00:05:b5:1b:88:b9:11:ec:53:
                    ee:46:63:22:2f:73:ff:93:ea:a3:86:36:21:9b:0e:
                    9f:f5:45:db:e2:51:b6:b4:d1:14:3f:e9:36:a3:8f:
                    a3:3b:2f:a6:97:d1:ff:30:97:59:02:cb:2c:7d:af:
                    15:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F4:36:AD:42:51:2A:9D:F5:70:EA:7E:38:9E:A5:2C:99:EC:E4:81
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/QfQ2rUJRKp31cOp-OJ6lLJns5IE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.98.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b7:f3:93:7f:30:59:8d:2f:69:d6:51:40:87:67:a7:db:51:bd:
         39:c1:95:09:bd:88:3e:af:c8:3e:eb:28:23:79:04:97:d3:64:
         6d:25:2f:c9:8b:92:d4:e2:19:48:e6:c1:d5:66:27:6b:62:c5:
         47:1f:ac:76:d7:86:b5:35:d6:b1:da:f4:f0:ab:5c:1d:5f:5b:
         76:c0:8e:88:5d:10:c8:26:da:0f:9e:38:bb:37:60:e7:d5:bd:
         bf:30:7d:de:8e:de:5c:ff:e6:0d:25:17:4c:96:f4:21:45:b2:
         af:6e:ad:de:a8:ad:90:92:56:7e:fb:a0:50:87:23:b1:d3:ba:
         56:96:46:92:b3:4e:3b:90:84:26:9d:82:f2:95:38:0b:bc:b6:
         7c:ea:cf:e0:2b:c4:f4:b3:c2:10:72:d2:32:9c:b8:57:c7:60:
         0b:7f:cf:10:f9:5a:12:c2:b4:0d:d6:4c:bd:29:b3:d7:69:3e:
         f6:2c:11:9b:76:cd:3c:fe:22:24:6f:1e:43:4e:4d:f7:ea:2f:
         b3:46:0c:8c:28:a3:60:d2:5c:19:cd:af:22:af:33:fa:e4:8d:
         35:11:93:7e:dc:56:32:c4:84:75:93:bd:8d:cd:00:91:17:c4:
         81:17:86:93:65:b4:7a:ce:cf:35:db:b3:e8:24:85:c2:9d:c7:
         d5:08:32:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org