Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/QwFJDRxhNSqpTRtj6VVdtWiF_vs.roa
File:                     QwFJDRxhNSqpTRtj6VVdtWiF_vs.roa (raw, json)
Hash identifier:          TOSCgiUq1YbTgaej3WcwIjcuRfd+ChsO+CUrx8zuT64=
Subject key identifier:   43:01:49:0D:1C:61:35:2A:A9:4D:1B:63:E9:55:5D:B5:68:85:FE:FB
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0387
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/QwFJDRxhNSqpTRtj6VVdtWiF_vs.roa
Signing time:             Sun 01 May 2022 01:29:43 +0000
ROA not before:           Sun 01 May 2022 01:29:43 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        202.226.16.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903 (0x387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:43 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=4301490D1C61352AA94D1B63E9555DB56885FEFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b7:fa:31:3a:71:85:aa:dd:e3:29:80:a9:6b:
                    15:96:1e:af:ce:36:15:94:ea:d3:3c:1e:5b:59:6c:
                    38:e7:39:6d:08:74:0b:cb:35:a6:24:2a:49:91:9d:
                    40:7b:12:6f:5e:7c:f0:5f:a5:ee:a0:c9:69:40:99:
                    86:1a:a8:f4:e6:8d:8f:ea:89:73:f6:7c:96:43:36:
                    6a:17:a2:d6:cb:7d:ec:dd:fc:cb:d3:74:9b:51:b5:
                    96:a6:10:d6:ca:c7:36:f0:ca:5f:1f:a0:7b:cc:96:
                    b8:e5:04:d2:8f:1a:f4:79:9f:ef:f0:a7:a2:37:a6:
                    f1:c1:e6:c8:b4:78:bc:ba:8b:b3:e6:75:ba:dd:09:
                    a1:ce:96:36:21:47:20:2a:42:f2:bd:1b:dd:19:96:
                    de:91:cf:bc:90:76:c8:8e:ac:a2:e7:1a:d7:3b:38:
                    fb:2d:6a:49:21:95:1a:0b:90:d4:4c:54:9e:b8:e4:
                    46:00:a8:68:a0:df:e3:84:5f:9c:5b:c6:03:af:05:
                    d6:c7:77:ef:10:17:d0:0c:3a:8c:83:fa:99:7a:e7:
                    6b:b6:cd:71:a0:49:17:a4:77:00:91:f0:29:27:0e:
                    5a:bf:9d:13:41:b7:22:ec:29:8e:40:56:5d:6f:cd:
                    7c:20:21:4f:c4:34:18:02:ba:b0:50:a4:16:ce:fa:
                    e6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:01:49:0D:1C:61:35:2A:A9:4D:1B:63:E9:55:5D:B5:68:85:FE:FB
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/QwFJDRxhNSqpTRtj6VVdtWiF_vs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:c1:ff:c6:b6:b1:53:05:8f:03:87:9c:ce:59:37:01:c1:1e:
         9d:4c:b7:2b:93:2d:90:65:e9:c6:9d:ed:f7:cf:09:4b:9b:0b:
         a4:62:66:bc:81:68:bc:a2:f0:ad:eb:20:73:a8:5b:66:a0:64:
         f9:1b:69:a7:5a:88:71:f6:36:41:0a:da:dd:99:fe:ed:32:5e:
         85:80:d5:f4:7e:97:19:24:a7:d9:af:ae:9b:52:ab:b2:bb:00:
         44:35:64:f1:ef:9c:c1:92:28:ba:b8:ea:59:7e:ef:b4:4d:24:
         fd:b0:35:69:a2:42:78:7d:ec:a1:7b:52:9d:73:55:8e:79:27:
         e5:8f:79:f0:89:83:df:82:15:d2:7d:d0:cf:f7:0b:fa:64:e8:
         7a:8d:31:a5:a5:6f:6d:d3:b9:b9:32:98:66:7c:e9:03:87:fd:
         dc:b0:10:12:19:c9:0a:13:e8:88:c4:43:16:ae:2a:f8:4f:6b:
         5f:6e:ee:84:85:97:5d:ce:b7:b3:1e:24:29:b4:9b:ee:3c:02:
         97:0d:0b:5f:cf:e7:7a:43:b3:30:1c:42:62:4c:ca:8e:91:58:
         4c:b4:a8:55:50:0b:0d:33:d3:e7:64:e2:cd:7c:d5:1c:7e:84:
         ad:fd:90:6a:60:95:04:75:6b:28:d8:e6:09:80:42:3b:3d:26:
         57:2a:d3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org