Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/R0ISnPuq7VU0N88zRlxxo6OKjM4.roa
File:                     R0ISnPuq7VU0N88zRlxxo6OKjM4.roa (raw, json)
Hash identifier:          z7B6UyH/+EgVujT9BpLsEI9xzh4wdWislRmLvOMPerw=
Subject key identifier:   47:42:12:9C:FB:AA:ED:55:34:37:CF:33:46:5C:71:A3:A3:8A:8C:CE
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0428
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/R0ISnPuq7VU0N88zRlxxo6OKjM4.roa
Signing time:             Thu 13 Apr 2023 09:55:20 +0000
ROA not before:           Thu 13 Apr 2023 09:55:20 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        219.112.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1064 (0x428)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:55:20 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=4742129CFBAAED553437CF33465C71A3A38A8CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bd:93:79:85:0d:84:33:86:47:3c:01:39:51:
                    d1:0e:73:fe:42:78:2f:92:1f:06:43:ce:40:b0:44:
                    4c:d0:a2:e1:32:5a:c2:3f:1b:ff:9a:59:ed:af:b6:
                    ed:3a:ef:6c:cc:07:f6:83:48:4c:05:9c:1f:07:0d:
                    85:95:82:3b:9f:5b:cf:76:ee:22:b6:c0:ac:86:50:
                    f0:9b:3d:7b:2b:a1:7e:b5:a8:8c:e5:a1:1b:fb:33:
                    2b:68:b0:ac:81:b1:78:22:8f:5e:66:03:29:0f:16:
                    e0:a9:81:f7:f9:bc:09:e0:35:a5:b6:ac:28:b0:82:
                    1d:51:87:7a:00:00:6a:07:9f:97:85:11:a8:ae:89:
                    47:b8:0d:1a:7f:a6:9f:e0:62:45:7d:14:fe:2d:4e:
                    7b:b1:64:02:69:45:49:87:37:e4:e9:cb:e3:7c:68:
                    cb:a2:8c:ca:ee:a9:e2:20:4a:84:f9:f6:85:26:2a:
                    52:b1:6e:eb:57:5f:06:37:24:07:bd:11:9c:6b:65:
                    19:27:2b:55:83:ba:88:83:b1:49:04:6a:bb:93:2c:
                    c3:b4:53:1b:b7:e8:f6:b1:9d:63:2e:bb:a5:81:72:
                    28:18:21:39:30:66:ee:d4:c8:d8:78:8c:51:41:6e:
                    f6:e5:ad:3e:4d:61:c2:15:6b:bd:1f:f0:e2:c9:ba:
                    bb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:42:12:9C:FB:AA:ED:55:34:37:CF:33:46:5C:71:A3:A3:8A:8C:CE
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/R0ISnPuq7VU0N88zRlxxo6OKjM4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.112.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7e:e9:b6:81:99:1f:13:5a:38:51:53:19:8a:35:07:fe:0a:35:
         0a:53:e7:9d:07:c6:ed:80:97:fb:01:7e:b7:3b:ec:b3:28:af:
         f6:5a:66:38:e3:43:e8:86:94:14:1a:00:32:76:cd:a6:bd:07:
         e1:6a:d2:af:9d:23:57:8d:20:bf:a7:f6:8e:8e:59:f4:8c:d1:
         50:d0:fe:94:bc:3f:0a:5a:eb:b4:ef:a2:bd:38:13:a9:64:34:
         cf:29:0c:8d:c1:5d:8f:b8:c0:43:5c:36:9e:66:27:bc:db:eb:
         96:13:41:0a:3e:43:ef:6b:af:c3:65:7e:31:9a:f7:58:d7:ed:
         03:a9:a0:bb:1e:50:e7:37:d2:64:71:fc:a7:5c:ed:3f:24:61:
         9c:ff:9d:e1:c9:36:64:1b:c1:93:34:a6:29:b3:00:84:90:3a:
         63:e9:57:41:13:38:db:f3:57:ad:8c:e2:cd:7a:8a:12:61:75:
         d7:bd:47:2d:59:88:4b:70:94:98:1f:35:d5:c9:b5:d2:8e:49:
         7c:c4:a5:22:e0:6f:bc:8a:07:50:9a:ae:20:94:09:2a:3e:91:
         98:19:aa:5d:47:68:c2:9e:23:40:37:e1:16:df:f6:b9:2f:2b:
         53:ad:af:2c:b6:b4:88:80:2d:ae:0b:96:2c:db:6d:5a:de:ec:
         b0:a5:51:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org