Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/R57LGTU34twLww3CDDjUwDBMwO4.roa
File:                     R57LGTU34twLww3CDDjUwDBMwO4.roa (raw, json)
Hash identifier:          qjTOVfeVTBlaEQ5V0DIjYsv75qQ+cGVR9DGR/JNGoCU=
Subject key identifier:   47:9E:CB:19:35:37:E2:DC:0B:C3:0D:C2:0C:38:D4:C0:30:4C:C0:EE
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0309
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/R57LGTU34twLww3CDDjUwDBMwO4.roa
Signing time:             Tue 25 May 2021 02:42:02 +0000
ROA not before:           Tue 25 May 2021 02:42:02 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        220.148.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 777 (0x309)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:02 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=479ECB193537E2DC0BC30DC20C38D4C0304CC0EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7e:b6:30:67:35:b9:c1:f3:a1:fe:26:4a:2b:
                    e5:31:0d:77:4b:74:d5:3c:3a:85:43:10:d0:d9:38:
                    1b:24:5c:eb:19:ae:24:b6:31:5e:4c:b4:ee:b0:1d:
                    1b:64:85:4f:8f:3b:c6:52:f6:d9:a6:ff:8c:bc:f9:
                    8e:ca:51:71:4a:c4:f1:8a:90:a6:ae:f1:14:f9:c0:
                    dc:b3:32:64:04:b1:ab:ac:2f:87:93:af:62:1d:b7:
                    a5:7b:ab:40:20:28:58:c5:a5:e9:77:8b:86:91:c3:
                    eb:aa:ef:ca:22:c7:aa:37:bf:2a:b0:db:d8:59:da:
                    b9:ac:58:21:2d:42:a8:1d:88:82:7f:f9:ff:c2:a9:
                    1d:0d:6a:4c:41:f5:1f:a6:01:87:4b:3a:7e:fd:4a:
                    e6:0b:c5:fc:ce:79:e3:ec:86:31:ec:f2:8f:6d:e4:
                    b3:94:e4:29:da:36:c2:94:63:b6:ef:cd:59:ff:71:
                    0c:1b:48:77:1d:a5:00:61:35:0f:96:64:cc:e4:51:
                    7e:be:62:ac:fd:98:44:1e:1a:61:64:19:f6:dc:d1:
                    3b:7a:f5:e6:c1:0e:9e:e7:89:1d:21:26:6a:15:ff:
                    f8:56:46:30:c5:bc:bd:d7:73:f9:40:fa:46:b7:d7:
                    5b:27:10:96:7b:c1:81:ab:cc:91:56:42:10:89:53:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9E:CB:19:35:37:E2:DC:0B:C3:0D:C2:0C:38:D4:C0:30:4C:C0:EE
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/R57LGTU34twLww3CDDjUwDBMwO4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b6:b5:0f:89:f6:e0:2d:15:d8:90:3f:90:26:aa:b3:0a:0a:e6:
         07:a2:98:26:1a:37:8f:18:49:3f:a4:63:0f:4b:9b:b4:91:5e:
         c7:b4:8e:8a:bb:4d:b6:f2:48:71:24:d3:62:41:dd:65:d8:26:
         f2:69:7f:d8:7e:09:82:03:ac:2e:b4:5f:5e:f3:6d:63:fa:a0:
         b1:51:a4:f9:16:e1:3f:f4:87:b3:d5:36:ae:30:71:c6:40:c8:
         df:78:7f:a9:8b:95:d6:1c:c4:e6:d7:e1:10:9c:0f:35:9d:0d:
         01:64:fd:cb:ce:75:68:e8:33:e3:5b:43:25:10:db:ff:fd:dc:
         fd:d1:ae:54:43:19:84:2c:1b:37:c7:ff:b9:18:76:a8:99:2c:
         b4:dd:7d:c7:52:4e:ed:3d:6c:d2:9c:5f:27:57:da:4a:e4:5d:
         27:1c:4a:98:41:e6:6c:94:39:d8:87:ae:28:09:73:56:1d:bf:
         9f:1d:5d:cd:69:8c:ef:6b:a9:4f:01:d8:0a:1f:8a:c1:a7:8c:
         7b:62:51:d9:4d:3e:0a:22:2b:9a:74:38:f0:2a:10:8c:24:d3:
         69:86:a0:09:f6:9a:5a:4b:a2:5f:8a:17:3f:56:c0:5f:83:ee:
         70:e8:9b:4b:4b:12:5e:ee:88:80:1b:2f:9b:84:c3:a2:d9:c9:
         28:48:4f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org