Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/REc5LeFs0dbZrLQ6ROgOuYSo694.roa
File:                     REc5LeFs0dbZrLQ6ROgOuYSo694.roa (raw, json)
Hash identifier:          BrHHohV8SvZM2Gy0p0nbJNdj35TfvuToXPieEsZaFqc=
Subject key identifier:   44:47:39:2D:E1:6C:D1:D6:D9:AC:B4:3A:44:E8:0E:B9:84:A8:EB:DE
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       045E
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/REc5LeFs0dbZrLQ6ROgOuYSo694.roa
Signing time:             Thu 13 Apr 2023 09:57:54 +0000
ROA not before:           Thu 13 Apr 2023 09:57:54 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        42.126.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1118 (0x45e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:57:54 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=4447392DE16CD1D6D9ACB43A44E80EB984A8EBDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7c:06:4a:e1:8e:c6:f2:2e:48:dd:99:8a:65:
                    72:59:0d:cb:79:28:f5:fd:bd:37:8f:b9:00:65:39:
                    f8:00:95:a8:dc:73:f7:6b:27:47:cd:b7:df:ae:97:
                    3b:14:29:3c:e4:f8:85:ec:e0:c3:16:6a:d2:25:0b:
                    f4:b5:d5:3b:e0:f4:86:54:30:08:33:1c:ab:c0:a5:
                    0f:87:87:9a:c6:42:36:92:d6:ff:b8:df:2e:d2:a2:
                    b3:b6:75:c0:4b:1d:63:78:85:47:b5:be:ca:e2:15:
                    c8:09:72:14:15:94:8d:09:2c:5c:fc:40:b2:07:85:
                    5d:d1:48:29:30:30:44:bb:e4:1a:6e:d9:08:ee:07:
                    a2:37:05:b2:a8:db:ee:76:2b:81:09:18:df:42:f2:
                    ee:35:df:96:47:82:83:db:15:39:5f:59:0a:54:99:
                    82:26:75:b4:f3:41:f6:49:2b:12:51:bd:d2:40:2c:
                    89:8d:ec:c7:64:1a:65:46:2b:91:b1:52:bc:cf:90:
                    e7:79:c6:bf:2d:4a:97:ec:b9:2e:e2:d4:38:f2:fd:
                    fa:98:69:7e:66:09:b5:3a:bd:5e:07:61:33:56:1f:
                    cd:0c:1c:b4:ef:c7:82:d5:92:9e:41:eb:6a:b6:83:
                    42:51:c4:f4:89:04:d1:ff:8a:2b:ff:15:56:8e:db:
                    2c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:47:39:2D:E1:6C:D1:D6:D9:AC:B4:3A:44:E8:0E:B9:84:A8:EB:DE
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/REc5LeFs0dbZrLQ6ROgOuYSo694.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.126.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         44:4a:3f:45:a9:c9:da:b0:7b:33:82:10:fe:4c:2b:1e:b4:65:
         99:7c:35:6f:2f:79:d9:93:5f:de:85:21:71:5f:f6:57:c2:0e:
         e1:a4:f3:d2:07:3a:21:2f:fd:61:ae:9b:8a:f5:fb:00:ee:e6:
         2a:13:18:9e:33:f2:79:e9:17:f8:72:aa:fe:9a:a1:24:80:6d:
         69:17:88:28:92:fe:a5:5b:29:3f:25:a8:ae:f0:4d:da:4a:30:
         e9:3b:49:94:1f:b7:be:ff:f3:06:7c:b9:44:7b:f2:fd:25:f4:
         e0:90:13:aa:a0:75:1c:b8:6d:fa:fe:cf:4d:5a:a5:67:57:78:
         76:40:80:4a:94:a5:e7:f9:e4:5c:67:ae:40:79:c7:f8:c9:96:
         be:d7:d0:be:ef:a2:2e:f8:88:20:f2:e8:1a:7c:99:3e:c8:1d:
         f7:bf:22:d3:e3:84:10:0a:3c:68:c9:df:35:df:bf:6b:32:be:
         2f:53:19:44:41:83:e1:cc:3d:ba:d5:e6:d0:4b:b3:26:33:d2:
         a9:2b:11:a2:15:4e:3d:cc:60:f5:49:bd:e1:6b:d7:dd:a9:ca:
         e3:cc:eb:e2:49:1c:d3:57:92:ef:d7:5c:e8:dd:ee:c0:e3:21:
         a6:ba:c0:32:bb:be:c3:b0:76:88:02:98:d9:36:6c:a8:c9:c8:
         b9:7b:93:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org