Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/SjPQLi2FODs4WaDGh57E1LQavME.roa
File:                     SjPQLi2FODs4WaDGh57E1LQavME.roa (raw, json)
Hash identifier:          xxW7ioYRLagxmW1+qcMaQMjI+Y4XlVyMCOhU5M5CbSI=
Subject key identifier:   4A:33:D0:2E:2D:85:38:3B:38:59:A0:C6:87:9E:C4:D4:B4:1A:BC:C1
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       040C
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/SjPQLi2FODs4WaDGh57E1LQavME.roa
Signing time:             Thu 13 Apr 2023 09:52:18 +0000
ROA not before:           Thu 13 Apr 2023 09:52:18 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        220.148.64.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1036 (0x40c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:52:18 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=4A33D02E2D85383B3859A0C6879EC4D4B41ABCC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:5c:85:a6:e8:fc:8e:9e:52:95:9d:53:19:
                    79:82:86:a9:5a:91:22:86:ab:bb:46:72:c9:14:67:
                    2e:0e:44:87:2a:3d:2a:32:9a:f7:12:e4:29:a0:9c:
                    9b:c9:ec:37:5f:5e:b8:9e:3b:42:46:f2:56:18:89:
                    7e:fb:ac:35:fc:21:41:4c:7b:08:84:a7:44:5c:92:
                    6b:7f:e9:07:97:5e:c5:7e:14:00:1c:ca:82:c1:c4:
                    67:9b:11:e5:14:2e:aa:3e:b4:4f:ae:56:6d:af:79:
                    f6:92:25:c3:a2:f8:84:a7:82:10:48:3c:4f:57:2b:
                    7f:f7:bc:17:68:10:78:46:1f:03:4e:6a:18:ce:74:
                    8d:ae:2c:3a:f6:ea:52:ff:1d:73:13:40:a6:4e:07:
                    ca:66:4a:93:b0:ae:71:65:cb:be:eb:f3:99:67:f1:
                    f7:1b:9c:c1:eb:cd:6d:83:19:6c:d0:1b:b9:ba:0f:
                    a7:c9:f3:f7:81:85:2a:65:90:b6:0e:58:81:d7:ae:
                    77:2c:0e:8f:67:e9:12:f0:a7:40:c3:e4:1e:a6:b5:
                    f5:a6:73:cf:2c:ef:6c:9d:d8:ac:97:5c:40:76:8e:
                    99:e9:08:53:88:d8:21:01:ae:f5:d2:0a:2a:a0:42:
                    4d:84:f6:01:82:bd:86:7e:a2:19:9e:d4:23:2c:21:
                    9a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:33:D0:2E:2D:85:38:3B:38:59:A0:C6:87:9E:C4:D4:B4:1A:BC:C1
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/SjPQLi2FODs4WaDGh57E1LQavME.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         12:69:49:b2:39:bf:a9:6e:e4:1b:97:63:4c:c1:f0:0e:50:ba:
         ab:45:03:4e:41:e9:2d:7d:ec:9b:a7:81:67:8e:9e:2a:07:d1:
         f6:87:71:6b:32:55:4d:88:d9:6d:f1:9c:b5:c7:9e:87:25:15:
         98:54:b1:21:09:98:89:cc:0c:76:3c:88:ce:39:86:6e:c5:b3:
         75:18:dd:c6:a6:f2:c9:b5:b9:f4:35:4d:9b:c3:f9:cd:8f:69:
         2d:bc:f1:76:db:0d:48:78:a0:51:03:07:a7:c7:ea:cf:37:51:
         9a:58:7d:8c:65:a3:4a:81:53:ea:3a:b9:70:64:70:5b:98:5c:
         5f:f3:1e:ae:91:d9:c8:20:fa:47:45:d3:99:ee:bd:3e:c4:9d:
         ba:44:38:84:d0:96:41:dd:b7:4f:59:8c:41:e1:be:5f:62:b5:
         19:a2:b9:70:79:ab:86:6d:5f:28:20:88:a4:59:6f:1f:32:93:
         77:f2:53:40:eb:64:6a:1a:3a:54:09:07:64:c5:e0:00:84:a2:
         c3:4b:98:b8:5b:da:26:b6:d6:0d:01:e9:5c:9d:58:0e:37:25:
         97:bc:ef:ce:1e:21:87:b9:64:d5:12:13:48:52:c8:51:bc:d2:
         50:5d:7c:c0:31:e0:e3:de:33:a7:87:7b:8b:89:17:b5:1a:98:
         e9:52:96:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org