Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/T4sWgi5AutW64z3hq10chWB4QIk.roa
File:                     T4sWgi5AutW64z3hq10chWB4QIk.roa (raw, json)
Hash identifier:          AHXFkeXcUa1zEJZ+KOo5AJhBN2lp0PRs5UfPWWR5Wtk=
Subject key identifier:   4F:8B:16:82:2E:40:BA:D5:BA:E3:3D:E1:AB:5D:1C:85:60:78:40:89
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0376
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/T4sWgi5AutW64z3hq10chWB4QIk.roa
Signing time:             Sun 01 May 2022 01:29:37 +0000
ROA not before:           Sun 01 May 2022 01:29:37 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        210.171.240.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886 (0x376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:37 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=4F8B16822E40BAD5BAE33DE1AB5D1C8560784089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:57:94:11:d8:09:d3:d5:5e:3c:88:eb:74:eb:
                    96:86:d8:ad:6d:97:54:76:2f:f3:8d:33:1e:7f:3e:
                    6e:02:56:ee:5c:e6:62:65:99:dc:df:b9:c6:aa:54:
                    bd:f3:5a:50:64:f7:3e:89:ab:7a:fc:bd:72:af:4c:
                    da:8a:9e:76:36:d0:9b:7f:ad:3a:32:97:73:9d:16:
                    56:d4:2d:4a:a1:ec:6c:83:87:d6:83:c0:60:a5:9f:
                    58:b3:ee:cb:99:e4:d3:d9:2a:93:71:06:e4:6f:cf:
                    59:0f:64:13:c6:01:e4:c9:18:aa:f1:99:53:f1:5f:
                    5b:8a:47:1a:7b:42:f4:02:81:f4:5b:83:ce:ac:ab:
                    7e:cd:4f:04:33:2b:96:bd:53:a8:94:7d:fb:16:01:
                    54:e2:dd:f7:1a:c7:e9:11:7e:51:53:a9:8d:02:b5:
                    c1:cb:99:6d:6e:81:ce:57:67:1f:3e:50:39:25:b8:
                    e2:9d:33:a6:a3:8d:09:b1:34:7f:19:f6:e2:08:78:
                    a5:98:f1:2f:09:f7:79:94:21:a9:7b:6c:f8:ad:d3:
                    91:3d:25:0a:f6:77:ca:5c:54:f7:d9:85:92:45:77:
                    41:8a:9f:6c:d4:4b:32:70:95:e0:2c:7e:b4:13:d4:
                    38:a9:c2:b4:e6:90:26:9e:74:2f:b6:09:04:ee:ae:
                    a8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8B:16:82:2E:40:BA:D5:BA:E3:3D:E1:AB:5D:1C:85:60:78:40:89
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/T4sWgi5AutW64z3hq10chWB4QIk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:23:9b:0d:6b:c3:88:44:0d:1f:25:76:fe:27:c6:af:0a:a3:
         a6:33:ad:d0:75:1a:3e:9c:9b:e6:8b:d0:d1:7d:6b:e9:50:e8:
         bf:db:94:2b:b9:d9:0d:7c:5c:5f:b0:d7:a8:5c:64:70:0e:7d:
         24:19:b8:67:e8:cf:7e:b2:68:37:aa:8a:6c:da:48:7e:a1:97:
         1e:47:1c:8c:11:67:ec:9e:a8:63:9e:e7:6f:1e:57:24:1c:f0:
         3f:85:5f:e0:8c:f2:3e:70:c3:cd:3f:01:e8:b9:d0:3e:4b:29:
         21:f9:33:48:c1:bd:18:a6:2d:6c:bd:49:7a:c7:3b:e1:f6:59:
         46:9f:43:7f:be:93:77:90:1e:82:fb:44:57:d8:46:42:33:ea:
         e1:9c:bf:71:ae:4a:5b:da:69:85:14:90:91:f1:c8:88:72:31:
         ef:29:33:54:1c:94:6a:5b:c7:6b:54:c0:09:b8:0a:34:77:3c:
         02:f6:77:ea:8a:2f:04:c7:68:e9:d1:f4:80:d5:a4:6b:26:66:
         ef:b1:61:ff:79:c1:ce:e0:c7:2f:a9:0d:77:e8:0f:05:0c:8d:
         41:af:94:95:da:fd:92:a7:ca:d3:36:43:f9:68:4f:d5:dc:dc:
         94:c3:b6:b4:af:b3:c1:7c:a1:e7:27:5d:98:db:aa:ef:4c:8b:
         e9:a3:19:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org