Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/TOczhIpkhIaq_s7RZ_3jI7KkwEs.roa
File:                     TOczhIpkhIaq_s7RZ_3jI7KkwEs.roa (raw, json)
Hash identifier:          8OcM7E02ENU4kJkedKc7yfXudzpiFqjWz2IGBMtz9ws=
Subject key identifier:   4C:E7:33:84:8A:64:84:86:AA:FE:CE:D1:67:FD:E3:23:B2:A4:C0:4B
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       037B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/TOczhIpkhIaq_s7RZ_3jI7KkwEs.roa
Signing time:             Sun 01 May 2022 01:29:39 +0000
ROA not before:           Sun 01 May 2022 01:29:39 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        61.200.96.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891 (0x37b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:39 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=4CE733848A648486AAFECED167FDE323B2A4C04B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6d:3a:f7:61:78:26:3f:d1:ec:de:4d:ff:be:
                    7b:4a:4a:6a:cf:44:07:64:6e:98:92:fb:ed:bd:10:
                    70:c7:3e:25:31:29:e1:49:82:27:a9:b0:25:ba:f9:
                    7f:92:69:57:64:5c:72:19:06:10:e4:0b:a2:c0:d0:
                    fb:25:0b:b6:84:06:01:71:0e:84:8c:0d:71:16:6f:
                    69:12:b2:1d:1e:80:f8:5c:d7:71:2f:ca:87:55:9e:
                    10:54:15:ac:a2:52:ba:66:fe:c8:6c:7b:d8:72:4f:
                    b1:84:de:d6:0b:d6:97:93:10:ee:33:f6:7e:69:45:
                    94:23:10:90:84:22:40:ff:14:ee:f1:e8:97:4d:70:
                    ad:cb:10:6a:c2:83:cf:69:a0:ab:fa:05:d0:67:c4:
                    a0:35:ff:59:14:30:e4:7e:94:c1:79:f3:3b:4b:a1:
                    7f:b8:f7:8a:5a:62:d2:eb:b6:f1:c6:32:09:94:dd:
                    31:fc:3d:27:56:fd:a4:00:7b:da:f3:a5:e0:dc:0e:
                    c7:1c:af:a3:96:2b:88:43:c6:c6:de:bf:a0:d6:cc:
                    a5:f4:7c:5c:65:b8:4c:fa:b4:69:49:49:a4:11:75:
                    19:4c:83:8e:84:cf:d9:22:8a:10:8e:57:44:2d:f4:
                    fc:c3:5e:07:4e:5c:59:c4:af:66:7d:d2:e9:57:4e:
                    cb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E7:33:84:8A:64:84:86:AA:FE:CE:D1:67:FD:E3:23:B2:A4:C0:4B
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/TOczhIpkhIaq_s7RZ_3jI7KkwEs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         47:9d:a6:f6:35:9c:ed:d6:77:7a:18:41:28:40:74:49:fd:6b:
         6b:c9:e8:6b:8d:72:8c:f0:f1:1b:8b:87:0e:81:5f:b2:27:d1:
         68:c6:02:0e:da:95:60:86:ce:39:02:cf:96:73:c7:23:21:9c:
         5d:88:8e:3b:82:8e:b7:46:fe:f7:36:90:cc:80:3a:20:a2:33:
         57:74:11:66:09:be:2d:7f:38:67:a6:07:6c:1f:79:76:a8:c7:
         4b:1d:c5:e1:c8:c2:5a:a9:79:1f:e0:99:f6:9a:8f:57:7c:40:
         ac:59:10:92:bd:ce:8a:6e:64:dd:64:b0:0b:aa:9f:f3:cb:5e:
         e7:17:79:e0:cf:04:96:90:12:de:34:c7:58:93:2a:ed:3c:69:
         b9:ed:e6:2a:9c:b2:af:f9:62:02:db:6a:06:1f:38:f3:7b:9d:
         0e:0d:6f:65:3c:6b:6a:2f:ec:e4:06:8f:1f:40:95:ed:3c:be:
         c9:c2:41:2d:cb:09:dc:50:e0:aa:b2:b7:82:9c:6f:e1:3e:72:
         c7:fd:2d:55:10:80:c6:7a:87:4d:1c:b0:41:79:6d:89:03:ff:
         25:35:74:ef:ec:de:9a:52:5d:be:e2:22:c7:fa:89:8d:db:dc:
         ec:50:8f:93:ba:a5:85:a6:57:82:22:1f:70:0a:07:64:ca:32:
         99:7a:2d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org