Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/TeIlLfdwr4bW9DHy_0OHFyplciI.roa
File:                     TeIlLfdwr4bW9DHy_0OHFyplciI.roa (raw, json)
Hash identifier:          Flm/ntHzPzjY124kZFTDTjreKgWdfi6o8pK76kjTW50=
Subject key identifier:   4D:E2:25:2D:F7:70:AF:86:D6:F4:31:F2:FF:43:87:17:2A:65:72:22
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0422
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/TeIlLfdwr4bW9DHy_0OHFyplciI.roa
Signing time:             Thu 13 Apr 2023 09:52:28 +0000
ROA not before:           Thu 13 Apr 2023 09:52:28 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        42.125.228.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1058 (0x422)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:52:28 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=4DE2252DF770AF86D6F431F2FF4387172A657222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:18:2d:fd:a4:a3:c9:c4:f9:df:34:1d:da:be:
                    4c:21:8e:c9:07:0b:1e:d5:16:43:3e:86:e6:e8:40:
                    ed:7e:1e:dc:99:df:dd:a0:47:42:26:de:e2:92:e5:
                    bb:98:2e:84:30:60:7d:4a:0e:79:8a:51:af:5e:11:
                    ef:bb:a4:9f:80:02:45:dc:61:64:d2:10:2f:c2:fe:
                    c7:a6:86:bd:1f:f1:e5:f0:f2:d6:f9:bf:54:f9:e9:
                    7d:17:3b:ec:83:0a:a3:ae:5a:80:65:60:39:88:7d:
                    7d:24:d9:84:14:a5:78:33:fa:f3:d4:18:3d:1c:34:
                    24:34:25:7d:db:80:7c:0b:61:8a:69:e7:c7:11:45:
                    b8:53:42:a6:53:20:03:2e:39:47:ce:a3:d1:a4:61:
                    94:4d:ea:ff:14:8a:a5:6d:f4:5c:35:88:10:97:45:
                    fb:f2:17:9f:5b:65:87:1e:7b:27:8b:66:e7:81:0f:
                    7f:24:15:6e:bd:92:8d:17:ca:53:8f:d4:9d:26:15:
                    0c:8a:c7:9b:03:c9:8f:b6:84:ef:a9:f1:bb:7c:77:
                    6c:57:23:ab:46:a4:09:36:2f:10:e5:8b:fa:49:d7:
                    4e:4d:78:da:82:3b:9e:72:31:38:14:4b:e3:33:cc:
                    fb:42:06:85:ae:81:f3:4f:4e:f8:a3:d0:65:18:c5:
                    76:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E2:25:2D:F7:70:AF:86:D6:F4:31:F2:FF:43:87:17:2A:65:72:22
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/TeIlLfdwr4bW9DHy_0OHFyplciI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:23:94:4b:4e:f7:4f:f1:85:17:2c:b5:3a:3d:ae:5b:41:ba:
         02:10:65:99:4f:96:6d:ab:d5:8f:43:a9:54:c5:bc:02:53:87:
         0b:24:e2:a7:88:c3:8a:20:23:e4:c6:57:27:ad:96:5a:7e:51:
         82:55:53:3f:4c:13:2e:6a:73:53:fb:dd:9d:c6:fd:7d:fb:c8:
         91:42:5c:37:a5:be:20:52:a0:79:d5:4c:ab:ac:1f:1c:c0:f3:
         23:3b:e5:ed:a2:75:4b:c8:5c:77:8a:d2:ac:a1:b8:31:06:be:
         4c:8b:96:4b:53:4a:b8:2a:19:6b:fc:c7:3a:d4:eb:21:59:fc:
         61:5e:eb:51:79:41:3e:9d:11:01:58:d9:de:0b:78:da:6b:7a:
         cc:25:bd:cf:78:34:62:16:09:ce:de:97:c5:ab:c3:1a:0f:b7:
         de:f8:fa:a0:ff:66:d4:f1:65:1c:dd:7d:0c:07:f0:00:48:3b:
         ef:1e:26:da:90:67:38:af:1c:bd:97:0b:9f:0d:ac:f6:56:43:
         49:8b:28:2f:8c:5e:b0:0e:26:b1:af:42:8d:b5:f5:78:52:8b:
         c9:17:93:83:01:89:8b:0a:8f:81:e1:0c:39:d4:44:99:57:2b:
         e8:8d:da:b1:9c:74:b5:9a:9c:3e:3a:68:82:4f:bd:e0:42:03:
         3d:2f:35:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org