Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/Ts0i6KQ_AZaQdoRg8w8zEqPPmjQ.roa
File:                     Ts0i6KQ_AZaQdoRg8w8zEqPPmjQ.roa (raw, json)
Hash identifier:          CL7ORvbyYV3INtscZWdu2jo+zX14io74Wxp8aPYVh2M=
Subject key identifier:   4E:CD:22:E8:A4:3F:01:96:90:76:84:60:F3:0F:33:12:A3:CF:9A:34
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03E3
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Ts0i6KQ_AZaQdoRg8w8zEqPPmjQ.roa
Signing time:             Sun 01 May 2022 01:33:05 +0000
ROA not before:           Sun 01 May 2022 01:33:05 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        61.211.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 995 (0x3e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:33:05 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=4ECD22E8A43F019690768460F30F3312A3CF9A34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:67:ce:b9:48:fe:15:8a:d7:d4:8e:be:4f:46:
                    d3:0d:7e:d9:ee:57:35:3f:42:4c:01:b0:e1:a8:cc:
                    fa:21:17:94:c5:23:b8:81:9e:2c:e4:c8:40:33:ad:
                    99:ec:57:12:db:11:9f:ee:61:53:56:cb:7b:23:f9:
                    85:7b:c6:56:a7:a3:80:16:d4:63:92:b0:a9:a3:2b:
                    18:d8:7e:a4:b8:7d:5e:9c:ea:55:cb:a3:75:85:17:
                    1e:f3:31:06:46:3e:e8:c0:80:68:63:30:21:73:f3:
                    a1:b8:a8:2d:23:93:ca:22:ec:65:69:b2:ad:2a:c3:
                    91:9a:b9:68:90:01:78:7f:1e:aa:92:b8:df:e6:77:
                    10:32:87:bc:26:6f:a2:ab:4d:3d:ca:d3:e1:64:ff:
                    1a:98:a4:42:53:61:66:d7:41:07:3d:35:67:08:ff:
                    6d:54:27:1b:5b:9c:97:8c:14:82:69:8f:5b:1a:b3:
                    b7:eb:fd:09:53:78:68:8d:27:76:49:2b:be:c6:b1:
                    5d:21:68:07:27:7a:75:fb:b4:64:fe:16:76:e0:c0:
                    f5:69:31:e1:47:94:82:f7:26:b0:ec:a5:3f:a4:62:
                    8a:35:03:88:5c:2c:cb:2a:2f:42:f6:d0:73:5e:36:
                    05:3b:8e:e1:5b:cf:ca:53:7b:5a:2c:91:17:9f:2e:
                    da:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CD:22:E8:A4:3F:01:96:90:76:84:60:F3:0F:33:12:A3:CF:9A:34
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Ts0i6KQ_AZaQdoRg8w8zEqPPmjQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6e:54:cf:ae:5f:f8:c1:de:8c:11:ce:c7:dd:34:da:d4:33:d7:
         d0:5e:85:dd:f5:a9:80:02:89:56:f9:f1:f2:64:a9:6c:37:54:
         6e:80:cf:3b:75:1a:3f:52:60:62:ef:27:3f:ec:55:98:70:e9:
         99:ef:22:21:9b:a3:ba:e5:b1:ee:97:bd:ba:07:c0:da:80:45:
         90:40:f6:1d:dc:99:c0:77:b4:12:7e:9c:3b:6e:e5:93:88:03:
         9d:51:ba:5d:07:55:4c:b5:0d:b3:3d:64:b9:c2:b9:07:6a:4e:
         18:af:8b:66:8b:d8:b3:df:4c:12:9b:b2:c2:be:c3:ef:aa:93:
         72:63:fd:25:55:16:4b:7d:9d:61:1d:5f:33:82:80:87:37:0c:
         cb:ee:1a:68:07:ff:aa:5d:e5:b1:98:3e:99:5c:36:48:98:6a:
         34:33:d8:e2:b1:2f:76:6b:53:f1:8d:5d:b6:a2:89:30:41:4c:
         82:cd:2f:51:fe:c7:0b:8c:dd:31:e0:59:0c:3d:3f:8c:f9:bc:
         94:af:87:cf:87:a0:29:ef:8b:08:40:96:9b:fc:08:b2:01:7c:
         37:5c:ce:ca:5e:2e:58:ea:6d:b3:2e:25:f5:22:e5:65:22:e9:
         8e:b3:2c:f6:d6:5f:83:b3:3f:28:52:4e:2b:00:e0:f5:2a:09:
         92:60:5a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org