Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/Vw8c3hRyW80mAwfIfXHSGo-I13I.roa
File:                     Vw8c3hRyW80mAwfIfXHSGo-I13I.roa (raw, json)
Hash identifier:          BcSmCqIcfeGt7mFDH/Kxk2wUW7st6cX1o05NXMHDEEg=
Subject key identifier:   57:0F:1C:DE:14:72:5B:CD:26:03:07:C8:7D:71:D2:1A:8F:88:D7:72
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03E0
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Vw8c3hRyW80mAwfIfXHSGo-I13I.roa
Signing time:             Sun 01 May 2022 01:33:04 +0000
ROA not before:           Sun 01 May 2022 01:33:04 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        116.254.64.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 992 (0x3e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:33:04 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=570F1CDE14725BCD260307C87D71D21A8F88D772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0b:93:08:c5:0c:c0:05:e6:94:5a:2e:10:6f:
                    6f:e1:95:ef:7b:be:2a:6d:96:1f:40:cf:b0:0f:ac:
                    11:a3:c4:e2:e4:01:91:c8:44:62:77:4c:23:a4:60:
                    79:d5:aa:fd:e4:c5:82:0e:02:d5:85:ba:12:6f:86:
                    4a:c1:36:0e:1e:4c:b6:04:bb:ce:b6:6e:a8:63:cb:
                    37:a5:26:0d:d2:43:94:53:89:5c:5e:27:02:83:4f:
                    09:77:f8:47:a4:1d:d5:88:e2:e5:55:fd:8f:e1:de:
                    ab:9d:ce:59:4c:24:85:06:c7:3a:12:98:50:09:42:
                    b1:cc:cb:38:02:60:d7:05:92:1a:29:6d:6c:55:04:
                    69:0b:68:f2:6b:db:3c:be:77:92:6b:db:3a:f9:e0:
                    9b:cd:d7:e5:21:05:9f:50:34:df:35:b8:dc:83:22:
                    67:f5:4c:b4:33:eb:f7:15:7d:f2:db:8a:1a:78:64:
                    6d:65:3a:7a:47:0e:3a:b2:62:c1:2d:3e:ba:9f:b2:
                    b7:ee:74:46:d5:71:ff:d4:f3:17:d2:a9:8d:bf:8b:
                    60:74:b7:52:97:09:67:ff:f8:1f:d0:5f:a1:43:7d:
                    78:43:92:bf:fc:a8:f8:98:9b:e6:96:15:14:0a:aa:
                    b0:ec:40:d2:ab:a0:b7:90:dc:82:92:36:da:ac:8b:
                    b1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0F:1C:DE:14:72:5B:CD:26:03:07:C8:7D:71:D2:1A:8F:88:D7:72
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Vw8c3hRyW80mAwfIfXHSGo-I13I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.254.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         23:91:dc:52:6f:17:f1:f7:06:ac:7d:d7:4c:0d:f9:9c:09:e9:
         28:cd:2e:23:6e:73:2a:d6:9a:2b:62:13:82:c8:a1:fb:b8:1c:
         b2:cb:8b:19:59:31:83:dd:db:db:4d:d1:03:83:59:b1:73:01:
         9c:75:5b:dc:5e:2f:4b:61:f3:cb:09:dc:8e:c5:5d:ad:7c:d6:
         a2:ef:9c:d1:93:a0:27:de:13:49:ce:ba:34:49:5c:e6:b9:ee:
         df:bc:77:60:b8:e7:01:5e:3e:1a:a5:40:7e:4e:f2:1e:18:a6:
         2a:bc:7f:ba:7b:c9:67:86:6c:0d:c9:71:f9:4d:73:a1:8a:80:
         a2:38:11:2a:a4:bb:7f:7f:df:fd:d3:61:96:7f:f6:4d:66:3b:
         02:0f:f5:4d:32:16:f5:9d:89:a0:54:74:e5:8a:ba:13:1a:a8:
         36:ea:76:28:52:36:27:f1:b0:ed:15:67:80:81:7f:29:b5:f4:
         e9:45:44:3e:d0:12:69:27:8a:ee:e1:54:01:2b:c6:0b:79:e3:
         ef:9a:5a:72:0f:69:98:3e:5a:9a:36:f9:36:da:a7:58:49:cf:
         ff:b8:c2:dc:b3:42:04:33:62:e9:5b:7f:f1:03:30:38:20:dc:
         5d:3e:e4:37:5c:fb:c1:7d:7a:3d:81:c4:cb:2e:4b:9e:9f:5a:
         41:98:30:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:16 2023 by rpki-client on console-ams.rpki-client.org