Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/W1lxc1dpxEHHK9LZM8wzlQCfROU.roa
File:                     W1lxc1dpxEHHK9LZM8wzlQCfROU.roa (raw, json)
Hash identifier:          uzEEi5TiqsJDNEnmPYXGPT841CGIEiGi/lPeM8nCKJo=
Subject key identifier:   5B:59:71:73:57:69:C4:41:C7:2B:D2:D9:33:CC:33:95:00:9F:44:E5
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03EA
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/W1lxc1dpxEHHK9LZM8wzlQCfROU.roa
Signing time:             Sun 01 May 2022 01:33:07 +0000
ROA not before:           Sun 01 May 2022 01:33:07 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        110.172.56.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1002 (0x3ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:33:07 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=5B5971735769C441C72BD2D933CC3395009F44E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9c:72:b7:ac:0a:1a:23:7d:13:67:f2:15:0e:
                    13:f1:87:42:bb:b6:1c:72:4b:eb:2a:f2:34:b3:a1:
                    73:01:1d:be:ef:5e:9d:e7:94:01:c9:cb:92:6a:b1:
                    39:e0:65:dc:2e:f6:65:90:08:d6:ae:92:19:89:ff:
                    a9:cd:47:c8:6e:07:10:c3:e8:14:e6:90:ac:59:43:
                    35:a2:82:5d:71:65:c4:00:1b:20:dc:80:89:7a:d6:
                    0a:c2:f1:bb:25:2a:91:c7:18:89:7a:0a:e6:f8:d1:
                    98:c5:ef:14:0d:df:d8:5f:0f:42:29:48:d0:ea:e0:
                    cb:95:86:74:bb:57:9a:de:27:ad:eb:81:55:f9:00:
                    c5:cd:88:8c:4e:16:86:d8:bc:01:f5:e6:e8:0c:8e:
                    c5:2a:c1:42:11:bf:05:5e:39:8d:fb:63:88:69:b5:
                    cd:ca:45:53:2c:e4:07:49:41:27:3a:76:ce:0d:82:
                    c6:38:5c:a3:ec:84:56:1f:31:5d:a5:45:47:7d:c7:
                    c0:70:aa:3d:b0:e7:f4:3b:a7:4e:27:86:b8:77:e9:
                    32:72:51:06:7b:07:09:7c:36:56:61:ab:f3:73:95:
                    69:cd:25:63:b7:0c:03:16:54:71:a0:5b:80:93:52:
                    9a:9f:4c:47:13:2c:e9:89:1d:c9:78:0e:b8:44:c2:
                    b0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:59:71:73:57:69:C4:41:C7:2B:D2:D9:33:CC:33:95:00:9F:44:E5
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/W1lxc1dpxEHHK9LZM8wzlQCfROU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.172.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:62:a7:16:7c:1f:25:c8:42:16:a1:0b:01:0d:56:e6:2a:b2:
         0a:25:c5:0a:ae:c6:42:24:01:93:72:41:36:8f:f7:51:44:b8:
         d1:d7:4e:a2:a7:9a:21:5a:26:88:44:e9:1b:8a:6d:5f:57:89:
         08:ea:35:0d:22:d5:f6:c7:6e:4e:f1:cf:c5:38:00:f0:d2:9e:
         03:74:87:25:f8:cb:81:27:79:be:6c:85:4f:68:6d:02:40:77:
         0b:96:78:f9:7e:08:5a:19:33:dc:85:03:56:56:63:51:54:12:
         48:a2:28:80:d9:ec:79:02:74:35:c6:1a:1a:55:66:c8:1c:ad:
         37:c8:c8:ba:b3:e7:c0:28:af:0b:f6:01:93:05:70:ef:1a:75:
         2e:5d:19:1e:f2:7a:07:6a:78:72:f4:ad:15:66:d0:59:32:75:
         d3:3e:e2:67:1c:b2:0f:10:d4:38:6e:fc:ca:56:fe:7a:3a:c5:
         38:e7:4c:d6:5b:ac:86:9d:19:8e:5a:46:62:62:58:75:78:59:
         53:6a:8d:e9:51:13:96:95:3b:a4:ee:53:27:77:95:e8:8d:d8:
         0c:ce:b5:fa:06:98:58:8e:c7:e8:77:66:7b:53:22:9d:ed:cc:
         8a:6c:15:86:90:f2:a3:ae:7b:39:a8:54:19:0d:c0:cc:7c:3d:
         24:09:3e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org