Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/WOFNw1UKYnQR8Kh_wqdQMyB-wuc.roa
File:                     WOFNw1UKYnQR8Kh_wqdQMyB-wuc.roa (raw, json)
Hash identifier:          dBi/omEL5fXpV9cwauEvuL0O/LMCh17c4pkUysWGcpM=
Subject key identifier:   58:E1:4D:C3:55:0A:62:74:11:F0:A8:7F:C2:A7:50:33:20:7E:C2:E7
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       043C
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/WOFNw1UKYnQR8Kh_wqdQMyB-wuc.roa
Signing time:             Thu 13 Apr 2023 09:55:29 +0000
ROA not before:           Thu 13 Apr 2023 09:55:29 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        42.125.232.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1084 (0x43c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:55:29 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=58E14DC3550A627411F0A87FC2A75033207EC2E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d4:82:7b:d1:8f:8e:b9:a8:55:16:bf:7b:a2:
                    6f:7b:94:de:9b:f7:f3:a0:1a:85:29:7a:8c:91:60:
                    2d:1b:82:0a:c4:f3:34:67:87:50:7a:7c:4d:cd:87:
                    8a:a8:18:eb:3f:44:59:7a:d8:8e:dc:cb:25:04:90:
                    78:8a:d9:5d:4d:41:61:8a:5a:9b:d3:0b:d3:ae:2a:
                    13:ce:8c:43:66:59:81:cf:98:84:b6:9e:ee:25:b1:
                    ef:c1:77:8e:c2:55:35:1d:df:d1:40:39:4d:02:7e:
                    06:87:48:a2:d1:1c:9e:b6:c9:01:21:cb:8d:de:ce:
                    80:76:80:78:d5:d9:5e:78:73:dc:06:e1:41:52:a5:
                    3a:d6:6a:99:0d:39:fc:09:32:7f:cd:ef:75:7b:10:
                    9a:41:1f:84:d7:47:84:21:f7:eb:11:f5:cc:96:0f:
                    2d:55:02:54:ec:86:58:f5:d6:db:5f:1e:bc:79:b6:
                    42:22:0c:8f:e5:ce:85:53:88:18:b9:37:a4:d2:49:
                    5b:50:fc:39:1d:5a:46:8e:c7:1e:61:72:69:e6:cd:
                    8b:21:ec:86:02:e9:3d:74:e8:34:c8:05:6f:37:2a:
                    6f:9a:7c:7a:a3:3d:1b:28:13:60:14:a0:4d:9d:cb:
                    ab:4e:93:35:1b:e6:76:5b:91:14:b2:f7:d9:e6:74:
                    4b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E1:4D:C3:55:0A:62:74:11:F0:A8:7F:C2:A7:50:33:20:7E:C2:E7
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/WOFNw1UKYnQR8Kh_wqdQMyB-wuc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:0e:ae:0b:1b:f1:4e:56:bb:84:08:62:af:4e:6d:e7:dd:61:
         10:36:d1:9d:80:ff:2d:3f:1e:06:a7:cc:11:9d:1c:b8:dd:24:
         08:c5:b5:e0:ed:b4:c4:79:87:ec:9e:29:6d:dc:53:5a:cd:24:
         2e:f3:94:0f:58:b9:2e:bb:6d:e1:2d:e5:eb:0a:c5:2e:42:3d:
         47:5e:d1:01:44:bb:f1:ed:27:50:20:42:b8:fc:fd:55:86:f8:
         1e:f0:c7:01:d2:cd:3b:7a:cc:fe:b8:03:7a:d3:d4:55:b0:41:
         1e:9f:6d:44:44:6a:c1:8d:2d:45:92:fb:d4:b2:d4:3e:b0:cb:
         33:d0:7d:b8:e9:26:3d:f3:50:dc:85:68:46:5b:4e:af:2f:d2:
         53:ed:e5:ae:a8:6d:84:c3:3e:81:7c:49:95:1b:93:3f:cc:19:
         09:b5:d4:ef:93:0e:ae:9a:2a:79:4b:89:60:96:95:71:fc:4a:
         2a:33:cf:51:9c:59:52:25:9f:15:65:df:9b:0d:be:80:47:a9:
         5e:7f:02:1a:6d:cf:46:3c:14:af:bb:40:83:3a:cb:a0:ba:08:
         58:73:7d:56:53:f7:80:92:9d:3a:d2:ce:98:ae:7f:52:16:14:
         27:bc:49:02:87:5f:d4:f1:03:2c:9f:45:5b:19:cc:e4:69:06:
         11:dc:50:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org