Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/X0Qj3wPoNWofYPFYZcgoxldU13U.roa
File:                     X0Qj3wPoNWofYPFYZcgoxldU13U.roa (raw, json)
Hash identifier:          z9QPTNyhJRnrCGlXFNaSEonIJLQCs3OTKlL1+oDHZKY=
Subject key identifier:   5F:44:23:DF:03:E8:35:6A:1F:60:F1:58:65:C8:28:C6:57:54:D7:75
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       030A
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/X0Qj3wPoNWofYPFYZcgoxldU13U.roa
Signing time:             Tue 25 May 2021 02:42:02 +0000
ROA not before:           Tue 25 May 2021 02:42:02 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        112.140.0.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778 (0x30a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:02 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=5F4423DF03E8356A1F60F15865C828C65754D775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2b:c8:b7:9d:44:cd:3a:2b:3a:f7:04:ec:5f:
                    dc:40:a7:f9:d9:22:84:4e:13:15:6f:92:54:0c:3d:
                    0f:d1:6c:55:ce:4f:4c:04:14:8f:73:1d:21:49:35:
                    10:8f:b3:71:68:31:f8:e4:66:a9:32:54:c5:44:bc:
                    40:34:16:1a:67:27:59:3d:c4:c7:dc:cd:06:7a:6b:
                    dd:46:99:ac:de:c1:62:9c:f7:cd:27:f3:a8:e1:9f:
                    07:4d:af:a9:e1:18:89:e9:f8:ee:f4:25:42:b3:6a:
                    32:6d:20:47:aa:d3:b4:71:7c:b0:0a:e6:a4:bc:79:
                    d3:24:e6:59:f5:38:55:a3:d0:4a:9b:71:28:36:f4:
                    01:8e:da:a6:c5:d7:e6:a7:4f:f6:01:18:5a:b5:16:
                    a4:0a:02:a4:8b:df:0b:f3:86:79:aa:59:34:d6:42:
                    2b:66:8a:85:b5:28:3d:69:5e:f4:55:fd:e0:cf:5b:
                    3c:83:f9:f5:30:95:11:35:66:69:a7:7d:4e:af:35:
                    51:d5:30:66:6a:9b:d4:32:fd:3e:62:a8:36:e3:5e:
                    a3:1d:37:f7:10:53:1e:47:09:94:43:e6:32:a8:ec:
                    95:21:3a:3c:cb:3e:f1:15:96:de:fd:2f:09:0e:66:
                    06:7a:c2:05:ce:7f:04:f8:a8:6b:20:0f:35:3a:52:
                    4e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:44:23:DF:03:E8:35:6A:1F:60:F1:58:65:C8:28:C6:57:54:D7:75
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/X0Qj3wPoNWofYPFYZcgoxldU13U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.140.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         87:d9:0e:cc:4e:2e:36:a2:35:d4:55:4d:b0:0d:83:76:ed:a9:
         8a:71:9f:c1:97:65:1c:f0:c7:10:89:8f:c3:ce:9f:f6:3f:fe:
         7f:52:cf:16:a3:61:7b:f2:2e:3d:1f:ca:9a:98:9f:5d:a8:df:
         e4:c1:23:bf:f4:02:25:ed:52:da:99:24:11:10:b1:66:1c:4e:
         7d:ab:db:93:77:de:a9:50:89:cf:f1:3e:22:f4:e0:75:a0:d2:
         71:16:33:ee:f8:14:28:0b:ab:89:16:f1:21:ac:97:d0:59:10:
         fe:19:db:0a:24:12:73:8b:5d:63:c1:ca:2a:16:9d:4b:ae:e3:
         b9:b7:ba:fd:42:29:b2:97:01:36:da:e4:c8:a8:a4:21:5c:39:
         2a:90:97:0f:7a:fb:5b:0b:4f:dc:58:62:c6:9a:3f:c4:13:29:
         ed:91:03:3b:a8:ef:2a:73:bd:f2:04:f2:4b:66:a4:6b:53:26:
         e5:0a:c9:e7:e4:7e:ba:9f:57:52:b2:94:3d:56:6a:86:a1:79:
         95:11:ec:72:6a:b7:31:2d:92:f2:75:26:a7:fa:0d:8f:a8:85:
         b4:b0:ee:07:83:6c:4a:46:f1:9a:6b:f6:5f:92:31:cb:fb:c1:
         37:e7:5b:f7:89:fd:79:41:1e:24:97:b3:3f:4d:16:bb:87:87:
         b9:08:d8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org