Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/XFotbxAeozlofLx8xNBRpORADH0.roa
File:                     XFotbxAeozlofLx8xNBRpORADH0.roa (raw, json)
Hash identifier:          vXG7dF8LGyBr/V4j8XgIGlVS8rZziJ5eV6exciWXFpo=
Subject key identifier:   5C:5A:2D:6F:10:1E:A3:39:68:7C:BC:7C:C4:D0:51:A4:E4:40:0C:7D
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03F0
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/XFotbxAeozlofLx8xNBRpORADH0.roa
Signing time:             Sun 01 May 2022 01:33:09 +0000
ROA not before:           Sun 01 May 2022 01:33:09 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        218.219.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008 (0x3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:33:09 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=5C5A2D6F101EA339687CBC7CC4D051A4E4400C7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:02:b4:f8:67:ce:c5:46:27:29:a1:84:9a:79:
                    74:8b:db:fc:9b:fd:ca:d7:ba:d3:e9:f2:71:6e:3b:
                    20:1c:0f:37:a7:13:ad:3c:a7:ae:d8:8f:9e:84:50:
                    1d:97:45:a0:e4:88:ef:46:dd:d3:b3:a4:ae:07:06:
                    69:32:f1:c3:7c:c0:32:58:65:cf:d8:c4:dd:7e:8a:
                    94:56:d9:d4:15:ed:f7:08:68:13:5f:f8:e5:6b:dd:
                    6f:03:ce:e0:de:f9:31:86:d5:33:d7:10:e2:65:47:
                    60:28:60:66:36:61:ed:41:e9:f8:27:cc:66:73:28:
                    56:d3:6c:eb:0f:3e:04:66:f7:05:2e:13:23:b6:70:
                    f6:e4:15:67:1e:77:ad:60:2e:8c:29:32:7a:be:58:
                    d5:54:c6:bf:d4:e1:55:39:ce:2e:aa:99:33:24:e4:
                    f1:87:76:fe:cd:ae:cf:fd:76:1c:cd:38:69:6e:70:
                    3e:b1:a5:c6:e4:ca:eb:03:4f:f7:ba:a3:4e:1a:85:
                    93:a7:72:7b:8b:4c:3f:f6:ce:34:d5:b5:2c:5e:8d:
                    2e:fd:f5:e1:30:bc:77:03:f7:22:d4:a1:5f:67:a5:
                    db:c3:fa:35:e7:4e:bb:be:ab:6e:e8:27:b0:f5:16:
                    46:dc:64:bf:9e:6d:df:cb:9b:35:7f:00:78:30:09:
                    25:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5A:2D:6F:10:1E:A3:39:68:7C:BC:7C:C4:D0:51:A4:E4:40:0C:7D
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/XFotbxAeozlofLx8xNBRpORADH0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:9e:d3:eb:28:f0:53:d7:e6:4f:f0:31:d3:7f:dd:b8:34:bd:
         23:db:e5:8f:e1:32:32:23:d6:ea:5d:12:e9:89:ba:70:ba:66:
         d4:8e:83:37:80:e0:c6:75:a0:f3:9d:5c:1b:f6:19:2e:8e:29:
         f0:fc:24:b1:2c:e2:16:0c:7d:5a:80:54:19:cc:c1:ea:63:6f:
         e1:8a:46:e5:df:1e:4a:3c:69:ca:61:e5:b5:29:c6:3a:4c:0b:
         77:dd:f4:e4:e2:39:db:0a:a2:a8:8d:e4:7b:66:62:dc:22:58:
         6d:7e:80:bd:b1:21:eb:d2:dd:1e:18:55:de:0f:7f:3b:a2:2a:
         11:10:d8:24:c5:c6:16:e8:55:6d:65:6a:95:72:fc:32:ce:3c:
         52:cb:a9:75:74:09:df:ed:52:36:a3:98:6c:03:b1:3c:01:1a:
         db:1a:96:2d:65:74:7e:29:08:ee:ca:9c:89:d6:a9:98:1c:90:
         49:dd:4a:b3:a4:8f:60:c4:da:2d:a6:8c:8b:44:8c:52:d5:24:
         5d:37:1f:dd:68:c0:dd:0c:d3:55:47:19:c5:92:7e:a4:f7:74:
         b6:3d:9a:2a:3b:7a:60:00:0a:d6:3e:ff:7f:84:b3:89:b6:2d:
         1c:66:82:98:28:25:d5:16:86:8f:60:66:48:f6:2b:77:80:45:
         0d:a0:ba:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:10 2023 by rpki-client on console-fra.rpki-client.org