Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/XJGmUHqbHST6VCNRtxIbK08Gb30.roa
File:                     XJGmUHqbHST6VCNRtxIbK08Gb30.roa (raw, json)
Hash identifier:          yOGWxNe9mIIHiUS9bZjw7znyV8+BlGL80r1fgho3a8I=
Subject key identifier:   5C:91:A6:50:7A:9B:1D:24:FA:54:23:51:B7:12:1B:2B:4F:06:6F:7D
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03DA
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/XJGmUHqbHST6VCNRtxIbK08Gb30.roa
Signing time:             Sun 01 May 2022 01:33:03 +0000
ROA not before:           Sun 01 May 2022 01:33:03 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        42.127.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 986 (0x3da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:33:03 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=5C91A6507A9B1D24FA542351B7121B2B4F066F7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:99:0b:c3:85:df:9f:7e:99:39:38:d1:4b:e8:
                    fd:fd:b6:e3:61:28:cb:9c:cd:b8:0e:cd:d4:f2:b6:
                    b7:1b:22:4e:f2:7b:a9:b6:e4:c7:e2:66:80:c2:45:
                    0d:02:84:94:ab:7d:ce:36:34:9f:fd:fc:30:5e:17:
                    c2:c1:ac:70:0a:52:83:c0:f8:c1:2b:a5:a0:86:0a:
                    10:33:c4:81:99:c6:7a:db:a6:52:24:05:49:97:03:
                    5c:f3:a0:0a:fd:75:21:88:1a:d6:72:48:9e:55:19:
                    21:52:38:f7:c8:c9:f7:d6:5a:c0:4f:da:79:db:cc:
                    59:64:ab:19:d3:85:32:ee:11:fe:2c:25:32:13:2b:
                    1a:e8:79:05:30:be:b0:76:ce:bf:07:21:90:ef:0d:
                    0b:6c:05:cd:2c:ef:d2:de:94:ab:39:25:69:66:bc:
                    ff:45:9e:0e:ae:af:91:1f:13:33:f2:67:94:78:6f:
                    3c:51:66:2c:5d:f7:43:36:fd:80:80:89:70:9d:4f:
                    19:43:5a:c5:1c:8f:0e:3a:a7:88:c0:97:e1:11:5d:
                    44:65:32:bc:90:94:34:bf:a5:48:f9:f3:4f:a2:14:
                    31:6e:15:d0:3c:47:2f:2e:cb:96:64:57:89:48:ae:
                    05:e4:1a:e4:c3:a7:e0:a7:d2:da:af:08:e4:3c:b3:
                    a0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:91:A6:50:7A:9B:1D:24:FA:54:23:51:B7:12:1B:2B:4F:06:6F:7D
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/XJGmUHqbHST6VCNRtxIbK08Gb30.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.127.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         bb:42:a7:08:a3:1f:89:fd:e9:75:2c:a1:d3:9a:34:e9:bf:23:
         5e:95:c4:00:ba:1d:79:b6:60:f3:ab:4c:4b:16:43:6f:3b:25:
         60:26:6f:5a:24:55:1e:3c:b0:73:21:ed:6a:07:3f:e3:f1:77:
         2b:d9:7c:ce:71:45:40:25:12:f0:be:a5:ac:33:50:3e:5f:36:
         2c:d2:dd:9e:5c:b8:ca:b2:6e:15:31:c5:aa:6b:67:a4:96:e9:
         4d:cf:7c:32:3c:4e:89:85:db:40:d3:03:3a:d1:f0:13:37:fc:
         76:28:f5:5e:f0:3a:10:4e:51:40:2a:71:3c:77:fb:ac:a6:ed:
         53:4e:b7:a0:ed:42:46:83:01:39:fc:f3:d8:ac:d0:5e:80:94:
         5a:57:b3:98:96:42:a9:25:e8:ee:26:7c:c6:6f:4e:68:18:7b:
         f0:11:f5:a6:37:32:6d:fd:49:17:e0:1c:6d:6a:77:71:36:b6:
         34:4a:b7:f5:c3:5c:d0:7f:79:c5:0d:5b:f7:c6:fe:8a:fa:b0:
         8e:13:e4:4a:78:69:f3:b3:4e:70:98:b6:a5:76:57:55:71:28:
         10:32:a3:00:79:3d:87:a1:f2:ef:2b:1b:84:45:f1:8a:66:c6:
         b4:1c:49:94:2f:da:8c:47:04:01:1d:43:1a:36:3a:96:01:a1:
         69:35:67:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org