Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/XtHeAI24OUJMOxwgQ9WkgNyQH0Q.roa
File:                     XtHeAI24OUJMOxwgQ9WkgNyQH0Q.roa (raw, json)
Hash identifier:          iS8RcdOGq5pc8fTTN9uV/p8Zud8BdYhkz4ZO9KqGruE=
Subject key identifier:   5E:D1:DE:00:8D:B8:39:42:4C:3B:1C:20:43:D5:A4:80:DC:90:1F:44
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0415
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/XtHeAI24OUJMOxwgQ9WkgNyQH0Q.roa
Signing time:             Thu 13 Apr 2023 09:52:23 +0000
ROA not before:           Thu 13 Apr 2023 09:52:23 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        42.125.226.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1045 (0x415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:52:23 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=5ED1DE008DB839424C3B1C2043D5A480DC901F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:21:61:84:87:8c:b2:66:82:ef:2c:4a:b6:c2:
                    a2:eb:46:23:02:1b:7e:af:83:0a:5c:f2:59:6a:49:
                    4d:08:be:b2:5f:26:1d:c0:cf:4d:59:dd:f1:5f:1b:
                    99:01:3d:fa:72:71:56:c5:38:2b:5b:dc:26:5b:5a:
                    54:42:c6:ed:e9:ff:46:28:ab:00:c2:66:c3:d1:79:
                    60:f4:7e:6a:8b:de:a8:bf:da:52:1f:e8:8d:23:fe:
                    85:dc:58:66:22:ee:d3:cc:20:7e:1c:d6:15:bd:d2:
                    35:da:fb:06:60:6d:0f:26:55:a0:c0:42:5d:77:3e:
                    6e:87:ca:b0:17:5a:58:fe:0a:7f:c0:14:12:3f:53:
                    6d:09:0f:17:1e:db:65:a5:e7:88:c9:12:0e:1b:47:
                    07:66:57:9a:05:27:f2:c7:05:08:c3:da:ec:54:e2:
                    ee:4c:9c:63:ad:1b:2b:3c:1f:17:ab:54:5a:2d:8a:
                    ec:f6:19:04:77:40:20:d7:7b:10:53:ea:7d:c8:ab:
                    f8:c4:56:f0:c6:c3:b8:d5:42:75:83:99:b3:44:59:
                    6f:d5:e8:d0:86:ae:af:9b:9d:0c:7d:43:e9:6d:23:
                    54:76:63:c8:a7:02:d6:95:4e:71:a7:e6:17:1a:54:
                    ca:f7:d4:b7:b0:73:f4:89:8e:f1:bd:40:7b:a0:f6:
                    cb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D1:DE:00:8D:B8:39:42:4C:3B:1C:20:43:D5:A4:80:DC:90:1F:44
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/XtHeAI24OUJMOxwgQ9WkgNyQH0Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:ca:a5:b9:4d:39:01:1f:78:6a:f4:9a:a8:0a:89:3f:f8:eb:
         55:93:4f:75:bc:a1:ec:af:ba:a9:5b:45:2c:04:bb:04:3b:f3:
         9e:45:34:93:6f:f8:74:8b:09:34:99:f1:02:d6:4a:0b:23:dc:
         e2:b2:ee:7e:5c:3f:cf:55:d5:9f:95:1b:db:bd:fa:ff:5f:e7:
         d0:ba:f1:7b:a7:ac:fd:2d:6c:62:1f:cd:99:94:f6:e3:67:2e:
         56:f8:fd:39:97:7d:99:a3:f1:d8:13:67:66:5e:32:87:01:fb:
         c4:0c:ce:f0:7c:2b:2f:59:c3:ad:1d:d2:b3:d7:3c:09:3e:04:
         7d:2b:17:1a:1f:c4:23:ec:0d:0d:ea:4e:95:c4:63:bd:79:6a:
         3b:67:57:09:29:b8:80:34:f5:b9:99:3f:e1:33:6a:12:63:89:
         6e:43:1d:c5:f4:7e:84:eb:b9:72:09:a9:25:69:66:e7:d9:4a:
         10:44:7f:ce:b1:04:e0:79:3d:fe:3c:37:8b:3b:e0:b5:d5:7f:
         23:d5:5d:ac:52:7c:b8:bd:b8:f3:11:fa:4a:79:e0:5d:70:f7:
         24:1b:3d:58:89:f5:66:d6:1e:79:9d:26:3f:18:3f:34:d9:cb:
         d9:6d:35:9c:39:ae:03:aa:bb:71:67:38:a7:60:ba:a3:c0:6b:
         70:42:7c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org