Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/XvdeT2u1ZxqaGsLFg1tiUikEGDs.roa
File:                     XvdeT2u1ZxqaGsLFg1tiUikEGDs.roa (raw, json)
Hash identifier:          AgnE5z3Zr5QT4iVwtbCKIJ6LPmo3rvTyMGQKmIZsb5g=
Subject key identifier:   5E:F7:5E:4F:6B:B5:67:1A:9A:1A:C2:C5:83:5B:62:52:29:04:18:3B
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0325
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/XvdeT2u1ZxqaGsLFg1tiUikEGDs.roa
Signing time:             Tue 25 May 2021 02:42:51 +0000
ROA not before:           Tue 25 May 2021 02:42:51 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        61.206.64.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 805 (0x325)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:51 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=5EF75E4F6BB5671A9A1AC2C5835B62522904183B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:88:e4:e0:7c:7e:05:96:30:98:d8:4d:cf:aa:
                    32:12:a1:98:05:de:e2:4b:ad:98:f5:9a:9b:28:2d:
                    b7:98:34:13:09:0b:6c:56:58:a4:5c:8b:fe:47:c3:
                    25:74:84:1c:18:72:9f:1f:8f:a1:b5:b8:c8:e5:fe:
                    8a:29:cb:06:26:3d:aa:68:82:be:f5:74:ee:10:05:
                    c8:af:75:07:50:61:6b:4c:53:b8:57:27:37:ac:c4:
                    73:b7:a6:e5:18:76:cb:e2:31:cb:f8:37:0c:25:79:
                    f4:e6:34:b6:2a:74:46:55:5c:55:91:95:be:ba:10:
                    4b:4c:8b:01:e7:41:50:5c:1e:41:03:17:3b:60:d1:
                    59:c9:61:96:9c:72:20:29:d7:3b:11:50:28:42:2e:
                    c3:48:03:d6:94:a3:c3:89:98:0c:7d:76:6f:21:d7:
                    9e:df:04:7b:ba:00:83:08:6d:09:7c:23:90:7a:dd:
                    97:46:04:61:2b:05:35:37:b3:d2:2a:ae:ee:25:4f:
                    97:fb:66:d8:a8:96:c0:8d:41:59:b7:23:2a:62:3f:
                    eb:fa:82:10:c3:70:6c:68:04:15:78:e0:e8:1e:42:
                    a1:9c:f1:f7:1f:86:f5:39:0e:5e:26:f6:7a:81:73:
                    67:e8:b9:ea:c4:50:0a:d7:36:49:1b:1c:f4:76:ac:
                    c6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F7:5E:4F:6B:B5:67:1A:9A:1A:C2:C5:83:5B:62:52:29:04:18:3B
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/XvdeT2u1ZxqaGsLFg1tiUikEGDs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:b6:d4:0f:3f:d6:c2:75:a0:ca:a4:c8:04:b7:6b:19:72:40:
         12:d3:3d:b1:cb:a6:b4:27:0e:b3:df:d4:24:8a:ac:ac:44:0e:
         1f:6c:51:a1:f3:6d:36:e8:3a:81:21:04:a0:0f:66:93:5f:9c:
         e9:08:70:43:4a:5b:a9:7e:45:e5:55:4f:f7:ff:9f:ba:74:9d:
         cf:7a:d5:ce:53:84:5c:2f:82:96:cf:a1:31:52:05:ca:69:9c:
         a0:63:1b:bf:b8:44:c0:c8:f1:e0:97:3b:f8:1d:73:d7:0c:fa:
         46:91:25:37:01:ce:f0:ff:9c:d1:8f:63:e7:f9:28:2c:b8:e1:
         fe:46:eb:d7:1c:b3:5b:2f:83:48:57:72:41:ca:9d:b9:7e:bb:
         eb:ec:4f:f9:3b:f2:03:f1:c2:c9:a8:e2:5f:1a:40:9c:54:9b:
         19:d4:d2:5a:a0:a3:af:b7:d7:6a:05:d9:f5:b1:83:c4:7c:3d:
         44:24:e1:e9:6e:bb:86:a5:64:44:f2:c4:71:3c:fd:5f:b0:c7:
         98:c5:f6:87:46:86:23:35:64:a7:a3:22:5e:a6:32:5d:73:2d:
         9e:9e:de:10:bc:bb:76:8e:c9:a5:d2:e9:40:ba:5a:4f:e9:3c:
         b9:23:8b:cb:35:83:c5:32:cb:59:aa:b1:97:2c:ad:a8:13:53:
         ce:3c:45:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org