Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/YKSJGtSCLicsVU8m9JQu7i5ogg0.roa
File:                     YKSJGtSCLicsVU8m9JQu7i5ogg0.roa (raw, json)
Hash identifier:          He9ioAXrUBarxxDmaP/MGOWwEYLhQQwYYAWm/5XDDog=
Subject key identifier:   60:A4:89:1A:D4:82:2E:27:2C:55:4F:26:F4:94:2E:EE:2E:68:82:0D
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0371
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/YKSJGtSCLicsVU8m9JQu7i5ogg0.roa
Signing time:             Sun 01 May 2022 01:29:34 +0000
ROA not before:           Sun 01 May 2022 01:29:34 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        180.233.106.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881 (0x371)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:34 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=60A4891AD4822E272C554F26F4942EEE2E68820D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:dc:bc:44:50:25:f4:52:49:0b:41:a2:fd:58:
                    08:35:a2:ef:db:9c:4e:78:8a:10:a4:37:22:ce:95:
                    38:01:5e:d0:f2:13:d8:99:77:ac:e3:61:e2:5e:52:
                    71:90:b8:33:c6:16:a8:fe:ce:0b:09:88:ab:10:e1:
                    1d:73:01:56:04:25:c3:a7:8c:cd:69:cf:f5:e5:b9:
                    1e:9e:3f:31:49:e6:c0:47:cb:bd:91:81:37:bc:dd:
                    d0:77:e5:4e:7b:8a:cd:1e:51:82:2a:fb:02:df:a9:
                    80:fb:28:63:e4:bc:75:4d:88:7e:b6:2b:c4:62:10:
                    45:57:84:51:1a:bf:f3:17:07:33:29:22:bd:e0:8d:
                    07:46:fa:68:0d:fd:80:d7:21:7e:23:1c:5b:81:0c:
                    93:75:b5:07:d8:d2:2e:8e:10:74:49:21:49:48:ee:
                    df:4a:68:a2:d1:c9:c2:95:af:d2:65:be:9f:7c:84:
                    80:bb:ad:4f:ee:74:fe:6e:2f:de:ad:9e:4f:66:71:
                    e2:51:9b:c1:be:2d:4d:a2:1e:90:ef:a4:b9:50:c3:
                    e6:03:93:97:f5:dc:f6:b3:86:2c:18:90:09:5d:1a:
                    33:54:18:e9:9a:94:a3:b3:e6:d3:c7:61:69:51:11:
                    fb:3c:c1:77:18:af:d9:be:e9:c9:c9:af:49:06:d6:
                    2a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A4:89:1A:D4:82:2E:27:2C:55:4F:26:F4:94:2E:EE:2E:68:82:0D
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/YKSJGtSCLicsVU8m9JQu7i5ogg0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.233.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:53:c3:5e:34:18:6d:43:2c:60:37:4d:89:73:99:45:ca:0b:
         52:44:3b:97:b9:0e:aa:9c:16:31:44:53:3c:c4:31:df:bc:6d:
         b4:7f:09:6e:6d:a1:8e:1f:a7:fb:73:f8:b8:02:45:24:80:9e:
         c6:6a:99:20:e8:95:dd:9c:b3:4d:46:11:49:48:25:82:eb:1b:
         59:d4:3b:70:0e:23:24:3c:c1:2e:98:9c:bf:04:4b:43:35:db:
         89:ac:bd:4e:90:b4:d8:6e:2d:31:68:bc:b8:6f:b1:88:4a:d0:
         fc:44:42:bb:18:de:98:05:c1:e8:dc:4f:48:c2:45:28:a3:45:
         c2:7d:95:f4:16:d9:d3:c2:c7:34:af:03:08:3f:94:7e:84:5d:
         2d:6b:43:03:b2:2b:c1:f7:12:ef:4f:dd:de:55:21:9f:2c:14:
         db:31:d4:b1:13:9f:97:3a:17:3a:f0:77:94:0c:f6:27:dc:56:
         ac:56:d0:3e:4d:91:d3:f9:54:fc:01:6a:ac:7c:f1:00:da:f9:
         56:97:51:4a:f5:eb:40:9d:0a:b4:33:d6:1b:bb:95:69:a5:60:
         ce:a7:4b:30:76:7a:f0:12:e8:f5:e9:fd:57:b7:5b:a1:bf:ea:
         c1:d0:ff:c9:2a:6b:31:ef:9b:ff:0f:5a:f7:1b:d7:3e:58:fc:
         5e:4f:f5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org