Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/YTyZI3rSdIx8yvTOvBQmR4oxemU.roa
File:                     YTyZI3rSdIx8yvTOvBQmR4oxemU.roa (raw, json)
Hash identifier:          4s109I0wvRoBb98VZ4eHep0DPI/IKccvR4dPgKrJXC4=
Subject key identifier:   61:3C:99:23:7A:D2:74:8C:7C:CA:F4:CE:BC:14:26:47:8A:31:7A:65
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       032A
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/YTyZI3rSdIx8yvTOvBQmR4oxemU.roa
Signing time:             Tue 25 May 2021 02:42:52 +0000
ROA not before:           Tue 25 May 2021 02:42:52 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        219.96.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 810 (0x32a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:52 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=613C99237AD2748C7CCAF4CEBC1426478A317A65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7b:1b:9a:d0:69:a9:ce:1a:f8:12:7a:48:c3:
                    78:54:8b:d5:93:25:d0:60:ab:37:90:f7:a6:5d:b4:
                    8c:91:df:dd:9f:5c:28:82:c3:4a:77:9b:a6:32:01:
                    23:50:50:29:21:cf:f0:8b:cb:b8:4a:79:3a:7e:16:
                    09:b4:c7:2f:1f:50:57:e2:34:42:83:b8:51:53:6d:
                    0c:9a:22:62:dd:04:23:09:dd:3e:d9:f5:f0:f9:18:
                    0d:30:62:e1:91:bf:82:a6:04:a2:13:a3:0a:6a:56:
                    0e:37:41:52:ca:da:c1:2a:fe:8e:20:c0:ac:41:e7:
                    1f:7d:56:c0:61:07:56:0c:02:cf:30:6b:bd:38:cc:
                    14:fe:82:71:50:00:eb:87:2b:e1:02:02:6e:de:aa:
                    7c:84:d1:ef:d5:65:61:b3:44:7d:6b:1a:09:d5:f1:
                    42:d4:eb:c3:88:db:6c:3a:72:49:3d:d1:91:c2:77:
                    02:75:f0:23:9a:4e:cb:be:8a:a1:bf:f7:f4:b6:67:
                    9a:a9:60:4c:d6:0b:65:88:79:08:7d:cd:48:32:84:
                    71:81:2f:2f:f9:f1:cf:41:2d:9b:71:87:85:63:ef:
                    76:83:33:b8:76:11:92:12:11:79:b8:93:47:c0:e0:
                    08:fa:65:a3:b9:52:cd:15:26:c0:07:16:36:c8:0e:
                    00:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3C:99:23:7A:D2:74:8C:7C:CA:F4:CE:BC:14:26:47:8A:31:7A:65
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/YTyZI3rSdIx8yvTOvBQmR4oxemU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3b:f6:70:b4:9b:00:0f:ce:b3:be:23:1b:fd:f7:34:07:89:32:
         00:23:ce:57:5c:85:8d:4e:e8:29:84:ed:42:95:4a:f0:c2:52:
         03:91:6a:d9:f6:2e:e4:28:25:fa:91:0b:03:a8:94:6b:7b:51:
         3a:bc:de:5a:df:75:ab:9a:17:79:46:c3:f9:fd:13:7e:d2:c2:
         21:e1:00:01:80:49:a4:ab:76:a9:45:22:42:52:4a:06:16:d7:
         3c:c6:52:3f:2e:50:bf:0c:6e:97:17:3e:f8:9a:17:cf:6a:72:
         4d:8e:12:18:53:97:6d:5b:97:04:2e:6f:3d:e2:8e:a7:6f:0b:
         2d:aa:56:98:03:f5:e2:80:41:34:66:9c:fc:80:22:17:55:10:
         48:86:bb:c2:4e:09:6e:6c:55:ce:09:4e:40:4e:14:03:3d:d9:
         ed:4b:85:ea:5a:31:08:49:a0:41:2d:1f:fa:5c:08:ec:3e:f0:
         61:d6:c0:c6:af:92:18:09:7b:01:7c:54:c4:05:de:6a:82:c9:
         62:2e:b5:13:80:33:c0:78:8e:d1:4c:51:ba:14:82:f5:b6:fc:
         be:5c:f9:54:b0:05:d8:91:d6:1a:bd:df:cb:7b:60:ef:5f:eb:
         33:80:e0:56:33:a6:c5:20:a6:9e:e8:cc:28:da:bb:4f:3e:b5:
         a2:71:e2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org