Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/ZTMKTn8jr5Um9rp5Yz7TZ2kp4Hs.roa
File:                     ZTMKTn8jr5Um9rp5Yz7TZ2kp4Hs.roa (raw, json)
Hash identifier:          MWzEU1IyQFAU70r2614OGdUZ+Lgvxsk+/ELmCECixWk=
Subject key identifier:   65:33:0A:4E:7F:23:AF:95:26:F6:BA:79:63:3E:D3:67:69:29:E0:7B
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03A6
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ZTMKTn8jr5Um9rp5Yz7TZ2kp4Hs.roa
Signing time:             Sun 01 May 2022 01:32:03 +0000
ROA not before:           Sun 01 May 2022 01:32:03 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        116.254.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934 (0x3a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:03 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=65330A4E7F23AF9526F6BA79633ED3676929E07B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a5:da:3a:0a:e7:32:c3:f3:1f:f3:4f:dd:97:
                    36:f2:fb:4e:82:99:fc:25:2e:4c:de:5a:a2:14:6d:
                    c3:51:b1:94:05:21:22:a1:63:3e:84:a6:83:ae:ac:
                    15:f7:34:c9:f3:c5:e1:ae:26:75:14:75:07:da:2a:
                    ca:de:69:b6:18:23:44:4a:17:21:9d:78:b3:26:69:
                    b3:51:2c:fc:42:da:88:55:09:3e:31:dc:bf:8a:46:
                    ed:06:a6:12:17:35:b3:54:19:8f:c3:7a:cf:9f:05:
                    dd:09:9d:97:21:f6:f1:b2:9f:0f:53:26:26:53:48:
                    d4:f6:ba:b2:84:03:01:df:26:1f:db:7f:f8:59:d1:
                    bc:a9:cc:5d:3d:6c:1d:04:2c:6a:33:e0:7e:4e:44:
                    4e:7c:6d:1e:cd:e2:62:05:7a:f2:bf:58:30:5a:62:
                    71:1d:dc:1b:d3:fc:ca:2b:c6:0e:7b:74:29:51:ef:
                    3c:b3:90:de:5c:be:d1:4b:d0:f2:5d:34:49:43:7f:
                    47:1f:06:61:4f:f1:5c:54:6a:e6:d5:f9:ec:ef:34:
                    00:d2:03:28:b7:a2:ce:fc:72:a8:14:f2:01:f4:26:
                    25:89:cf:98:3e:16:ac:94:23:b1:15:dd:d2:16:80:
                    e7:4d:d6:36:0a:a0:a9:61:e9:78:d4:04:00:a6:93:
                    6e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:33:0A:4E:7F:23:AF:95:26:F6:BA:79:63:3E:D3:67:69:29:E0:7B
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ZTMKTn8jr5Um9rp5Yz7TZ2kp4Hs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.254.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5e:d6:77:2c:e9:34:92:cd:54:79:6d:15:b9:85:cb:3d:08:cf:
         55:6f:80:d9:67:45:8c:de:6d:7d:4f:30:e2:a7:2e:d5:b2:af:
         35:92:d7:a1:b0:21:78:b8:31:a3:a5:c4:76:dc:76:a2:1c:ac:
         97:68:4b:6c:64:2a:c2:27:f2:a2:f4:24:bf:5b:ee:6d:bc:e4:
         dd:44:2f:db:fb:0e:ea:f6:c6:76:21:6a:c6:f2:6c:e9:c3:53:
         c2:f9:3d:1d:31:8b:24:28:59:1c:95:45:7e:26:42:37:47:fb:
         dd:04:57:0f:12:b2:91:e2:53:90:a7:24:a1:6e:c1:00:07:62:
         53:6b:0e:a0:a3:34:f8:3a:d2:f9:af:3d:9d:c9:aa:d3:0f:36:
         df:aa:fa:49:9d:3b:d8:4d:f9:c1:66:63:d5:2a:a2:c6:4e:93:
         12:02:ee:60:72:ac:d4:6a:a3:94:18:e3:ad:6b:1b:0d:ff:6e:
         7c:4b:a8:ca:7b:b8:dd:da:50:05:36:93:a4:b7:a3:6b:7d:7d:
         46:44:2d:43:6a:02:1b:c3:37:0c:58:f6:f7:71:1a:cd:5b:5e:
         72:45:dc:91:2a:1d:0b:d1:85:b4:90:73:27:bf:cf:59:aa:5e:
         e3:88:0c:78:1e:77:bd:70:e4:c5:f0:b9:61:c7:eb:ac:e2:30:
         d1:f4:46:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:16 2023 by rpki-client on console-ams.rpki-client.org