Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/ZrjcNcYS7XaK5yvXM8fxQsfcriw.roa
File:                     ZrjcNcYS7XaK5yvXM8fxQsfcriw.roa (raw, json)
Hash identifier:          69unKKoW1l3ap48Dll30orRHyaNoQhxdYukwleEap7s=
Subject key identifier:   66:B8:DC:35:C6:12:ED:76:8A:E7:2B:D7:33:C7:F1:42:C7:DC:AE:2C
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       02E6
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ZrjcNcYS7XaK5yvXM8fxQsfcriw.roa
Signing time:             Tue 25 May 2021 02:41:52 +0000
ROA not before:           Tue 25 May 2021 02:41:52 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.84.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 742 (0x2e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:41:52 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=66B8DC35C612ED768AE72BD733C7F142C7DCAE2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1f:ac:77:51:a0:d5:b3:6a:01:48:52:12:af:
                    93:14:a3:69:41:31:83:4f:6b:3e:e3:8f:6a:fe:c5:
                    19:93:7f:a6:cc:31:d5:85:4d:70:1e:2e:ab:d2:da:
                    03:72:74:e7:94:49:dc:b4:e0:f9:bf:2f:fb:d2:ce:
                    7b:3f:7e:d5:1f:7d:4f:4e:55:e9:51:a7:28:06:e9:
                    1f:e3:db:c9:db:0f:b3:b2:fe:fd:5e:7d:8d:3c:51:
                    42:20:13:6f:ec:c4:81:90:ec:d6:e3:84:b8:f8:c4:
                    3b:a5:c9:0e:14:3d:9f:cd:99:3e:14:52:e9:08:4f:
                    b6:26:b9:19:a0:05:b6:9d:ab:63:72:f4:86:f8:ef:
                    b9:e5:90:ef:17:5e:b6:4f:36:d6:0d:5b:06:c8:ac:
                    db:5b:e8:1b:39:79:e4:92:74:90:78:b1:ac:ac:4c:
                    14:9e:22:00:17:9c:f2:b7:46:aa:03:d1:23:44:3d:
                    ca:c6:85:f9:b3:d1:44:9b:3c:87:a6:39:64:e6:41:
                    cc:0c:9a:75:be:a0:d8:ef:e4:a8:cc:41:1a:bf:35:
                    9c:6b:43:c3:9b:e1:5b:d8:21:4e:05:5f:3b:3d:71:
                    95:26:fe:22:7c:e6:2b:b0:ba:5c:1f:d6:3e:7a:d3:
                    d0:30:64:8f:0f:0f:62:a3:63:ed:9f:b1:47:b3:b3:
                    f1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B8:DC:35:C6:12:ED:76:8A:E7:2B:D7:33:C7:F1:42:C7:DC:AE:2C
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ZrjcNcYS7XaK5yvXM8fxQsfcriw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:3f:77:33:11:bc:40:16:df:a9:fa:ee:e9:75:0e:ca:ee:46:
         71:1c:eb:93:5c:4e:96:d5:73:d7:89:f9:1a:4d:c3:ed:37:b3:
         a8:94:86:48:1b:1b:4a:4f:01:97:92:2a:cc:90:e3:d2:c2:17:
         64:17:0f:78:a8:8e:80:cb:18:e7:78:91:41:1f:55:d7:d4:2c:
         4a:ee:6e:05:3d:38:f8:41:cf:6b:a7:b3:7c:9e:46:d4:d6:b6:
         da:c5:dd:30:1f:11:ac:9e:12:87:0e:75:b5:e7:f0:b3:b9:47:
         58:df:70:74:c6:06:28:92:8e:2f:a3:ef:ec:8c:a7:7e:da:e7:
         fd:23:24:c1:e8:44:bf:f3:c1:91:4e:ca:66:ec:38:f9:af:e9:
         ad:cd:8a:28:9c:2d:c3:a1:c9:49:52:31:73:ed:75:f8:6a:ae:
         d0:49:af:4a:65:78:76:7c:d5:7e:34:bd:84:f7:fa:ce:d4:c8:
         29:1c:72:4b:28:65:a9:e3:5e:e5:e2:b4:9e:77:e4:6c:f4:3a:
         35:4e:22:76:61:c4:69:07:ac:b1:40:e1:c7:df:8d:ec:7a:02:
         b4:92:87:e6:3a:04:5d:fc:2d:b9:72:0a:2b:5a:35:b9:29:02:
         ee:a3:51:f9:6f:22:ff:8e:c6:4c:ea:9a:97:54:97:a0:81:da:
         a5:b0:57:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org