Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/_lYuz57Me2-sVpDnxexEzkwk3tk.roa
File:                     _lYuz57Me2-sVpDnxexEzkwk3tk.roa (raw, json)
Hash identifier:          MIV2nZqvEIV4xAQAHljhbAzTjfTSLPS3CEjtGuN1Cps=
Subject key identifier:   FE:56:2E:CF:9E:CC:7B:6F:AC:56:90:E7:C5:EC:44:CE:4C:24:DE:D9
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03DB
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/_lYuz57Me2-sVpDnxexEzkwk3tk.roa
Signing time:             Sun 01 May 2022 01:33:03 +0000
ROA not before:           Sun 01 May 2022 01:33:03 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        220.216.104.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987 (0x3db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:33:03 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=FE562ECF9ECC7B6FAC5690E7C5EC44CE4C24DED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:36:8a:c2:b7:b0:94:9b:71:b5:0a:40:f2:f2:
                    f3:c8:1a:bb:58:a3:cc:b5:26:d1:0d:c9:76:16:26:
                    91:db:f0:10:c3:d3:45:96:85:63:75:3e:e3:06:73:
                    69:f7:40:7d:10:39:6f:b0:ef:09:b9:6e:b8:c0:c6:
                    a6:77:88:3a:88:b8:ba:02:5a:c3:57:58:01:5e:d8:
                    d9:e4:e7:3d:e6:d2:8a:ec:93:6d:5a:99:cb:c1:42:
                    ff:c7:ba:5a:64:8b:f3:bd:69:48:01:fc:ff:53:0d:
                    7e:19:c0:81:af:ea:08:43:89:7e:91:33:e3:a5:c4:
                    c5:38:43:13:3d:01:02:72:f4:b3:24:1f:a0:c6:cf:
                    ee:38:13:bf:25:c6:a5:42:8c:4f:55:f8:37:2b:b1:
                    76:dc:39:61:9e:42:b9:1a:72:6b:a2:4b:8b:a6:5e:
                    a9:8a:0f:f4:3a:58:e2:86:0a:df:8f:90:a7:53:ce:
                    05:d8:30:b6:b0:a7:ab:fb:9f:22:00:9f:93:40:fb:
                    e1:9c:0a:6c:95:79:80:85:77:db:82:1c:6a:c4:78:
                    b0:89:45:94:3c:b3:ba:ab:70:32:c8:a4:83:c9:47:
                    fa:7c:cf:3b:6b:6b:26:fa:87:9d:b5:33:d9:d8:5f:
                    14:9a:3f:84:a7:40:a9:96:33:c6:f4:74:e2:82:a6:
                    d6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:56:2E:CF:9E:CC:7B:6F:AC:56:90:E7:C5:EC:44:CE:4C:24:DE:D9
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/_lYuz57Me2-sVpDnxexEzkwk3tk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:3b:25:65:cb:bf:ef:20:fe:b4:76:02:7a:97:0a:5b:62:da:
         3b:21:cd:69:12:90:ac:c9:f1:31:7f:9b:f1:e4:a4:14:63:63:
         a2:89:f8:31:e4:7c:de:2a:5a:14:46:ce:8b:c2:ea:22:ab:86:
         d7:e1:28:36:50:6c:ce:18:9b:0c:13:d6:60:e3:6c:5b:e7:1e:
         03:bc:7f:b0:3d:a5:aa:00:5e:b7:23:9a:36:90:a8:b1:01:8d:
         38:e9:10:d3:dd:02:10:57:2f:c4:35:61:08:90:7e:4f:df:dd:
         ef:10:c5:40:d6:b2:62:64:e0:6a:15:2a:34:fe:95:87:c4:37:
         94:c1:f7:88:7d:97:19:cb:61:b1:c6:3b:1b:91:1e:7b:9c:ce:
         fd:b3:5b:e4:8a:c8:af:2b:c3:97:04:08:af:81:b7:19:55:15:
         2b:2c:42:98:53:06:bf:50:62:b5:3b:c1:9e:01:b0:8b:80:5c:
         d3:97:89:86:a6:f5:24:47:9d:52:a9:29:a7:e1:c2:72:28:55:
         9c:f2:7a:e5:4a:a5:ea:22:26:22:b9:06:d9:cd:8e:14:7d:0c:
         4f:fc:b4:a0:2a:b0:00:a8:d2:20:69:1c:95:91:cd:f8:5c:30:
         73:1c:99:fa:b4:6d:c9:29:3a:b4:1a:f9:47:92:1a:84:1a:72:
         64:b9:09:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org