Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/a21n5vllbbCGveHelTiBiODR7B4.roa
File:                     a21n5vllbbCGveHelTiBiODR7B4.roa (raw, json)
Hash identifier:          7wzCUzgCsgwu2RVs1j1ugI3r7NJcX6+hs+7oBLsTdBQ=
Subject key identifier:   6B:6D:67:E6:F9:65:6D:B0:86:BD:E1:DE:95:38:81:88:E0:D1:EC:1E
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       042F
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/a21n5vllbbCGveHelTiBiODR7B4.roa
Signing time:             Thu 13 Apr 2023 09:55:23 +0000
ROA not before:           Thu 13 Apr 2023 09:55:23 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        42.125.244.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1071 (0x42f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:55:23 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=6B6D67E6F9656DB086BDE1DE95388188E0D1EC1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b1:bd:b6:6b:73:1d:ff:96:e4:56:cb:ad:ed:
                    27:14:1d:a0:96:6b:93:a6:24:40:4e:8b:f3:81:9e:
                    07:e0:c1:85:0c:75:74:c7:b7:59:df:c9:b2:07:3b:
                    bc:93:8b:26:12:20:10:1e:60:dc:4a:02:29:c6:04:
                    31:ad:57:78:96:a2:0b:5c:fd:de:22:87:92:0d:74:
                    c6:b0:17:db:2e:43:cb:35:1e:ee:69:5b:4b:e1:d2:
                    3a:a4:72:c2:97:8d:30:d0:1b:c4:85:3b:9d:bf:50:
                    b4:c9:e7:98:41:06:d7:c3:87:fb:3c:fc:bc:b3:d3:
                    73:8e:48:91:e9:25:f4:6c:e5:b7:bd:77:91:2c:ad:
                    5b:99:95:4e:bf:45:90:10:15:72:ef:51:c2:11:2f:
                    5f:d3:36:57:b8:f1:f8:7e:ac:81:3c:64:e4:2f:12:
                    f7:08:13:ca:62:2d:e1:4d:dc:9e:39:8b:7c:f5:62:
                    83:53:37:ea:09:50:90:de:15:79:0b:c4:c0:2c:ed:
                    fe:26:e6:a2:4d:ec:af:f2:8e:dc:7c:61:d6:69:f3:
                    64:22:2b:53:d0:9c:86:09:ce:bf:df:64:55:dd:92:
                    47:4b:cf:9d:de:cc:d8:b7:24:2b:f5:f3:0b:23:b7:
                    35:5e:2b:74:2d:2a:c0:d6:88:9c:65:77:9f:62:78:
                    13:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6D:67:E6:F9:65:6D:B0:86:BD:E1:DE:95:38:81:88:E0:D1:EC:1E
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/a21n5vllbbCGveHelTiBiODR7B4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:b3:d7:35:2b:1b:68:82:83:8e:4d:14:24:b9:a8:ee:ce:22:
         28:2d:0d:e5:b7:7b:4b:93:22:ef:58:19:0a:76:91:d4:71:0b:
         46:94:e4:23:e5:8c:1e:0e:5b:8f:b5:7a:fa:80:6b:96:3a:b8:
         89:ab:e1:bf:62:b6:c9:8b:f6:e3:88:7e:41:be:32:08:da:9b:
         13:5f:9f:7d:d4:21:14:ab:ea:03:9d:76:51:6a:53:69:a5:f2:
         58:0d:29:78:36:2a:ab:ad:16:29:9f:03:1b:f4:0a:80:ff:99:
         3d:81:c6:27:f7:6f:3c:90:c7:ef:5d:d4:b4:26:bb:a2:16:de:
         8a:de:b4:30:01:4f:f0:ff:02:b9:6e:a5:53:80:db:d4:b3:bc:
         3a:9b:f4:ad:2f:d1:ee:6b:5e:d4:e9:4a:d9:ef:33:b7:99:72:
         8d:cd:6c:28:47:28:00:2f:cb:45:d5:5d:10:d3:95:34:fe:ef:
         0f:80:c2:d9:d3:16:53:1e:45:1f:2c:66:5c:0f:8c:17:ae:c6:
         18:dd:eb:25:4d:f8:8f:27:93:e6:e7:c4:9d:9f:dc:d0:d0:c8:
         cf:ef:1b:99:6d:a8:c3:b6:4e:02:58:24:f3:c9:9e:63:96:97:
         e4:0f:72:c1:73:7b:0c:67:ed:b8:c0:df:0b:f5:ae:31:05:01:
         d2:05:fd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org