Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/a2hw4DwMB8GwjNENx8i8KpVR3bU.roa
File:                     a2hw4DwMB8GwjNENx8i8KpVR3bU.roa (raw, json)
Hash identifier:          M7N4fp/aOdwE0In8EDLLoqhqqLNUManpXXjE9B5ri1I=
Subject key identifier:   6B:68:70:E0:3C:0C:07:C1:B0:8C:D1:0D:C7:C8:BC:2A:95:51:DD:B5
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       02FE
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/a2hw4DwMB8GwjNENx8i8KpVR3bU.roa
Signing time:             Tue 25 May 2021 02:41:59 +0000
ROA not before:           Tue 25 May 2021 02:41:59 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        42.125.228.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 766 (0x2fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:41:59 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=6B6870E03C0C07C1B08CD10DC7C8BC2A9551DDB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f0:67:64:f0:f7:15:6e:4d:73:7c:58:3f:dc:
                    53:58:a5:f2:83:96:62:b7:0c:47:c8:de:d7:9b:b7:
                    84:af:83:1d:bc:d9:fa:4c:cf:e4:bc:b9:96:3c:79:
                    39:85:24:89:da:bb:47:a9:ca:15:52:4d:8b:51:b7:
                    ad:03:3a:34:b2:c1:1f:cb:25:d5:0b:56:0a:39:8f:
                    c0:64:2d:6c:3d:cd:ea:b0:9e:05:0f:2c:85:6b:6e:
                    56:3f:26:67:22:9e:77:56:5a:c2:b3:fe:84:97:b7:
                    29:1c:ba:30:12:55:d7:38:58:87:45:7b:c5:3a:7c:
                    11:ab:87:7b:b9:01:33:0a:8c:f7:d2:cc:0f:e8:54:
                    f1:3d:5d:fb:11:e8:ab:f1:c0:01:98:0b:c6:02:69:
                    6d:f1:70:52:0c:2f:8c:a9:83:05:59:1f:81:84:4d:
                    2d:07:f4:34:23:f9:76:07:58:73:d9:af:0f:bd:57:
                    1e:e6:08:56:c2:a4:61:07:52:14:2b:fc:a9:41:23:
                    60:f9:db:30:8d:92:3d:22:6a:ea:d4:06:12:25:7f:
                    87:9a:c3:a6:29:42:e1:b1:8b:f8:95:cd:28:92:fc:
                    b5:a4:09:0a:43:ce:40:3f:09:34:dd:93:a5:8b:2b:
                    49:f7:f0:8d:a6:69:30:ab:31:8a:0b:92:32:60:d7:
                    65:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:68:70:E0:3C:0C:07:C1:B0:8C:D1:0D:C7:C8:BC:2A:95:51:DD:B5
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/a2hw4DwMB8GwjNENx8i8KpVR3bU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:66:a5:46:5b:67:10:f5:bb:3f:b0:5f:08:d3:7b:94:88:a1:
         d5:40:21:15:32:28:7e:80:ea:2e:3a:b9:18:cf:5a:fb:4b:c9:
         55:4f:af:94:2c:ae:46:3f:fd:dc:39:27:f7:9e:44:99:a8:18:
         a3:80:3a:6c:a7:fe:46:07:12:95:2c:7f:ed:80:38:39:9f:4a:
         9a:83:6f:7a:72:4b:8f:6f:7b:2b:96:3a:4a:d9:3f:b4:06:35:
         f8:1e:7b:da:eb:2f:2b:3c:e6:cb:0e:ba:f6:81:cb:43:17:ba:
         ef:3d:aa:64:dc:45:32:87:fb:8b:9b:d2:8e:5f:a2:01:89:ab:
         e4:0a:01:ed:06:43:7c:ab:0d:32:d1:48:ba:04:15:52:26:50:
         ea:65:09:0c:28:f7:48:93:e3:80:84:68:70:b0:0d:af:37:ba:
         e2:c4:d2:f3:b1:68:b7:8a:8a:93:bf:b8:28:5f:e2:60:66:c6:
         dd:b0:89:4a:29:6d:4f:2d:0a:53:07:6d:2d:97:cc:a3:8b:fc:
         f6:13:27:b3:59:ea:b6:23:b2:66:17:e3:94:17:86:16:ff:a4:
         21:d0:a6:fb:a2:a5:a5:21:7c:0f:69:2b:86:5e:90:d5:8d:5e:
         b5:50:8d:b9:c3:1f:bd:50:fe:86:d8:91:56:fb:d8:d5:d9:42:
         42:66:b1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org