Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/aJMrHsmbKt6fHFP8sVXtN5XPzIo.roa
File:                     aJMrHsmbKt6fHFP8sVXtN5XPzIo.roa (raw, json)
Hash identifier:          hx7BL0Jol6SGACJB4OFi+NMccezT0RHUiONqQ/LYMig=
Subject key identifier:   68:93:2B:1E:C9:9B:2A:DE:9F:1C:53:FC:B1:55:ED:37:95:CF:CC:8A
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0327
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/aJMrHsmbKt6fHFP8sVXtN5XPzIo.roa
Signing time:             Tue 25 May 2021 02:42:52 +0000
ROA not before:           Tue 25 May 2021 02:42:51 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        119.83.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 807 (0x327)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:51 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=68932B1EC99B2ADE9F1C53FCB155ED3795CFCC8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:ba:89:47:bc:7a:c1:4a:51:94:2a:27:65:
                    7a:bb:ec:97:21:eb:d5:c3:44:78:f7:77:49:58:a7:
                    b7:17:4e:d1:4f:81:07:49:40:ae:7e:07:04:53:01:
                    d8:02:80:ec:2c:99:d0:cf:f8:17:06:97:85:4b:dc:
                    e2:28:76:bc:08:38:94:62:4c:00:5c:94:63:23:31:
                    c7:7d:53:60:1d:57:56:ec:05:46:e0:e1:f3:b1:12:
                    41:0e:bb:0c:d9:6e:9a:3c:c6:fa:55:8c:fb:cc:5d:
                    34:21:a8:a3:b1:d8:21:a5:f8:4d:26:2e:24:24:e3:
                    59:75:0b:3e:49:1e:ad:b3:37:61:5e:ee:4c:04:f6:
                    c3:8f:98:df:a3:7f:4b:42:df:d1:f3:e9:a1:2b:c8:
                    fd:55:ed:3c:a0:79:2b:6d:4e:73:a8:60:57:36:03:
                    b2:ff:c9:c4:e1:c7:1a:82:69:5f:8e:b1:98:73:75:
                    c5:46:20:fe:69:c0:f6:1c:fa:67:6c:5d:8c:aa:50:
                    73:d4:49:9e:67:37:5d:e9:ca:a8:ec:69:2f:73:42:
                    1c:09:94:cf:16:59:e2:30:e4:05:5a:bf:b0:d6:71:
                    b3:6b:00:bb:7a:f6:34:90:c4:57:72:a0:05:56:da:
                    46:76:bf:1c:98:75:9b:84:07:ea:a8:c2:37:28:36:
                    78:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:93:2B:1E:C9:9B:2A:DE:9F:1C:53:FC:B1:55:ED:37:95:CF:CC:8A
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/aJMrHsmbKt6fHFP8sVXtN5XPzIo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.83.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8d:be:c6:a9:5a:52:b5:a7:af:ee:d9:c9:4b:3b:ad:8e:71:5a:
         7c:16:d9:69:0c:3f:7d:3e:ef:6e:de:92:5b:cf:46:1d:48:e4:
         c8:4c:99:e6:24:44:77:3c:10:ef:86:e7:38:48:d2:52:c9:67:
         93:e2:0c:47:66:fa:30:a6:99:2f:90:ef:1b:99:7b:d9:35:5b:
         34:66:1e:3a:f2:33:ae:25:1f:04:42:b2:3a:07:eb:65:98:d9:
         77:cd:8b:a9:87:9f:b0:44:d6:08:db:35:87:61:33:b0:6a:73:
         b3:8e:13:e0:8b:c4:d6:8e:af:5b:1b:67:eb:f7:be:46:22:c9:
         76:fe:32:3e:02:fb:83:a6:0c:80:80:35:83:6f:44:c6:e6:16:
         68:a0:61:12:de:34:70:77:f9:22:88:8d:b8:66:80:4b:f2:be:
         d0:04:fc:bc:53:92:75:d6:31:0c:99:5f:77:ad:80:76:f2:2e:
         4d:d1:2f:3c:f5:0b:15:10:9c:8f:a5:9d:bd:96:d6:44:28:60:
         24:1a:82:95:ca:fd:97:44:22:82:7a:86:50:50:0d:82:ec:82:
         14:c9:6b:3d:53:33:13:3e:db:9b:b9:33:e1:06:9f:c7:d4:cb:
         65:2f:01:5f:7d:3a:e2:13:17:dd:33:1c:70:12:3e:da:37:8a:
         bf:0b:c1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org