Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/bm4NbMB_WX91wybTQbZ1sONTr9g.roa
File:                     bm4NbMB_WX91wybTQbZ1sONTr9g.roa (raw, json)
Hash identifier:          3ncsKfUhoNCuGdWqL+fKWYkG6hgNHKaXzOmh3POQbgs=
Subject key identifier:   6E:6E:0D:6C:C0:7F:59:7F:75:C3:26:D3:41:B6:75:B0:E3:53:AF:D8
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       02F1
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/bm4NbMB_WX91wybTQbZ1sONTr9g.roa
Signing time:             Tue 25 May 2021 02:41:55 +0000
ROA not before:           Tue 25 May 2021 02:41:55 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        42.125.226.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:41:55 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=6E6E0D6CC07F597F75C326D341B675B0E353AFD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fb:8e:bd:ee:e1:ae:7a:27:0e:b2:95:15:d1:
                    23:4f:c6:a4:e3:93:26:20:e2:a7:e1:02:5d:66:ef:
                    74:db:9f:a9:95:f3:df:a5:72:50:7d:89:f5:a5:52:
                    00:3e:d0:b4:7c:3d:a7:d9:ae:58:0d:7d:ed:26:06:
                    09:e0:b5:69:fd:ee:99:fd:f6:ee:51:d6:b8:bb:31:
                    c9:c4:b6:61:6d:f6:2e:2a:c4:38:9d:04:f4:9f:93:
                    39:66:a7:57:7f:d9:7f:5d:c5:3a:ee:2f:b2:32:7e:
                    52:f2:9f:69:e5:88:15:60:47:b5:7f:f9:ad:15:ff:
                    9c:1d:2d:3c:27:fa:7a:c1:a2:ce:ea:7f:15:98:37:
                    40:27:a6:0c:b1:84:38:52:56:9b:e1:ab:ad:aa:31:
                    ed:79:03:c1:a0:04:10:57:99:26:0e:34:e6:9c:96:
                    91:ac:ce:64:a8:28:40:ca:bb:ed:b8:02:36:bc:0f:
                    c0:69:84:58:30:97:14:4d:26:80:26:a5:00:63:b4:
                    0f:2c:75:82:5e:4a:55:00:53:fc:0a:93:d9:45:5a:
                    55:33:13:3c:52:25:64:47:4b:59:c4:aa:8a:57:59:
                    72:14:56:86:ab:32:d0:fe:00:48:86:1b:0e:b7:b9:
                    91:0f:89:5b:22:c5:63:a3:3b:8a:97:1f:07:3a:2b:
                    f3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6E:0D:6C:C0:7F:59:7F:75:C3:26:D3:41:B6:75:B0:E3:53:AF:D8
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/bm4NbMB_WX91wybTQbZ1sONTr9g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:44:c6:c1:0c:78:b6:40:2b:55:bf:eb:67:18:65:e1:06:74:
         c7:59:bd:db:ce:b3:37:6a:b4:2b:3f:de:85:fa:11:c8:85:fe:
         72:09:84:a1:b0:d0:f8:86:89:f7:80:38:1b:82:e5:f9:6f:24:
         88:f5:3b:9d:9c:83:99:b0:86:fd:86:75:b9:95:fd:91:e4:6d:
         b3:71:cb:84:f2:09:76:56:00:07:35:b1:65:d3:0c:33:d7:28:
         f5:c4:79:d4:ec:f9:44:bf:72:b0:d1:2d:f8:e4:18:17:9e:44:
         0e:71:f0:e2:ab:d8:83:e3:39:bd:62:23:a3:08:ca:1a:51:32:
         7d:7a:41:66:8f:ed:78:d6:f6:88:4e:c2:83:b0:39:0b:c8:ed:
         89:e5:45:72:ed:1f:db:35:8b:55:18:41:1d:fa:5d:ce:64:c8:
         43:d0:f4:89:35:2f:1e:66:7a:f3:46:be:9e:02:f0:89:d5:46:
         4e:fb:60:df:c8:a1:e5:4d:c6:71:95:f8:e0:0e:32:9c:53:cb:
         ff:1d:6b:26:5a:2a:57:a3:9c:2e:6e:fe:8f:e1:c5:ef:7f:82:
         db:96:18:57:22:67:80:ff:45:e2:bf:13:d4:b8:2d:34:d4:07:
         ca:84:ae:5a:3a:02:69:7f:70:d7:9b:2f:86:44:75:f8:4e:08:
         a1:47:d7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org