Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/czjtmYl8WW_6ObsqS8OXYQWcZ18.roa
File:                     czjtmYl8WW_6ObsqS8OXYQWcZ18.roa (raw, json)
Hash identifier:          YbEkGBJnlC/sOpwLiLMTLVdEAI/dZ7pamKWv87GOM6g=
Subject key identifier:   73:38:ED:99:89:7C:59:6F:FA:39:BB:2A:4B:C3:97:61:05:9C:67:5F
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0391
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/czjtmYl8WW_6ObsqS8OXYQWcZ18.roa
Signing time:             Sun 01 May 2022 01:29:47 +0000
ROA not before:           Sun 01 May 2022 01:29:47 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        42.125.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913 (0x391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:47 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=7338ED99897C596FFA39BB2A4BC39761059C675F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f0:82:ad:a3:e8:2f:26:2c:79:2f:45:69:fc:
                    03:11:f6:b0:e9:58:15:6b:d2:d1:7e:05:2a:14:d1:
                    ae:87:a6:79:5a:bc:6b:de:0f:00:7a:11:9c:75:55:
                    55:c2:bd:79:5d:e6:42:06:56:84:31:79:e7:35:cb:
                    98:9d:5e:d5:9a:3f:66:26:9c:d4:05:47:ee:12:1c:
                    2a:ff:23:7a:ca:66:e8:1a:95:79:a2:d5:84:d5:1d:
                    60:39:b0:55:71:1c:e4:c8:1f:f4:ac:aa:34:3f:2d:
                    74:51:f0:40:0b:3d:c7:3a:70:64:5c:3c:c9:17:1d:
                    d1:65:47:4e:ad:e4:2e:6a:9f:c6:c3:14:3c:3c:e4:
                    65:5b:4b:19:d0:3d:b4:b1:2b:22:0d:82:aa:0d:0e:
                    4c:eb:dc:2d:99:d3:7b:ac:8e:a8:dc:d2:cb:f3:5c:
                    4b:aa:25:03:04:f1:98:f4:b3:12:9e:e1:13:c1:7c:
                    9d:04:2f:27:13:88:65:84:d4:75:7a:b6:96:da:d1:
                    3e:0d:44:76:b7:8c:2e:b1:55:53:d8:74:92:d2:6c:
                    5c:06:b4:f0:a7:f7:c6:2f:8e:f3:50:87:66:f3:7b:
                    60:6c:f8:4d:3b:3b:1e:27:63:ac:0f:e0:14:83:d1:
                    80:e4:9f:b3:4d:9d:66:ac:75:7b:11:d1:4c:67:04:
                    7e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:38:ED:99:89:7C:59:6F:FA:39:BB:2A:4B:C3:97:61:05:9C:67:5F
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/czjtmYl8WW_6ObsqS8OXYQWcZ18.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3a:0e:bd:59:c0:6e:6b:5a:a7:92:cb:81:2e:c7:a3:e9:93:c4:
         82:5c:5d:f7:b4:69:72:53:f1:92:31:39:87:22:72:1d:f5:ed:
         a2:1f:73:db:9f:fd:bf:ff:e4:bc:76:9b:bf:5e:21:db:2e:c8:
         51:01:d7:79:57:a1:cb:2d:1e:85:f3:bf:ec:9b:5b:c7:00:62:
         27:53:af:28:23:9a:38:ab:bd:af:4c:d4:3f:f2:4c:6e:28:24:
         5c:aa:30:1d:d5:70:0c:bf:75:84:06:e4:9c:42:83:e3:67:17:
         2c:e4:09:31:03:11:d5:5d:2b:f5:27:e9:ae:1f:12:69:aa:08:
         7f:7c:e2:96:ac:63:b4:2d:51:40:b1:78:01:12:51:f5:60:e5:
         01:4f:44:23:d3:6c:7d:2e:f6:ad:1b:24:6a:3b:a5:ab:b8:84:
         4e:ab:3c:d1:12:c8:fd:9b:0a:d5:6a:d0:84:8b:75:6d:7f:ef:
         93:64:1d:00:b6:e2:fa:20:f2:63:39:97:f6:68:36:f2:94:77:
         f7:46:5f:11:b8:0c:d8:a4:49:11:74:5f:0a:8d:f3:a3:e3:a5:
         b3:00:10:ba:47:d3:f5:a6:d6:e3:d1:e3:46:c8:28:59:4d:d9:
         cd:94:ff:64:8a:a7:a0:15:a7:5d:31:bf:88:fa:ca:90:fa:45:
         fc:d7:cf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org