Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/eDfUtciW3Rq98En3r7ax6hqXTp0.roa
File:                     eDfUtciW3Rq98En3r7ax6hqXTp0.roa (raw, json)
Hash identifier:          0J0J+ep8cV4XM3J7cL0aZi/8dbrvEM2VaD2oVcowbpI=
Subject key identifier:   78:37:D4:B5:C8:96:DD:1A:BD:F0:49:F7:AF:B6:B1:EA:1A:97:4E:9D
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0300
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/eDfUtciW3Rq98En3r7ax6hqXTp0.roa
Signing time:             Tue 25 May 2021 02:42:00 +0000
ROA not before:           Tue 25 May 2021 02:42:00 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        111.67.124.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 768 (0x300)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:00 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=7837D4B5C896DD1ABDF049F7AFB6B1EA1A974E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:9c:99:25:3a:5e:52:1a:39:e8:58:b2:3d:
                    66:5a:4b:65:6b:61:6c:98:a9:fc:b9:fc:c2:9a:af:
                    51:d3:07:7e:d1:d7:22:b4:af:00:ab:47:2c:1c:1c:
                    08:e7:28:87:0d:f1:d1:35:8c:34:8d:cb:c2:d2:03:
                    85:ca:54:28:1b:f3:a8:31:5c:c8:36:64:5d:44:41:
                    90:fc:12:4e:66:31:01:11:eb:e1:96:d4:2e:cb:5e:
                    9a:3a:66:84:c4:27:f5:5d:aa:80:78:15:66:6c:b8:
                    cb:a5:a1:ef:a7:f9:ba:c6:67:dd:07:2c:0b:d1:05:
                    83:d8:3d:3c:ee:08:10:78:d0:22:38:02:c5:73:5f:
                    d9:6f:ae:49:c1:b4:5d:31:cc:46:97:8c:37:31:ea:
                    7a:21:47:28:4a:53:d3:0f:7b:27:aa:b5:92:e2:29:
                    2d:60:a4:de:c6:5b:15:e0:a4:6a:05:fc:9b:04:f2:
                    63:c4:d3:91:73:b3:bd:1b:13:5c:86:4f:d8:36:7b:
                    63:ba:e6:0f:71:64:08:1b:36:7d:38:39:a4:9c:60:
                    5c:cd:e6:3e:fd:fd:99:37:3a:d1:74:4e:7f:89:2c:
                    6a:00:1e:61:25:14:68:05:32:f6:f5:e8:b7:59:df:
                    37:a9:ad:74:2c:6b:14:7d:b6:24:43:6b:d1:b6:2b:
                    dc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:37:D4:B5:C8:96:DD:1A:BD:F0:49:F7:AF:B6:B1:EA:1A:97:4E:9D
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/eDfUtciW3Rq98En3r7ax6hqXTp0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.67.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:55:1c:ea:42:ae:32:ab:0b:9c:66:9c:80:79:07:6d:4d:27:
         9b:c5:3e:c0:d9:d4:5e:c5:6a:2d:67:dc:62:c3:b2:23:60:02:
         b0:92:c3:d3:a4:4f:40:54:5d:5d:99:dd:32:8c:67:3a:3d:79:
         85:1e:95:6e:32:86:35:93:d6:46:8b:55:fe:cf:ea:ac:f4:4c:
         97:61:77:52:f4:f8:ea:26:dd:c2:ac:c6:39:c8:25:5e:c3:d5:
         c9:87:b7:18:ab:b1:a0:b0:4e:b5:e0:37:4a:1b:52:8e:d7:62:
         46:eb:46:32:e1:08:23:6b:f5:6a:42:ee:f2:20:c7:e6:82:bd:
         3d:27:46:40:f0:cf:dc:ae:b9:0e:0f:6c:68:9a:fb:60:a7:c2:
         a2:b9:e1:1f:d3:92:d7:70:ae:91:92:ba:4a:db:d8:ea:d3:31:
         7a:56:4a:33:80:bc:c8:4f:71:21:e2:a9:1c:30:2d:83:7e:ed:
         43:f4:cd:85:dc:7f:d9:c8:d2:f8:ee:05:fa:3d:95:a7:d0:e3:
         ce:13:c0:78:30:5b:80:63:34:81:ee:23:b2:9e:d8:f5:3e:a5:
         25:fb:68:2e:46:3b:18:cc:4d:be:c7:cd:e2:b4:78:e4:83:1e:
         e0:7a:c1:73:07:04:8d:0d:e0:5a:2b:7d:0f:ab:c4:18:56:84:
         19:e9:1a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org