Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/emUO0kKYIb9hmy0aWXg3ypztsfw.roa
File:                     emUO0kKYIb9hmy0aWXg3ypztsfw.roa (raw, json)
Hash identifier:          I8Q6EfKjmXcG8YhP5053AYMA7OwjJJiTgwMcNqGE050=
Subject key identifier:   7A:65:0E:D2:42:98:21:BF:61:9B:2D:1A:59:78:37:CA:9C:ED:B1:FC
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0408
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/emUO0kKYIb9hmy0aWXg3ypztsfw.roa
Signing time:             Thu 13 Apr 2023 09:52:17 +0000
ROA not before:           Thu 13 Apr 2023 09:52:17 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        210.171.240.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1032 (0x408)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:52:17 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=7A650ED2429821BF619B2D1A597837CA9CEDB1FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:30:01:2d:7b:e3:e4:8e:39:11:6f:86:36:26:
                    bb:a9:ae:1e:5d:de:f0:c4:87:66:72:a7:e6:29:56:
                    65:03:51:90:89:56:8e:5e:80:b1:37:1e:cd:56:95:
                    5a:ab:c1:41:e0:e6:82:94:8d:b7:47:07:50:57:e7:
                    92:c0:08:6c:60:63:27:ae:5a:81:34:c7:fe:0d:d2:
                    60:a9:d9:a5:c8:6c:24:b7:24:7e:ee:e7:8c:5a:5a:
                    b7:5e:cb:cd:21:82:25:68:5d:17:81:13:ff:59:6b:
                    36:57:5a:bd:5c:38:66:37:f4:47:2d:e2:e5:c6:1d:
                    f8:fe:f2:38:6d:a0:5a:f8:4e:7c:b8:c8:1a:86:9d:
                    0e:4f:65:ef:0b:2a:8d:11:27:60:72:43:80:38:e0:
                    0c:e2:93:fc:78:a5:a9:15:44:69:67:b2:42:d0:af:
                    1a:a3:5b:e8:d8:b3:a6:ff:69:41:8e:bc:c6:d7:da:
                    dd:b2:ee:f9:9a:7b:4b:0e:9e:09:ff:2e:c3:d3:ee:
                    6b:4b:e2:30:d2:51:55:b7:c1:83:76:1d:6b:fe:99:
                    1a:00:17:d6:53:57:9a:66:c6:ce:90:45:84:fd:e4:
                    4f:09:8c:d1:c3:a5:b5:b6:d4:37:d8:a2:1e:2a:e1:
                    68:67:e4:35:d3:29:8e:0f:8d:91:5c:e9:0d:7e:37:
                    45:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:65:0E:D2:42:98:21:BF:61:9B:2D:1A:59:78:37:CA:9C:ED:B1:FC
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/emUO0kKYIb9hmy0aWXg3ypztsfw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8c:1e:d4:49:2c:e5:28:97:29:cc:71:df:f8:af:75:9e:69:99:
         c0:ac:ec:96:bc:ac:69:20:47:96:94:c1:79:67:bb:ba:52:1c:
         6c:05:7d:bb:f4:b2:36:f8:46:61:52:ec:e3:9d:66:3f:21:5b:
         78:37:dc:90:68:fc:4b:0a:ce:a7:07:6e:3f:14:59:e1:e2:9e:
         c0:fd:24:c4:5b:c9:9f:f5:11:cf:fa:41:e3:45:38:52:61:eb:
         ff:7d:e8:f7:81:e4:69:b0:6c:76:80:04:68:bc:de:fa:b1:f3:
         8e:4a:0f:68:d6:fe:59:a5:90:88:14:e4:b9:f3:76:99:c5:1f:
         d3:af:9f:fd:06:11:be:00:39:c1:d1:ac:ef:e1:9d:51:da:ac:
         13:6f:d5:4e:49:89:f8:e6:ff:2f:bc:2e:c8:44:c8:a1:04:88:
         c8:1d:54:23:bc:5c:a1:e5:b5:4d:2c:f0:a3:c9:3d:b7:79:18:
         44:50:bc:21:2a:5a:e6:04:74:06:70:93:ca:83:20:bf:32:fd:
         76:a5:c9:5d:e9:4e:f0:0c:56:43:26:5c:82:6b:d4:af:80:6e:
         d5:42:35:34:53:db:a0:96:5e:6e:1d:1c:0e:bf:f6:a2:d2:a5:
         c6:9e:80:8f:d7:2c:8d:0c:c7:80:c2:42:06:80:d8:d8:b3:fe:
         ec:f8:cd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org