Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/enrx_NC9t3wr2uJkyu2cfDKZEBI.roa
File:                     enrx_NC9t3wr2uJkyu2cfDKZEBI.roa (raw, json)
Hash identifier:          TGN1+B5BhRWXtzT3EZ1LlQukiK9Q/xMom19gcLHYSb8=
Subject key identifier:   7A:7A:F1:FC:D0:BD:B7:7C:2B:DA:E2:64:CA:ED:9C:7C:32:99:10:12
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0410
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/enrx_NC9t3wr2uJkyu2cfDKZEBI.roa
Signing time:             Thu 13 Apr 2023 09:52:20 +0000
ROA not before:           Thu 13 Apr 2023 09:52:20 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        182.21.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1040 (0x410)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:52:20 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=7A7AF1FCD0BDB77C2BDAE264CAED9C7C32991012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1d:54:2b:fe:80:00:63:1d:f1:48:e0:53:dd:
                    ab:49:07:6b:1e:5a:4f:80:6c:59:78:18:16:f4:a2:
                    17:0d:13:a7:7c:5f:04:32:bc:d8:87:03:2f:ba:2c:
                    a8:4f:c1:8f:24:77:98:93:b1:7b:46:8e:fa:a8:fb:
                    cc:61:c6:98:74:85:29:f2:91:ef:b3:11:c2:70:81:
                    5b:5a:02:fe:7d:e8:48:fc:eb:9e:23:63:5e:ef:65:
                    4e:10:2f:91:7f:ba:c1:21:62:dd:cd:a9:03:2f:52:
                    c3:4c:9e:98:8c:ae:74:e5:e1:60:3f:6e:1e:4a:4b:
                    d3:7f:6b:ff:01:a0:6f:59:46:ca:ec:6d:c7:f5:9c:
                    97:02:9d:60:5e:c3:cf:7b:15:24:f6:26:8d:89:85:
                    61:5e:de:52:77:fe:35:fd:ee:59:b9:e3:06:43:da:
                    9e:3e:f2:5d:a5:82:83:6f:6b:d8:ad:03:6f:ad:45:
                    47:a5:b2:9c:de:b9:ec:c2:e7:25:64:f8:6b:61:3b:
                    9c:23:ad:d2:db:e1:72:84:aa:24:84:66:bc:53:b0:
                    c3:ea:34:0b:cb:31:19:fd:60:1c:bf:e4:49:a4:24:
                    58:98:27:f8:e1:2f:c9:b6:6c:94:8a:7b:20:22:43:
                    bd:40:30:db:4f:ef:fe:24:e6:a4:ca:5f:56:ea:a4:
                    ed:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7A:F1:FC:D0:BD:B7:7C:2B:DA:E2:64:CA:ED:9C:7C:32:99:10:12
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/enrx_NC9t3wr2uJkyu2cfDKZEBI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.21.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         10:73:9d:47:33:a8:41:ff:f7:f7:30:ba:a1:82:bb:67:48:96:
         be:42:89:ad:23:53:54:69:cc:c8:0c:8b:e3:f0:f5:d2:99:6a:
         81:cd:ae:f4:6e:10:aa:32:14:2c:a6:71:4f:7d:5d:30:c6:02:
         ef:34:15:6c:08:7c:1b:bb:50:89:6d:cf:b2:15:4f:77:85:46:
         76:7d:4e:82:0a:ff:bb:0c:c4:17:ab:8b:f4:02:12:a4:86:6d:
         8e:c9:32:b8:68:80:0c:45:03:7f:83:43:f8:f2:e8:95:a5:77:
         93:a0:b7:6e:f0:99:c6:ac:6d:b8:ed:95:de:23:c9:d0:aa:83:
         b8:30:6a:1d:c4:36:a7:df:7b:92:1d:3c:5a:2c:c1:4e:c6:f2:
         57:6e:54:bf:17:11:65:e9:9d:2b:38:58:bb:10:be:9d:11:0f:
         2b:ab:25:da:5b:a1:ef:fa:08:10:4d:3a:90:3f:5c:9d:fa:50:
         43:8d:00:75:18:81:c1:77:aa:aa:61:70:68:28:6e:40:f9:b9:
         15:0e:21:7f:9e:84:95:74:2b:ef:6b:b6:da:ff:30:3a:20:5b:
         88:47:90:ff:f3:b2:a4:3d:c0:3e:12:29:50:4a:f4:93:82:3d:
         db:cb:20:a6:5f:df:69:6e:37:06:5e:74:1f:ba:91:d2:c4:d1:
         eb:8a:1e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org