Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/eozu9Xqgs4EBpmMDhZWr-tYA1Z8.roa
File:                     eozu9Xqgs4EBpmMDhZWr-tYA1Z8.roa (raw, json)
Hash identifier:          ab3MN7xMSQl5kTh2o6i7Lp3RH4A4cqAsAStbMD+5ryI=
Subject key identifier:   7A:8C:EE:F5:7A:A0:B3:81:01:A6:63:03:85:95:AB:FA:D6:00:D5:9F
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0413
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/eozu9Xqgs4EBpmMDhZWr-tYA1Z8.roa
Signing time:             Thu 13 Apr 2023 09:52:22 +0000
ROA not before:           Thu 13 Apr 2023 09:52:22 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        42.127.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1043 (0x413)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:52:22 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=7A8CEEF57AA0B38101A663038595ABFAD600D59F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0e:c2:d9:ab:aa:0c:8e:e6:d1:f3:de:6c:55:
                    57:81:91:9c:f8:33:3d:65:d9:ea:85:f3:47:47:1e:
                    5f:78:3e:37:61:6b:13:3d:db:0a:5e:85:26:d7:78:
                    e4:11:d0:01:64:58:4d:c9:27:f2:10:71:fd:a1:09:
                    52:75:17:9b:39:c9:34:3c:95:4b:38:ea:27:3d:42:
                    72:83:04:5c:47:a5:d9:4f:39:a5:b9:30:5c:f6:22:
                    13:ec:5d:42:17:1c:04:24:a0:f1:07:57:53:86:77:
                    f3:32:90:ae:2c:dc:b2:59:29:bc:65:44:dd:2a:50:
                    3f:72:1d:04:39:03:f8:4c:05:7b:c0:12:b5:ac:98:
                    0b:ee:bb:58:69:de:ea:f1:ec:73:97:10:e2:bd:3b:
                    20:5e:84:dd:b7:d1:c3:13:32:39:2d:61:7e:35:99:
                    15:60:f7:e8:f6:d4:61:a3:38:1a:36:76:a1:e0:03:
                    b6:16:96:80:ac:88:a3:ca:4c:9b:04:fa:d1:06:aa:
                    e7:c0:61:0f:f6:e6:e3:b2:ac:cb:0b:2e:6a:d4:d7:
                    14:9d:d4:06:3e:7d:5f:78:5a:5c:a9:eb:7a:bf:11:
                    c4:36:0c:79:09:6b:06:c0:7e:aa:83:dc:1d:d2:aa:
                    55:90:21:8b:01:6f:41:1f:44:71:9b:b6:f1:cb:c5:
                    aa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8C:EE:F5:7A:A0:B3:81:01:A6:63:03:85:95:AB:FA:D6:00:D5:9F
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/eozu9Xqgs4EBpmMDhZWr-tYA1Z8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.127.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a0:b5:40:5a:ab:b0:47:01:d3:de:f3:49:c1:16:df:6c:77:99:
         f7:26:b4:b3:98:27:97:d1:c0:0a:bc:b5:06:a1:1d:5f:14:14:
         80:dd:c4:19:da:58:92:0b:48:9f:02:92:57:a8:87:30:d0:5d:
         30:92:af:1b:97:69:9d:1e:4b:3a:5f:3b:0d:e6:da:94:9e:af:
         f7:82:1d:5e:95:cc:81:c1:0d:43:61:98:c4:48:ba:e2:b0:06:
         c5:9b:46:67:cb:c0:53:15:08:68:79:cd:2f:af:48:36:ac:f2:
         0d:3c:3f:5c:d3:ad:47:d4:c6:29:c0:e2:c7:34:3d:a6:57:48:
         bc:b5:68:63:34:c3:b7:b9:ea:f6:83:a6:7d:b2:f8:b9:17:a0:
         bc:84:f6:90:ff:66:f2:2f:3c:8f:10:ed:7c:bf:b0:bf:08:64:
         c6:0e:80:a6:ab:74:44:00:f1:ba:1f:65:71:2a:c8:16:4a:82:
         8e:e4:93:27:cb:da:9f:c4:9e:3e:d1:94:e9:6f:e5:27:65:82:
         c2:b9:9f:2c:88:cb:6c:29:cd:42:cd:c4:ae:84:76:e8:f1:7a:
         36:00:e4:c6:85:e4:fd:70:3e:21:35:59:1f:cc:dc:a2:ad:56:
         ae:c8:90:26:46:29:73:91:b1:c8:79:07:7c:de:92:5b:87:ca:
         5f:02:7c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org