Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/f3CSoHcu3PfGVT18Ghm_bSXcqdg.roa
File:                     f3CSoHcu3PfGVT18Ghm_bSXcqdg.roa (raw, json)
Hash identifier:          c1gG7/gDreA+0fjHeOH5WkpcJMt2RF40aiRZL8zfWM8=
Subject key identifier:   7F:70:92:A0:77:2E:DC:F7:C6:55:3D:7C:1A:19:BF:6D:25:DC:A9:D8
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03DD
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/f3CSoHcu3PfGVT18Ghm_bSXcqdg.roa
Signing time:             Sun 01 May 2022 01:33:03 +0000
ROA not before:           Sun 01 May 2022 01:33:03 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        61.198.104.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 989 (0x3dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:33:03 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=7F7092A0772EDCF7C6553D7C1A19BF6D25DCA9D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:dc:f3:d3:af:ea:16:3e:db:d1:4d:85:94:
                    d3:e1:9c:b4:17:de:76:d7:ab:59:59:7a:88:73:b6:
                    6e:24:29:5a:6f:54:b6:f5:e0:a7:c0:61:da:9e:89:
                    84:10:ae:08:0f:98:8b:58:98:3d:d8:4c:34:64:00:
                    c1:33:96:3e:7b:dd:bc:3a:5f:35:b4:eb:0f:18:db:
                    65:70:aa:80:6b:c5:80:b7:93:4e:30:ed:58:90:e7:
                    76:ec:c7:4c:33:bf:93:53:cd:76:81:d8:52:86:c8:
                    37:a0:99:ab:0a:d8:60:4d:12:01:0a:3a:06:0c:18:
                    15:c8:cb:49:8b:79:5c:39:5e:f5:ca:73:b1:c8:6b:
                    65:4b:e7:d6:38:8e:19:d5:46:bb:85:ef:54:10:da:
                    c8:83:f7:7a:7b:e7:9b:11:c6:dc:5c:25:fd:27:40:
                    f1:34:ec:50:57:cc:44:39:56:c0:7e:ad:dc:52:5c:
                    80:83:c5:ce:15:5e:86:0c:4b:e6:77:5f:90:2c:da:
                    c0:96:3f:6e:e2:bd:0b:bb:77:e4:cb:f5:d6:5b:a7:
                    03:0a:25:cc:0e:73:6e:20:b2:6d:eb:ca:68:97:fc:
                    9f:0e:78:d6:4b:27:bf:91:61:e3:d7:2f:17:66:6d:
                    ec:dc:96:11:c3:d3:e9:f5:5a:5e:d7:24:53:88:12:
                    ac:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:70:92:A0:77:2E:DC:F7:C6:55:3D:7C:1A:19:BF:6D:25:DC:A9:D8
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/f3CSoHcu3PfGVT18Ghm_bSXcqdg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.198.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2e:b6:2e:bd:3a:ae:24:56:01:9b:d9:cc:fa:25:1c:08:de:eb:
         51:d3:5f:b8:4e:54:07:5e:97:4b:64:44:95:a3:25:40:3f:1c:
         01:63:76:74:04:68:b3:c2:e7:f7:4d:ec:f8:bf:8b:1e:65:44:
         c3:a4:b8:37:a0:28:d4:e4:59:65:3a:44:02:ab:08:87:c0:c6:
         aa:65:f4:c9:40:bb:b3:20:a8:4e:ac:1a:13:f6:1a:86:8f:51:
         02:a8:33:ca:e7:f4:1e:04:51:9d:03:75:05:de:c8:91:61:d9:
         0a:8d:81:0c:49:eb:8d:2d:f5:cb:06:1d:0e:ea:42:2c:e0:62:
         f3:85:18:6b:23:2a:e5:94:90:3a:70:bf:a9:54:b2:05:0d:7f:
         f6:39:e8:98:ca:4c:d2:af:e2:79:76:14:f5:6b:c2:f3:54:66:
         ac:17:e7:d6:0f:5b:5c:72:d1:f1:d5:e5:53:27:92:91:56:94:
         51:51:9e:e9:10:de:ef:c8:35:27:ff:4d:cf:be:3e:28:78:69:
         8e:5f:c4:94:4b:17:fc:b1:86:73:f7:ec:fa:3a:22:7d:22:18:
         13:5f:ea:57:9a:73:0d:19:c8:d9:46:10:fb:0c:3e:e5:cd:5f:
         4b:43:f9:48:10:b2:7a:8f:7c:cb:90:03:3c:aa:c5:2f:13:55:
         65:83:7c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org