Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/f4SzDOmd2ldQk4e6CizA2AM6zBc.roa
File:                     f4SzDOmd2ldQk4e6CizA2AM6zBc.roa (raw, json)
Hash identifier:          x0Xseg0u3gkpL8WclAQxTtLzZolzB9SztOHzS9OEUjM=
Subject key identifier:   7F:84:B3:0C:E9:9D:DA:57:50:93:87:BA:0A:2C:C0:D8:03:3A:CC:17
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       033F
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/f4SzDOmd2ldQk4e6CizA2AM6zBc.roa
Signing time:             Tue 25 May 2021 02:42:59 +0000
ROA not before:           Tue 25 May 2021 02:42:59 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        210.4.240.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831 (0x33f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:59 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=7F84B30CE99DDA57509387BA0A2CC0D8033ACC17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dc:8e:17:81:f9:61:c8:59:31:8a:b3:aa:55:
                    55:a2:da:17:96:9b:e3:b0:0e:18:61:a9:61:b9:7e:
                    2c:c4:70:23:d5:ba:04:a9:9f:21:b6:c6:bd:3e:40:
                    cf:41:3e:9b:fb:93:c9:93:cf:cf:5b:f2:d3:4f:75:
                    ae:d2:ed:e8:a3:3f:dd:92:38:db:87:83:61:dc:18:
                    dd:38:05:4e:11:8f:be:82:9e:7d:ce:25:d6:9d:f2:
                    13:6d:31:ca:4e:85:8f:79:bc:be:32:0f:5d:43:2f:
                    9a:1f:4e:38:3c:1b:4e:0a:f2:93:51:40:58:a3:36:
                    75:3b:6b:3d:30:28:6c:8c:17:43:a0:fd:bf:b5:06:
                    40:18:24:da:3e:cb:e3:b9:4d:8a:43:81:28:4b:d6:
                    c4:0e:70:ad:e5:ed:f7:97:ce:69:a9:40:fd:8a:39:
                    64:a3:2f:fd:0c:85:4b:87:24:64:74:a9:44:7d:1a:
                    bf:2c:8b:e9:1d:62:ca:21:be:5f:87:33:ac:65:4e:
                    36:db:89:56:df:77:7f:d7:29:b4:25:c0:11:a0:e4:
                    2f:71:7e:be:16:59:6c:dd:cb:8e:7a:b1:47:6e:cb:
                    6b:c3:f1:40:14:c1:9d:11:ed:4b:68:83:0d:56:cf:
                    ec:1a:71:f1:a2:8a:b9:dd:0b:11:61:c1:01:49:0d:
                    00:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:84:B3:0C:E9:9D:DA:57:50:93:87:BA:0A:2C:C0:D8:03:3A:CC:17
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/f4SzDOmd2ldQk4e6CizA2AM6zBc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.4.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b6:14:f1:8c:3d:4a:74:a9:58:02:b5:07:da:87:9d:0d:8a:5a:
         62:ed:ef:f9:d7:85:f2:9d:47:a2:9e:0b:6e:12:b1:77:04:f6:
         de:a4:35:4c:e1:c0:26:f1:a8:be:a7:21:01:c6:14:2f:3e:8a:
         2f:5e:a1:fa:b3:56:53:23:97:6c:ad:4d:ed:94:dc:97:b0:ed:
         a4:70:e9:bf:de:3b:2a:3c:a0:c6:5a:3b:9f:22:94:d2:ae:9e:
         42:56:c7:2f:39:97:50:61:f7:11:1e:55:b6:73:42:ee:8b:a2:
         c1:1c:97:cd:83:92:bf:4e:c9:d7:95:e5:40:53:2d:fc:45:9f:
         89:09:15:8b:e1:36:c7:38:66:8e:fd:b2:d5:9a:ae:22:65:69:
         57:3d:87:86:dc:73:ed:73:80:d3:b4:10:8d:50:f3:6b:06:51:
         e8:88:78:3b:9e:41:a5:72:cb:06:40:74:e8:0b:2f:50:af:c0:
         9a:bc:f8:e1:c8:cb:b7:ae:de:cb:b1:8d:55:9c:30:d1:ef:ec:
         53:19:e9:e2:75:bb:55:1f:e5:83:45:48:e5:ff:43:e9:ac:3f:
         6b:c6:d0:b8:d3:86:6d:94:0f:8e:d6:91:3f:f8:6f:46:9c:50:
         42:67:0c:77:b4:f9:4a:ad:55:a3:ff:3d:b6:50:e4:64:45:0d:
         2c:3a:d5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org