Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/fpVZ7FQFe_P6jos0fSRW_6TMRN0.roa
File:                     fpVZ7FQFe_P6jos0fSRW_6TMRN0.roa (raw, json)
Hash identifier:          rTrEa3afYqvC1Ym2L67LvnyEKanHl4VcPeOMcf9fY3Y=
Subject key identifier:   7E:95:59:EC:54:05:7B:F3:FA:8E:8B:34:7D:24:56:FF:A4:CC:44:DD
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0426
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/fpVZ7FQFe_P6jos0fSRW_6TMRN0.roa
Signing time:             Thu 13 Apr 2023 09:55:19 +0000
ROA not before:           Thu 13 Apr 2023 09:55:19 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        42.125.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1062 (0x426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:55:19 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=7E9559EC54057BF3FA8E8B347D2456FFA4CC44DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:44:0d:f2:52:b7:1d:d3:b8:d1:3f:e5:61:fe:
                    17:1d:ad:52:82:ad:0c:6d:3e:b3:90:33:df:5d:cf:
                    3b:ac:c1:76:31:cb:8e:b3:c3:94:39:57:d9:06:73:
                    48:6d:2a:aa:ec:2e:95:67:67:1f:be:88:06:d4:d7:
                    1f:87:8d:a6:22:93:c7:1c:23:cf:d2:d0:a3:03:b9:
                    de:e9:cb:bf:68:98:8b:f0:c3:f0:56:c7:96:74:be:
                    07:a6:57:cf:10:ff:16:77:b7:0d:6d:fc:03:65:3a:
                    a0:d0:40:5e:f5:46:a7:55:1e:78:50:a2:52:1f:eb:
                    04:2e:17:22:4c:00:53:05:6b:94:09:02:db:9f:09:
                    be:57:d1:2a:62:6a:47:c9:08:65:94:34:a1:b0:23:
                    72:5e:d9:4f:45:85:38:ac:57:63:e4:c9:27:2a:4e:
                    32:9d:e5:60:14:bc:95:91:7a:b9:d5:7f:53:29:90:
                    db:35:dd:33:a3:e1:8e:90:be:a9:6b:8b:78:c1:6c:
                    9c:24:d1:eb:24:4f:c1:80:0c:ca:4e:d1:3a:38:db:
                    05:65:b0:53:9b:e1:da:f5:76:d1:62:af:53:7d:8b:
                    76:eb:46:8a:fe:22:38:95:4f:04:5a:fd:64:c9:8c:
                    56:26:8c:fc:98:62:fb:c3:39:80:77:99:15:90:c4:
                    24:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:95:59:EC:54:05:7B:F3:FA:8E:8B:34:7D:24:56:FF:A4:CC:44:DD
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/fpVZ7FQFe_P6jos0fSRW_6TMRN0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:0c:d3:91:a2:6d:f9:99:59:43:38:26:0e:ca:2d:ee:0c:79:
         74:d3:f5:f6:69:66:cd:e9:d7:82:b1:7f:23:bf:ae:8a:ad:0b:
         f8:bf:d4:98:50:35:9a:8c:12:36:f1:67:5d:dc:d5:75:57:14:
         3c:eb:45:5c:22:be:c0:db:2e:35:53:21:60:af:3e:6f:b1:29:
         62:af:0c:36:84:2a:87:63:cc:e1:94:43:6e:8b:39:88:c9:89:
         48:9f:32:e6:cd:0d:a6:27:b8:28:4a:ab:60:dd:a7:fd:de:07:
         a7:40:5a:e2:f3:21:52:d3:5c:fb:c7:13:ad:2f:e5:fe:a5:ac:
         01:0a:ba:82:dc:a5:2b:50:40:36:f2:83:62:59:73:8d:56:2d:
         29:9a:d0:a5:e4:94:3c:9d:7f:93:35:11:f2:9b:1c:b8:4d:db:
         40:02:d8:ea:3b:27:e8:b6:06:11:22:46:e1:90:51:d4:63:6c:
         f4:6e:6a:46:d8:49:96:fb:30:46:bb:b2:e1:00:34:08:e8:a2:
         6b:49:0a:ea:74:10:42:e9:dc:94:63:7d:5e:8e:12:ad:9f:35:
         06:26:d4:f9:4a:ad:98:8f:8d:b6:62:4c:89:51:61:b1:ec:03:
         f7:34:2f:b9:e9:2d:ca:c1:b2:17:db:af:ac:52:fb:01:85:71:
         1e:cb:82:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org