Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/g3nXsJTB1leewMARyVDBqU81Od4.roa
File:                     g3nXsJTB1leewMARyVDBqU81Od4.roa (raw, json)
Hash identifier:          XTQZIuq7OGL1oxY5fEAEoTjfRYxVstkiYthq3bHZosw=
Subject key identifier:   83:79:D7:B0:94:C1:D6:57:9E:C0:C0:11:C9:50:C1:A9:4F:35:39:DE
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03E9
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/g3nXsJTB1leewMARyVDBqU81Od4.roa
Signing time:             Sun 01 May 2022 01:33:07 +0000
ROA not before:           Sun 01 May 2022 01:33:07 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        116.68.217.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1001 (0x3e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:33:07 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=8379D7B094C1D6579EC0C011C950C1A94F3539DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b6:5c:0f:50:8e:b8:76:91:de:86:b0:a0:a6:
                    95:8a:c4:75:c8:55:7d:f4:35:41:99:87:a4:5a:71:
                    62:6e:1c:9a:6a:6d:86:2a:f0:37:b0:a6:e9:01:48:
                    92:91:1f:b8:4a:28:46:19:cc:84:81:e7:6a:c7:42:
                    70:13:f8:3b:be:fc:86:a7:af:9f:42:29:2e:13:f9:
                    fa:ce:59:f4:d6:6a:58:0a:d7:cf:85:fb:76:f3:7b:
                    ee:20:fa:00:73:41:48:e4:69:86:5a:95:aa:52:2c:
                    21:a7:7c:b7:14:f0:0b:2f:33:74:ed:68:30:4c:7c:
                    c3:c9:cd:03:dd:c8:7d:4a:68:e1:91:50:2a:aa:fa:
                    a3:ec:29:1f:21:1a:dd:2a:50:d7:16:0d:26:0a:38:
                    04:8c:4c:5c:bf:27:83:34:63:72:82:2e:64:a1:23:
                    4d:d5:17:2b:45:a5:de:74:2f:36:3e:2d:47:42:34:
                    88:16:a4:cf:03:62:b1:d9:76:1c:2b:52:c7:b2:24:
                    c0:ac:06:86:75:e9:11:78:07:07:87:8d:23:19:d3:
                    fb:12:df:2c:e2:f4:f9:6b:53:f6:33:ef:6f:f4:7b:
                    bc:7f:fb:b0:b6:0b:9d:9a:c0:54:52:2a:f3:9b:36:
                    fd:c2:de:40:6a:c0:c1:bc:dd:37:3a:a9:2c:e5:d8:
                    4b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:79:D7:B0:94:C1:D6:57:9E:C0:C0:11:C9:50:C1:A9:4F:35:39:DE
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/g3nXsJTB1leewMARyVDBqU81Od4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:ee:31:6e:c6:70:93:5a:ab:12:a2:4f:fc:fe:cf:6c:95:ba:
         a9:c1:61:eb:ff:47:40:05:24:4b:6d:a5:08:d4:fd:2c:30:bc:
         e8:cc:89:a4:e4:79:ab:73:fa:22:09:41:3d:37:19:93:e2:fc:
         ee:52:25:98:cd:e8:23:6c:eb:86:ae:14:15:38:4c:db:69:56:
         e9:c7:9f:c6:86:d2:0f:8e:e7:cb:41:19:1b:5b:d2:dd:cf:84:
         bc:a0:52:b7:8c:34:28:d7:69:09:13:e3:7c:6c:10:a7:83:b5:
         45:e6:cf:e8:fb:03:bb:6c:aa:11:15:ab:a5:9b:1f:16:c3:5f:
         d5:1e:0a:84:39:bc:0b:10:6e:f8:48:bb:72:32:f5:bf:3c:cc:
         30:94:a4:62:b1:ca:d2:42:bd:80:23:e7:59:8d:b0:88:10:7b:
         44:e4:d9:a5:8c:f3:18:41:e1:b2:5a:6e:c9:56:d5:23:f0:05:
         94:92:75:0b:36:35:3f:5c:4e:47:e6:18:7a:7f:1a:5e:4e:ce:
         24:09:d8:83:89:53:19:6d:63:fc:4d:c0:cb:70:6a:1a:67:8b:
         8a:38:da:73:08:8d:dd:68:d0:5b:2b:ae:d9:bc:8f:26:7e:92:
         ca:ce:ac:bc:43:48:d7:89:a9:d0:d3:e3:64:d4:db:1a:30:97:
         c2:0d:f5:5c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA+kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMjA1MDEw
MTMzMDdaFw0yMzA0MjcwOTUyMzRaMDMxMTAvBgNVBAMTKDgzNzlEN0IwOTRDMUQ2
NTc5RUMwQzAxMUM5NTBDMUE5NEYzNTM5REUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgtlwPUI64dpHehrCgppWKxHXIVX30NUGZh6RacWJuHJpqbYYq
8DewpukBSJKRH7hKKEYZzISB52rHQnAT+Du+/Ianr59CKS4T+frOWfTWalgK18+F
+3bze+4g+gBzQUjkaYZalapSLCGnfLcU8AsvM3TtaDBMfMPJzQPdyH1KaOGRUCqq
+qPsKR8hGt0qUNcWDSYKOASMTFy/J4M0Y3KCLmShI03VFytFpd50LzY+LUdCNIgW
pM8DYrHZdhwrUseyJMCsBoZ16RF4BweHjSMZ0/sS3yzi9PlrU/Yz72/0e7x/+7C2
C52awFRSKvObNv3C3kBqwMG83Tc6qSzl2EsVAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUg3nXsJTB1leewMARyVDBqU81Od4wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L2czblhzSlRCMWxlZXdNQVJ5VkRCcVU4MU9kNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAB0RNkwDQYJKoZIhvcNAQELBQADggEBAHHuMW7GcJNaqxKiT/z+z2yVuqnB
Yev/R0AFJEttpQjU/SwwvOjMiaTkeatz+iIJQT03GZPi/O5SJZjN6CNs64auFBU4
TNtpVunHn8aG0g+O58tBGRtb0t3PhLygUreMNCjXaQkT43xsEKeDtUXmz+j7A7ts
qhEVq6WbHxbDX9UeCoQ5vAsQbvhIu3Iy9b88zDCUpGKxytJCvYAj51mNsIgQe0Tk
2aWM8xhB4bJabslW1SPwBZSSdQs2NT9cTkfmGHp/Gl5OziQJ2IOJUxltY/xNwMtw
ahpni4o42nMIjd1o0Fsrrtm8jyZ+ksrOrLxDSNeJqdDT42TU2xowl8IN9Vw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org