Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/gSKApiA8F6vkl_vB0s2huTyxs2c.roa
File:                     gSKApiA8F6vkl_vB0s2huTyxs2c.roa (raw, json)
Hash identifier:          /lV+tDJnIdlNZd/k6SnEveGqLLXFM4XOtamLsv1XT3c=
Subject key identifier:   81:22:80:A6:20:3C:17:AB:E4:97:FB:C1:D2:CD:A1:B9:3C:B1:B3:67
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0458
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/gSKApiA8F6vkl_vB0s2huTyxs2c.roa
Signing time:             Thu 13 Apr 2023 09:57:52 +0000
ROA not before:           Thu 13 Apr 2023 09:57:52 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        220.148.132.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1112 (0x458)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:57:52 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=812280A6203C17ABE497FBC1D2CDA1B93CB1B367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:e0:12:68:a1:f4:38:13:28:06:5f:2d:a4:
                    20:78:7d:71:b7:74:bb:fd:0c:a1:2b:b1:0e:95:34:
                    97:4a:8a:09:41:d0:d6:f6:49:2e:1e:88:ba:f5:55:
                    b6:3b:84:be:dd:47:dd:a1:c1:e1:c4:03:63:6c:72:
                    d6:0c:e5:3c:17:55:c3:19:a2:09:72:d0:0a:1d:4f:
                    05:34:67:36:8c:22:3b:68:08:cd:aa:a7:29:d6:ed:
                    a8:9a:52:8f:9f:03:73:bd:58:60:66:55:14:46:80:
                    da:41:d9:4a:6d:43:7e:57:36:eb:c2:28:f1:93:18:
                    dc:a0:51:e4:d6:b7:65:1b:35:e6:06:b5:b8:e4:6d:
                    2e:6c:a9:78:fc:2c:9e:1d:3a:1c:85:d0:f7:b8:7f:
                    60:56:9c:1c:45:d1:9a:b6:1f:3f:c7:01:f2:30:75:
                    52:17:ac:28:38:84:2a:d9:1a:31:9d:1d:63:80:50:
                    bf:36:72:3a:5e:3c:10:23:4a:41:f8:54:18:a1:e4:
                    ae:f3:7f:4d:0f:57:72:96:a4:70:df:96:35:8d:2c:
                    ab:d8:0d:47:72:fd:c2:9e:05:53:a8:b6:fc:fe:f3:
                    a6:70:7d:3d:5c:98:d6:f2:eb:e8:61:a5:01:fd:43:
                    3b:b6:72:d3:f1:fa:ac:61:7d:2b:31:3f:4c:b7:f6:
                    30:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:22:80:A6:20:3C:17:AB:E4:97:FB:C1:D2:CD:A1:B9:3C:B1:B3:67
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/gSKApiA8F6vkl_vB0s2huTyxs2c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:a7:1b:03:20:1c:65:9b:b0:86:cb:a8:66:4f:e1:3b:f4:d3:
         bf:a5:78:5f:20:91:20:7d:41:aa:e1:ee:36:3f:72:c3:44:31:
         44:06:db:15:b2:26:6c:95:a3:b2:ea:d0:39:7e:04:a2:6e:03:
         20:b5:88:96:08:9e:6f:21:51:1b:87:43:d0:5e:c8:7d:ba:92:
         22:bc:00:60:50:7e:f5:1e:98:1f:96:b7:18:c6:9e:e0:ee:71:
         19:8a:23:fe:a9:c6:39:89:5e:60:94:e7:6f:7f:1b:6b:44:13:
         46:f5:16:32:9b:14:87:8d:c4:29:fa:2d:17:f8:5a:db:65:05:
         e1:6d:d3:7b:91:61:3a:75:0b:8e:b7:42:c9:48:06:5c:f9:9c:
         d9:49:05:81:1f:65:3e:66:9c:ef:63:0e:ef:d7:f7:f0:41:d9:
         9c:76:73:60:86:30:df:28:57:00:3d:bb:e5:4b:3c:f1:df:e7:
         15:5b:eb:b7:3a:9e:6d:ff:6f:ff:e1:d2:20:df:b0:02:1d:0a:
         06:7e:ef:55:aa:bb:0b:9b:5f:61:51:56:91:1b:87:18:bd:30:
         5a:11:0a:4c:96:69:8d:27:d0:fd:bf:ce:0e:60:c6:cd:90:fd:
         fe:f8:df:d7:7e:51:fb:4b:9a:9e:61:4e:be:44:12:ed:e0:0f:
         24:de:82:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org