Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/gnOiYtk_OJBsS2DhMymf2TSwrBo.roa
File:                     gnOiYtk_OJBsS2DhMymf2TSwrBo.roa (raw, json)
Hash identifier:          0196n0GdxPRjTpri0v5ZAn7sOcaKwzaqWoF4fwrAhcY=
Subject key identifier:   82:73:A2:62:D9:3F:38:90:6C:4B:60:E1:33:29:9F:D9:34:B0:AC:1A
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0332
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/gnOiYtk_OJBsS2DhMymf2TSwrBo.roa
Signing time:             Tue 25 May 2021 02:42:55 +0000
ROA not before:           Tue 25 May 2021 02:42:55 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        42.125.225.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 818 (0x332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:55 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=8273A262D93F38906C4B60E133299FD934B0AC1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8a:85:1d:f7:fc:f4:f2:0f:46:89:c8:00:6c:
                    79:bd:e6:05:c2:5b:56:4f:ec:6e:a6:03:d6:e5:2d:
                    5c:3c:30:68:2f:5e:d2:bf:2b:88:74:a9:fa:db:c4:
                    8d:b3:84:0c:31:9b:88:7f:be:1b:41:12:9a:4f:5c:
                    4d:62:19:49:b8:2e:33:c9:55:ec:9f:fb:9f:0a:c1:
                    7d:d0:40:05:e8:6e:6e:5a:1e:6e:45:ca:a3:24:87:
                    30:26:69:9d:8e:dc:84:b1:52:21:d7:3e:bd:c1:59:
                    6f:1c:21:b9:20:6a:f1:46:9e:e0:81:57:e8:52:a9:
                    d9:ea:ac:89:d1:30:38:af:29:63:af:f0:57:6d:74:
                    d9:95:eb:c9:6f:7c:15:af:6b:6d:bb:73:e1:2b:7a:
                    48:1d:0f:06:4f:ee:46:8e:b3:97:0b:29:ad:12:55:
                    78:d6:01:e1:93:b5:78:cf:18:9b:e0:bd:09:75:3d:
                    26:e1:b6:50:84:8a:5c:ff:e4:11:ee:4e:c8:4f:4c:
                    65:cc:75:b8:cb:da:b4:2b:c5:6a:97:22:c3:10:4e:
                    9b:d0:cd:bd:57:ea:db:88:16:f1:1c:9d:b0:9c:e1:
                    42:c6:09:3d:00:f9:03:35:0d:80:5d:18:e2:9a:d5:
                    c0:13:db:ae:87:38:85:0e:18:7c:45:20:a7:f3:0b:
                    e7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:73:A2:62:D9:3F:38:90:6C:4B:60:E1:33:29:9F:D9:34:B0:AC:1A
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/gnOiYtk_OJBsS2DhMymf2TSwrBo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:1f:a2:ed:77:84:cd:cc:9d:b1:a6:75:a4:d6:e1:de:3a:8f:
         55:47:e4:24:75:bd:33:b9:46:f7:7b:81:3f:49:16:07:c3:e5:
         6b:15:44:06:52:f9:ca:04:bd:25:f8:3d:ed:cb:c5:9e:6c:17:
         be:fa:25:81:59:2d:7a:12:78:17:06:20:2c:d2:c0:90:60:53:
         9b:95:6c:66:93:44:07:f2:9e:c8:0f:ef:b5:5f:fb:8c:d4:8c:
         1e:04:05:f5:24:23:ee:d3:f1:44:ea:35:98:58:ac:86:e4:59:
         d7:be:41:8a:ae:58:5b:1c:8a:a7:86:d8:2e:9b:44:c3:86:9c:
         db:59:46:0b:19:eb:e7:b9:fc:62:42:37:ba:5c:ba:37:e4:e8:
         58:ab:71:23:55:b2:3b:1e:a3:10:f9:46:ff:5e:9d:32:79:cb:
         01:03:24:25:d3:65:1d:1e:be:3d:1d:e1:23:15:02:76:c9:f0:
         6a:71:da:9a:00:e5:c4:60:a2:f3:f9:11:ad:57:fc:1a:2a:03:
         00:ff:36:b9:c3:bf:f4:42:03:3c:30:ad:94:17:07:62:11:52:
         0e:18:9f:aa:da:72:5b:13:0e:bb:b3:ea:a2:54:15:5b:6d:8c:
         e3:39:d1:e5:c4:85:ab:1b:27:d9:b0:87:5d:8f:dc:be:18:06:
         1f:85:61:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org