Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/gnzLRSHh3HNfCwDeWzyjsFroJ1U.roa
File:                     gnzLRSHh3HNfCwDeWzyjsFroJ1U.roa (raw, json)
Hash identifier:          ndFWXeFoAhTmVUVHyZU+exyejXDi1TiW4LEhuNso+X8=
Subject key identifier:   82:7C:CB:45:21:E1:DC:73:5F:0B:00:DE:5B:3C:A3:B0:5A:E8:27:55
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0385
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/gnzLRSHh3HNfCwDeWzyjsFroJ1U.roa
Signing time:             Sun 01 May 2022 01:29:42 +0000
ROA not before:           Sun 01 May 2022 01:29:42 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        220.148.241.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901 (0x385)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:42 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=827CCB4521E1DC735F0B00DE5B3CA3B05AE82755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8f:f5:49:6b:76:a2:97:a2:b5:86:6e:19:96:
                    ca:9b:81:ec:72:ec:09:c0:90:bf:0b:43:a0:d0:d2:
                    f9:36:ab:69:3d:37:cb:81:5a:ec:80:5d:4c:a7:d0:
                    14:d4:3f:72:fc:77:1a:0f:1f:c7:02:40:26:10:97:
                    9f:e5:42:49:a1:11:5c:d6:96:b9:1a:e6:76:48:6a:
                    53:f3:e1:f9:d9:c5:b1:4e:5d:84:78:65:b7:c8:0e:
                    ad:6c:ab:c7:ec:3c:4f:7d:0b:c4:c3:00:d9:3a:ce:
                    19:29:e0:93:85:a8:b7:22:3c:da:c2:1d:d8:ae:9e:
                    d5:92:0c:41:ec:3c:c9:0a:b7:a3:cd:9f:c1:08:d2:
                    76:13:f2:8f:09:2a:44:b6:88:62:27:f6:db:4a:e0:
                    cf:e3:43:65:3a:7a:dd:6d:f3:89:a0:fa:da:e7:8a:
                    92:5b:5a:f9:ce:54:24:2d:e2:d8:67:c4:a7:77:85:
                    be:23:7f:a7:bc:43:a9:7d:ce:cf:a1:6f:eb:aa:20:
                    6f:72:64:98:eb:47:fe:51:f5:44:b7:32:95:b0:c6:
                    75:55:9f:4d:ee:6c:d6:5a:e2:5b:ac:3e:d7:27:45:
                    01:cc:3f:63:0c:41:78:ff:75:fb:2c:ac:ba:b8:ac:
                    3e:5b:47:8a:90:ab:76:0e:d6:03:a5:51:fe:f1:e6:
                    f9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7C:CB:45:21:E1:DC:73:5F:0B:00:DE:5B:3C:A3:B0:5A:E8:27:55
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/gnzLRSHh3HNfCwDeWzyjsFroJ1U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:cd:d3:b3:bc:94:34:9a:6e:62:dc:e0:94:bf:9c:9c:04:57:
         4c:17:62:08:50:e4:5d:de:d0:5e:53:b7:b7:92:82:35:30:a9:
         26:43:46:91:c0:e0:63:fb:97:14:c8:71:71:43:22:24:a2:9e:
         ad:60:90:e8:c2:6c:17:2c:2c:54:90:92:1e:0c:ce:52:a5:44:
         a9:0a:2d:ad:e7:d0:ea:8c:f2:63:0a:07:ab:42:21:b3:22:32:
         84:cf:67:e4:a4:0e:c2:b4:ee:9c:6f:08:43:88:cd:44:70:18:
         cf:57:6c:e3:92:4d:9f:5c:60:93:0a:c7:6a:0c:e6:d2:5b:f5:
         75:5c:b7:91:b3:39:09:37:7b:30:80:7e:fe:51:9c:78:39:37:
         a0:ee:ec:61:6b:6b:54:48:5a:f7:81:9f:be:7a:2b:9d:7c:b0:
         c0:b7:f6:71:87:fe:98:9c:b3:67:5e:23:98:29:f4:cf:ab:50:
         62:e0:84:af:dc:ab:94:c3:b1:f6:20:95:e3:c7:4c:14:84:81:
         72:ad:a6:a9:26:9f:b1:13:5f:d6:3f:f8:54:ca:80:c8:9a:b7:
         b7:ad:ad:6b:25:1f:85:58:48:52:31:34:96:3d:e8:f4:b3:72:
         67:0f:98:bf:0b:36:40:1c:6b:8d:23:ff:9b:60:4c:4b:1c:63:
         0a:2a:b5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org