Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/hNcs_4FABCEkV2pUPZ7u4xCFyFI.roa
File:                     hNcs_4FABCEkV2pUPZ7u4xCFyFI.roa (raw, json)
Hash identifier:          pgkqTjWdbxsmOGsDaaz5HlgMIHt25efa3940pB5JWHs=
Subject key identifier:   84:D7:2C:FF:81:40:04:21:24:57:6A:54:3D:9E:EE:E3:10:85:C8:52
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0322
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/hNcs_4FABCEkV2pUPZ7u4xCFyFI.roa
Signing time:             Tue 25 May 2021 02:42:51 +0000
ROA not before:           Tue 25 May 2021 02:42:50 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.120.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 802 (0x322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:50 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=84D72CFF8140042124576A543D9EEEE31085C852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d3:9c:2f:a4:46:ad:28:48:82:ef:23:f2:50:
                    be:a4:d1:c2:c7:d1:96:e7:d7:b3:4c:c8:38:8f:1c:
                    00:4a:23:f3:63:55:71:0e:47:76:d0:ca:59:12:c4:
                    02:ab:2e:2b:bb:b6:3e:fa:21:62:19:b6:97:5e:a7:
                    e9:e1:b6:ee:1a:89:35:c6:97:10:a5:91:69:71:84:
                    17:26:e9:e0:dd:77:6e:a5:80:78:f9:3e:e3:fa:95:
                    0c:d2:1c:91:03:93:17:c9:51:17:9f:d1:f1:c3:62:
                    ba:3e:af:0d:8d:6f:07:9e:de:c2:5d:88:33:c4:aa:
                    1a:bc:45:e3:39:87:c5:cc:10:17:88:0a:2b:1b:34:
                    75:5b:7a:b8:f4:78:a3:f4:33:ac:8d:68:0b:3c:a0:
                    cd:a5:03:e7:25:25:32:8c:a9:1f:92:84:a1:5f:fe:
                    2f:cc:59:d0:1a:e7:8e:4b:4f:20:7a:6a:ae:e8:f2:
                    f1:b2:91:f6:40:e7:4b:b4:a3:c2:ea:24:fe:f5:b8:
                    32:72:2c:ee:b2:69:92:05:de:a1:98:85:b7:e7:3e:
                    02:15:16:40:7a:2c:41:23:61:8a:1f:81:ab:18:61:
                    f4:ba:e4:54:1a:58:0a:8b:3b:f0:c1:e8:75:a9:d1:
                    e4:04:8c:6a:49:34:23:99:b8:71:7c:97:30:1f:8a:
                    cd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D7:2C:FF:81:40:04:21:24:57:6A:54:3D:9E:EE:E3:10:85:C8:52
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/hNcs_4FABCEkV2pUPZ7u4xCFyFI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:5c:47:d8:6b:dd:81:51:2a:ff:78:a8:e6:7c:2e:b5:58:27:
         f2:5b:f7:dc:b2:f8:bb:f8:55:c4:4a:50:4d:f6:22:99:94:e2:
         2f:ca:40:af:bd:7d:69:ee:13:93:8f:d6:2c:23:8e:a2:65:c8:
         f6:89:fa:84:d5:2d:32:91:f8:44:ef:52:2a:46:35:b2:61:58:
         7f:45:e1:9a:b9:a2:15:5b:22:3f:a7:6c:2a:5e:47:0f:39:63:
         d6:dd:b1:7e:bf:a2:b4:74:32:0e:e0:17:ab:7a:56:ad:8b:36:
         a0:4c:c1:3c:19:68:b7:47:00:61:a5:49:b5:c2:31:cd:10:9f:
         62:69:6a:f8:3a:87:86:2b:91:64:d5:9c:78:02:e7:2e:9f:f8:
         46:97:ef:02:e5:69:a8:d1:90:52:17:50:61:c6:0e:45:85:d7:
         e0:2a:f0:24:f6:d1:f2:ba:22:f7:db:87:f0:16:0b:bc:9f:63:
         4e:1e:1b:62:7a:48:15:c2:e7:26:a0:32:41:f1:4d:83:c1:ce:
         ba:8c:bd:76:6c:b9:80:e4:db:b1:9a:81:55:85:c3:3a:89:cc:
         4c:7f:71:31:21:8e:52:28:61:f1:56:da:0b:f8:99:c5:f2:94:
         dd:af:6e:0d:85:fe:c5:ff:97:77:6a:d9:d1:24:34:1f:8b:11:
         d7:4f:06:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org