Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/huRtduT0492jKqtPEFfIqeSFELU.roa
File:                     huRtduT0492jKqtPEFfIqeSFELU.roa (raw, json)
Hash identifier:          dG3wamtB+wJA8FR3aF6siE6Q18gGNPe1FHRKPt899Ng=
Subject key identifier:   86:E4:6D:76:E4:F4:E3:DD:A3:2A:AB:4F:10:57:C8:A9:E4:85:10:B5
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       038F
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/huRtduT0492jKqtPEFfIqeSFELU.roa
Signing time:             Sun 01 May 2022 01:29:46 +0000
ROA not before:           Sun 01 May 2022 01:29:46 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        42.125.234.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911 (0x38f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:46 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=86E46D76E4F4E3DDA32AAB4F1057C8A9E48510B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:5e:0d:f9:1e:67:7f:8b:54:a1:dc:07:5d:
                    81:5d:b8:82:3e:10:e3:d1:1a:e9:03:e4:21:b9:8d:
                    23:48:56:e5:1e:b4:5d:8b:c9:13:73:23:58:12:23:
                    b8:0f:01:65:67:9d:6d:f6:35:a2:d3:0f:69:aa:fc:
                    fa:fa:bc:c8:e7:ff:a8:a6:3b:6f:c1:4f:78:d7:c5:
                    60:49:c6:50:4c:80:7b:59:54:57:dd:5e:c1:be:cf:
                    39:c0:49:ab:be:43:2c:dd:37:86:25:82:42:88:a0:
                    e1:62:e0:71:64:ae:d7:14:9e:79:60:84:f6:38:e0:
                    f3:8c:2e:1d:fe:84:40:5c:0d:3d:b3:03:c4:84:03:
                    db:b4:a8:68:9d:f7:3d:02:3a:dd:c7:19:19:0f:fa:
                    86:d0:78:fc:63:8b:5f:15:ce:26:e2:a3:86:93:5e:
                    7d:6e:8a:e2:aa:f9:b4:ad:65:33:f5:58:ba:12:81:
                    75:c9:df:f1:3b:bf:c1:d3:fc:30:d7:ea:c0:a7:a4:
                    e4:71:97:be:13:d4:c9:0b:a3:2b:a5:b8:60:26:e8:
                    db:f3:66:c0:14:20:3f:e2:e2:fb:67:6d:81:f7:e4:
                    d8:fa:f9:7a:00:0a:bf:5e:8a:d2:df:c8:30:ca:9d:
                    b1:b2:a8:ab:fd:c1:ff:45:5d:18:8b:7f:14:6a:73:
                    33:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E4:6D:76:E4:F4:E3:DD:A3:2A:AB:4F:10:57:C8:A9:E4:85:10:B5
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/huRtduT0492jKqtPEFfIqeSFELU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:b4:0f:04:c4:7f:d4:72:35:25:28:2a:aa:50:54:7b:f7:47:
         36:7b:a7:b6:80:06:16:06:e2:98:f5:77:a7:13:61:b6:ac:3f:
         c3:20:36:ab:0a:56:9e:c7:7a:ad:76:2a:c1:de:2d:13:9a:aa:
         78:8e:93:64:cb:eb:1d:b1:ed:9e:43:77:5f:6d:2c:cf:12:35:
         95:c1:08:7d:cc:b9:64:cd:00:07:e0:ec:e5:41:df:ab:5d:39:
         63:08:49:7b:d9:9b:08:c6:90:f9:0e:a9:f0:7b:a7:7a:da:c7:
         d1:c3:33:ed:c6:8a:e1:f7:e4:ae:85:87:b4:85:89:f8:36:78:
         89:8b:ae:fc:3f:ca:8b:ce:70:ad:06:d5:2e:f1:fd:61:db:aa:
         0b:c8:8d:b1:d3:a0:04:0e:6f:8c:ba:5a:1e:c0:41:d1:ce:d3:
         82:dd:f8:3b:e3:96:65:ea:72:f6:9b:91:70:84:33:45:27:8e:
         99:fe:17:c1:57:a4:7f:68:79:15:ca:56:5f:08:37:37:a6:00:
         8e:da:b0:2d:72:d0:60:b5:17:d9:09:46:9a:64:11:e8:b2:85:
         cf:46:b1:81:54:c3:16:60:ef:fb:01:33:6c:60:00:49:4c:da:
         9f:dc:d0:6d:0b:fd:3a:3c:19:a0:d0:3f:7a:30:15:24:ee:85:
         61:3b:11:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org