Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/j6MYzmahrfnpQLCJsf8EQzGytEQ.roa
File:                     j6MYzmahrfnpQLCJsf8EQzGytEQ.roa (raw, json)
Hash identifier:          YtaVweoIWcwX2KAxTUoo99ocAJT9gymlWEcEm8cjTHM=
Subject key identifier:   8F:A3:18:CE:66:A1:AD:F9:E9:40:B0:89:B1:FF:04:43:31:B2:B4:44
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0481
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/j6MYzmahrfnpQLCJsf8EQzGytEQ.roa
Signing time:             Thu 13 Apr 2023 09:59:55 +0000
ROA not before:           Thu 13 Apr 2023 09:59:55 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        27.121.0.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1153 (0x481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:59:55 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=8FA318CE66A1ADF9E940B089B1FF044331B2B444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8c:88:40:fc:72:6d:30:12:3f:00:77:e5:e2:
                    e2:22:e3:fa:05:1e:b6:9b:42:95:f4:31:d4:cf:a5:
                    ab:cf:40:0d:ce:e4:f4:29:60:14:5c:88:b7:bd:13:
                    76:90:88:9f:f2:8b:92:2d:f2:e3:db:03:61:bd:e6:
                    1c:f5:5f:51:18:e6:7f:93:d4:55:73:00:33:75:9f:
                    87:a9:b5:c2:44:ca:7c:60:ae:e4:1d:97:ff:5a:30:
                    34:13:24:d8:65:8e:84:a0:e3:2b:0d:af:67:d6:14:
                    fb:bd:a4:b5:3f:4b:0a:cb:e7:fd:5b:60:b1:bb:26:
                    4f:5f:46:16:a3:78:27:3e:5b:70:a9:41:a5:0b:f7:
                    f6:0d:79:4e:61:1f:f5:fb:cb:d6:84:d3:cd:d5:4b:
                    ef:27:9d:a5:0e:f0:ef:75:6f:95:11:2f:04:ed:86:
                    51:ac:8a:e2:9c:15:71:f3:be:6c:de:2c:53:c4:6d:
                    0e:26:21:f8:86:2d:31:0c:52:3f:16:c1:95:4e:f8:
                    53:95:bd:80:ae:38:16:32:ab:75:0f:50:8b:5b:df:
                    dd:65:91:50:f9:de:d7:2a:01:c5:6d:19:9d:4d:47:
                    4f:2c:86:85:79:cf:60:a0:39:f8:1c:4d:04:cc:83:
                    58:b9:fd:0d:f4:5a:4a:5c:63:14:cd:d5:cc:a4:c9:
                    ce:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A3:18:CE:66:A1:AD:F9:E9:40:B0:89:B1:FF:04:43:31:B2:B4:44
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/j6MYzmahrfnpQLCJsf8EQzGytEQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.121.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         30:2a:c5:e1:63:0b:14:c5:d6:dc:6d:59:6a:ca:3a:29:b8:61:
         d9:b0:f8:15:bf:7e:d3:13:16:5a:b1:2c:f9:dd:da:5f:76:ce:
         34:0c:5c:55:ed:95:05:2b:19:27:23:de:43:93:fc:dd:cd:2a:
         e8:1d:70:69:5f:08:d5:d5:c6:78:3a:19:42:d3:a2:5f:3e:ce:
         09:96:03:06:fa:60:e7:ca:dd:29:47:b0:90:32:b8:e5:63:af:
         05:22:1e:82:fa:52:40:09:f4:58:42:cf:b6:77:6b:e7:51:24:
         a4:26:06:d1:a4:08:cf:b2:9e:91:6c:a6:ee:0a:73:ef:3a:af:
         90:9b:40:8e:fb:ec:5e:73:20:61:34:3f:13:e9:c4:63:4c:e3:
         61:03:5b:bd:24:bb:57:6e:9c:9c:65:ba:af:01:a1:87:39:5a:
         64:01:f3:40:6d:04:99:93:3a:cd:ef:b4:fe:cc:6a:c5:a2:bc:
         5d:86:cd:0c:9a:8c:83:97:60:54:a3:3a:a8:56:6f:62:8d:71:
         c5:64:f2:36:cb:ae:6d:c5:02:a9:4c:5e:de:bd:c9:27:3d:8d:
         6c:93:dd:b8:2c:16:2b:78:5c:d7:2a:41:7a:47:2d:a0:3f:21:
         3b:3b:c2:c9:6d:0f:60:31:56:b7:a0:88:54:b0:1e:c9:85:21:
         4c:c4:cc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org