Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/jvtnPJ_S0ux8Kl97879xpED46tg.roa
File:                     jvtnPJ_S0ux8Kl97879xpED46tg.roa (raw, json)
Hash identifier:          64RZQ67nY6FjE0KMu6vD32aU0G4cHZMQSkqqufz+4so=
Subject key identifier:   8E:FB:67:3C:9F:D2:D2:EC:7C:2A:5F:7B:F3:BF:71:A4:40:F8:EA:D8
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03E6
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/jvtnPJ_S0ux8Kl97879xpED46tg.roa
Signing time:             Sun 01 May 2022 01:33:06 +0000
ROA not before:           Sun 01 May 2022 01:33:06 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        124.47.193.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 998 (0x3e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:33:06 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=8EFB673C9FD2D2EC7C2A5F7BF3BF71A440F8EAD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:4d:9c:47:30:d2:ff:72:e0:50:c2:eb:a8:
                    c6:ef:30:b6:b6:70:96:c7:8c:15:1a:06:67:4a:75:
                    14:3c:f2:ce:9b:ca:80:55:13:69:bb:1d:b6:e7:2d:
                    76:2a:cc:e2:82:b7:70:49:32:fc:3a:08:ae:82:ec:
                    8d:53:74:2b:01:6c:b1:c2:aa:1f:d4:39:85:e2:12:
                    8b:94:af:0d:e8:fb:3e:34:c7:e3:2b:d3:1b:e6:47:
                    9d:db:c9:a3:5c:83:e5:ec:89:72:3a:31:80:03:73:
                    d2:14:68:41:03:95:a5:82:b2:fa:8c:f9:1d:56:69:
                    bf:fa:c7:87:6e:85:9c:cf:bd:30:69:8e:6e:a9:53:
                    39:57:2b:e3:f1:e9:f4:0b:ff:47:8a:e8:a5:e2:4a:
                    ce:62:8c:10:00:fc:7c:67:1b:08:90:8f:ee:c3:ba:
                    9d:31:3f:01:30:02:5d:5e:9d:d5:e5:a6:a9:68:00:
                    98:9b:45:b9:6d:f7:1b:56:23:cf:96:9c:e3:63:16:
                    1a:2a:b4:53:58:d2:9f:53:95:db:66:bd:b1:12:a7:
                    02:c0:54:9a:42:52:2e:af:96:5e:43:6c:9e:0e:0d:
                    13:1b:6a:40:8e:f0:b8:ab:90:57:ff:00:ff:2d:b3:
                    78:0d:ce:87:f1:2b:e2:17:5f:f8:61:b0:5e:a2:15:
                    32:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FB:67:3C:9F:D2:D2:EC:7C:2A:5F:7B:F3:BF:71:A4:40:F8:EA:D8
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/jvtnPJ_S0ux8Kl97879xpED46tg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.47.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:1a:77:1a:06:50:f8:dc:a5:02:4b:7f:82:d8:b9:e7:76:43:
         e7:8d:f7:40:78:45:d6:5c:6c:6b:e3:a3:3d:4c:aa:8d:bc:6c:
         16:43:26:99:84:36:35:90:e8:e9:13:15:30:64:eb:ac:4f:97:
         28:e1:d7:5b:2d:1b:d1:18:25:28:28:72:65:6f:80:09:e3:5f:
         8d:9e:8d:db:5d:77:4f:ce:7e:89:80:ed:79:db:5e:85:01:e5:
         91:8b:c4:d8:18:c1:1b:c5:84:59:3e:a5:13:2a:d3:fe:ca:bf:
         43:f9:c0:7c:1b:bf:c5:e5:40:5a:78:d3:e0:49:22:e5:07:a4:
         7e:a6:51:d2:07:d3:32:5b:82:b4:ad:15:ae:62:8f:f7:37:86:
         ad:f5:76:97:cd:fe:52:bc:7a:e1:67:91:a2:ec:94:98:43:ce:
         d1:25:85:d8:c8:e2:31:99:95:2d:31:a8:30:b2:da:f8:8d:2c:
         5d:26:b0:b2:12:ea:34:17:95:7e:36:64:b6:8e:2a:14:52:6b:
         8e:ec:34:ae:f6:c5:4d:aa:0d:06:1b:85:a0:a5:48:5a:1e:22:
         a1:0e:0d:56:50:67:c4:3c:c6:8d:5d:97:1b:a8:3a:82:de:24:
         a0:bd:e7:cf:4e:af:17:38:f8:f8:af:f9:70:a5:b2:84:c3:63:
         10:57:40:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:16 2023 by rpki-client on console-ams.rpki-client.org