Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/kLZCNnVsACQa8e1b67Wf7eEsPjk.roa
File:                     kLZCNnVsACQa8e1b67Wf7eEsPjk.roa (raw, json)
Hash identifier:          9RwU4jpijYIdlrDTkLbewSIqLiN1m6SwZ0KYWUX6IRM=
Subject key identifier:   90:B6:42:36:75:6C:00:24:1A:F1:ED:5B:EB:B5:9F:ED:E1:2C:3E:39
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03D4
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/kLZCNnVsACQa8e1b67Wf7eEsPjk.roa
Signing time:             Sun 01 May 2022 01:33:01 +0000
ROA not before:           Sun 01 May 2022 01:33:01 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        220.216.0.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980 (0x3d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:33:01 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=90B64236756C00241AF1ED5BEBB59FEDE12C3E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:32:11:70:0c:a2:3c:7a:3b:ea:71:5b:f6:ec:
                    5a:07:3f:c9:e0:2a:14:fb:ae:72:17:05:fd:39:bd:
                    a9:86:8b:31:28:c6:19:34:d5:d0:10:08:42:c7:44:
                    1d:eb:17:c9:d7:18:c9:8b:a1:5a:2c:01:a6:b8:3f:
                    de:89:ee:47:1e:50:92:9c:b6:d9:78:57:fa:20:b3:
                    24:30:2f:9d:3a:ce:36:94:c7:d8:d9:c9:40:8e:39:
                    ed:f2:77:0a:38:f2:e1:c2:71:36:d0:ba:ce:3f:d8:
                    cc:08:d0:37:0e:42:1f:ad:4e:19:a6:c3:74:68:73:
                    27:68:26:cd:4d:2f:59:56:2b:be:d5:a9:06:9d:bd:
                    50:11:74:36:dc:0b:cd:6e:8f:77:6a:bd:03:0d:6a:
                    c2:de:d9:02:6e:fb:b3:64:cf:7a:14:73:ed:4b:26:
                    0b:9e:97:c3:08:71:5d:3d:ea:48:fa:29:ba:f2:d3:
                    6d:d3:3c:2a:5c:3c:c5:4e:03:fd:ac:29:40:40:d2:
                    07:e9:8b:0d:b9:ff:a2:2c:66:84:fe:74:d1:83:21:
                    90:e2:cc:6c:2e:dd:2b:28:4a:34:66:28:93:04:2f:
                    b3:da:6f:db:14:04:17:c5:7d:1f:49:28:c9:c7:18:
                    79:82:c6:de:99:bf:96:36:8f:34:1c:3c:55:14:cd:
                    d1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B6:42:36:75:6C:00:24:1A:F1:ED:5B:EB:B5:9F:ED:E1:2C:3E:39
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/kLZCNnVsACQa8e1b67Wf7eEsPjk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a6:1f:47:10:5f:f2:3a:7a:01:25:93:4d:a2:76:aa:03:c0:26:
         dd:fd:af:1b:d9:73:38:79:3e:7a:93:84:ce:aa:98:6e:e7:39:
         c3:e8:01:73:3d:b8:10:67:34:11:ab:0d:00:2e:90:ae:6d:b9:
         74:17:eb:a5:b2:1a:97:cd:f4:b2:00:37:a7:7e:47:74:a6:69:
         d6:29:b2:71:ba:d2:ef:9a:2b:f8:1f:69:06:a4:75:df:63:92:
         86:e4:41:a0:85:2c:44:ca:1c:d2:68:73:33:c9:64:6c:e8:a2:
         04:89:1c:64:6a:41:6e:47:b4:29:ed:24:61:5a:b7:7b:96:ed:
         97:3c:a1:77:ce:6e:f6:0f:63:f5:f8:3e:3d:bf:4b:e8:56:71:
         b6:6a:21:70:d2:7c:7d:05:e9:06:d4:5c:02:6a:b1:01:ab:cc:
         27:aa:e6:62:53:ef:f8:e8:85:e5:25:b7:17:41:d0:3d:01:8b:
         f5:8b:6e:7e:44:11:89:e2:79:e3:57:73:26:59:d8:2b:14:3d:
         40:c2:dc:c2:b0:40:b8:5f:74:c2:8f:e2:c3:6b:0c:9b:32:42:
         e4:9f:2f:8f:17:0b:cd:e0:5a:54:b3:45:a3:98:5c:b5:7b:5d:
         b9:50:20:4a:b2:12:a7:ce:1d:34:ef:d9:96:88:ad:13:49:1e:
         6a:b0:99:c9
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA9QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMjA1MDEw
MTMzMDFaFw0yMzA0MjcwOTUyMzRaMDMxMTAvBgNVBAMTKDkwQjY0MjM2NzU2QzAw
MjQxQUYxRUQ1QkVCQjU5RkVERTEyQzNFMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDoMhFwDKI8ejvqcVv27FoHP8ngKhT7rnIXBf05vamGizEoxhk0
1dAQCELHRB3rF8nXGMmLoVosAaa4P96J7kceUJKcttl4V/ogsyQwL506zjaUx9jZ
yUCOOe3ydwo48uHCcTbQus4/2MwI0DcOQh+tThmmw3RocydoJs1NL1lWK77VqQad
vVARdDbcC81uj3dqvQMNasLe2QJu+7Nkz3oUc+1LJguel8MIcV096kj6Kbry023T
PCpcPMVOA/2sKUBA0gfpiw25/6IsZoT+dNGDIZDizGwu3SsoSjRmKJMEL7Pab9sU
BBfFfR9JKMnHGHmCxt6Zv5Y2jzQcPFUUzdFJAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUkLZCNnVsACQa8e1b67Wf7eEsPjkwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L2tMWkNOblZzQUNRYThlMWI2N1dmN2VFc1Bqay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXc2AAwDQYJKoZIhvcNAQELBQADggEBAKYfRxBf8jp6ASWTTaJ2qgPAJt39
rxvZczh5PnqThM6qmG7nOcPoAXM9uBBnNBGrDQAukK5tuXQX66WyGpfN9LIAN6d+
R3SmadYpsnG60u+aK/gfaQakdd9jkobkQaCFLETKHNJoczPJZGzoogSJHGRqQW5H
tCntJGFat3uW7Zc8oXfObvYPY/X4Pj2/S+hWcbZqIXDSfH0F6QbUXAJqsQGrzCeq
5mJT7/joheUltxdB0D0Bi/WLbn5EEYnieeNXcyZZ2CsUPUDC3MKwQLhfdMKP4sNr
DJsyQuSfL48XC83gWlSzRaOYXLV7XblQIEqyEqfOHTTv2ZaIrRNJHmqwmck=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org