Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/m27o5hB_obP5QtGtaVY-wSX6m-4.roa
File:                     m27o5hB_obP5QtGtaVY-wSX6m-4.roa (raw, json)
Hash identifier:          76QzJOU8jLRbrYd7kdyFw2FGN6UyBg8pVrngmLMngxY=
Subject key identifier:   9B:6E:E8:E6:10:7F:A1:B3:F9:42:D1:AD:69:56:3E:C1:25:FA:9B:EE
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03E1
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/m27o5hB_obP5QtGtaVY-wSX6m-4.roa
Signing time:             Sun 01 May 2022 01:33:04 +0000
ROA not before:           Sun 01 May 2022 01:33:04 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        61.211.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 993 (0x3e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:33:04 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=9B6EE8E6107FA1B3F942D1AD69563EC125FA9BEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8a:f7:35:73:f8:ee:76:47:6f:f1:95:5c:e7:
                    c7:96:a2:f9:c7:1e:f1:bc:a7:f7:b7:98:18:10:3b:
                    24:5a:a6:31:bb:f4:02:63:41:9e:9a:cd:d3:d5:61:
                    ce:be:67:4d:73:d3:95:e9:25:f1:00:e8:fe:7a:e2:
                    9e:c1:47:69:89:a3:33:d7:05:5d:67:a7:16:50:fd:
                    16:ad:74:5b:88:83:65:18:9a:d2:8c:f0:e7:ec:22:
                    ef:8d:5b:da:62:24:dc:bb:58:cb:bd:8c:bd:c4:60:
                    ef:c4:ed:2e:c4:f7:a2:68:42:64:57:94:7d:ac:e7:
                    b3:cd:d2:4d:d2:7b:44:07:ab:13:f9:60:66:0c:c9:
                    63:fc:d8:a8:f9:59:20:ce:e9:fe:c5:72:db:15:23:
                    7d:32:2a:a8:2a:9e:e2:da:49:03:70:5b:0a:a8:61:
                    bf:ec:09:3c:3d:b6:0b:a2:1e:d6:83:bc:67:59:24:
                    ed:d7:59:1e:5f:85:49:7c:5f:27:3d:52:d4:6e:14:
                    03:9c:5f:9e:73:d9:95:14:ba:7c:10:49:75:5a:05:
                    83:1e:4c:77:b2:b5:2e:e2:02:fb:2e:1a:b3:a9:ac:
                    f3:be:ca:a1:2b:a2:e7:ab:a3:2a:2b:16:39:87:ae:
                    06:ab:3a:1e:73:3f:c0:d1:a0:f1:b7:58:92:a0:9e:
                    b9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6E:E8:E6:10:7F:A1:B3:F9:42:D1:AD:69:56:3E:C1:25:FA:9B:EE
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/m27o5hB_obP5QtGtaVY-wSX6m-4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:fd:6d:57:05:a3:b6:7d:84:b7:63:bb:2c:1d:8b:4f:6c:7a:
         f8:7f:e3:79:69:43:e7:84:9f:ee:b8:23:4b:ef:c4:c6:50:45:
         bf:33:81:bd:ad:da:40:7b:26:27:61:33:7a:34:d7:f5:48:16:
         83:e0:cc:a9:0b:9a:53:95:e2:0f:ae:5f:ec:23:4a:98:6a:2a:
         58:4c:d8:f0:3e:91:c0:ca:e5:95:54:83:b1:6f:38:3f:c9:18:
         ff:c7:ce:ef:d0:d1:f7:8e:05:cc:84:d2:15:d1:3a:17:bf:c4:
         3a:87:23:85:9e:f9:40:76:3b:3c:41:08:3b:94:8a:e9:b8:76:
         f8:9b:c2:86:f6:cf:cc:e1:58:3a:bb:90:7f:3e:bc:d2:89:36:
         ee:c5:3e:45:d6:7f:a9:2b:a6:d0:0c:c1:47:a6:e0:0c:13:bb:
         86:9c:5d:e1:ec:e5:f9:1f:08:df:2f:f8:bd:23:bd:10:a4:bf:
         8a:95:11:bc:54:bf:5a:5f:35:fa:36:09:8c:ba:c1:60:f4:44:
         7e:4c:9c:1c:04:79:a5:34:a0:4e:27:63:cf:89:db:b5:66:05:
         94:a4:fb:fa:b4:ba:36:2e:ca:ae:cc:44:f9:ff:52:51:ff:00:
         3c:9e:3a:47:a9:3f:b3:08:45:25:f7:56:f1:a8:72:41:08:cd:
         f2:21:79:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org