Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/mJE0jBmG_VbIQdAVplbg-vrS4Oc.roa
File:                     mJE0jBmG_VbIQdAVplbg-vrS4Oc.roa (raw, json)
Hash identifier:          DQGGOBqEx9m15n0hJvKSK5IxPJNRgzRPlm7GvSnTQ5Y=
Subject key identifier:   98:91:34:8C:19:86:FD:56:C8:41:D0:15:A6:56:E0:FA:FA:D2:E0:E7
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0470
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/mJE0jBmG_VbIQdAVplbg-vrS4Oc.roa
Signing time:             Thu 13 Apr 2023 09:59:48 +0000
ROA not before:           Thu 13 Apr 2023 09:59:48 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        120.137.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1136 (0x470)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:59:48 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=9891348C1986FD56C841D015A656E0FAFAD2E0E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1d:96:ff:64:a3:70:87:97:9d:ac:0f:e3:44:
                    5d:7c:23:7f:82:c3:a9:af:2f:71:d6:da:79:7f:74:
                    25:64:23:2a:a3:8a:16:f9:f9:f1:ee:9c:80:00:2f:
                    3b:74:b3:89:7d:d6:ee:63:64:02:66:44:9d:c2:16:
                    96:f5:88:a4:fd:b5:f2:ea:1a:1d:43:a8:5a:44:c3:
                    ae:65:cc:65:52:ac:1e:bf:22:be:95:40:cf:18:b8:
                    b6:69:f0:1c:4f:11:05:93:96:ba:fe:38:a6:c8:a1:
                    75:d2:b5:d2:9c:2a:68:a2:59:63:de:e2:99:29:7b:
                    74:6d:2a:38:49:31:e1:2e:83:b6:1b:cc:80:11:3c:
                    d2:67:8b:5f:f8:9e:37:57:da:22:46:94:bc:b5:0f:
                    58:5d:eb:bb:d3:27:ea:d5:6a:48:ac:a3:e3:91:96:
                    73:45:11:a5:c7:2a:66:db:09:f5:fd:1e:a4:15:f2:
                    12:a8:cc:aa:1b:72:e4:1f:23:35:00:fe:5d:cc:33:
                    41:ca:c7:9f:b2:62:56:71:1e:51:60:f7:01:f6:08:
                    97:be:0a:f2:4c:e6:fb:71:6e:13:06:5e:34:6a:65:
                    b8:7b:5d:98:71:d9:da:c6:34:bb:7a:81:61:52:21:
                    31:21:fe:2b:76:3b:a1:c4:32:75:35:fc:10:03:79:
                    e8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:91:34:8C:19:86:FD:56:C8:41:D0:15:A6:56:E0:FA:FA:D2:E0:E7
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/mJE0jBmG_VbIQdAVplbg-vrS4Oc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.137.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         bd:34:a7:63:5f:7b:6b:e1:7f:5d:c3:ab:ea:63:a1:1c:59:87:
         bd:2d:ef:ae:29:c8:49:20:c5:2c:bd:a1:96:ee:79:6a:62:83:
         46:e3:ae:cf:c0:2b:0d:14:f9:f0:c8:0e:12:5c:4f:52:8c:02:
         50:cb:f5:d1:5b:6e:a7:82:82:6a:2e:1f:a0:44:55:9d:a4:fc:
         fd:c9:f7:0d:02:e8:85:0c:b8:33:1a:4c:9e:10:47:8b:06:f5:
         1b:f0:b7:68:61:29:0d:ac:f7:a8:81:8f:20:83:75:a1:61:58:
         4a:c2:dc:e7:83:04:5a:98:c7:a8:9b:a9:89:33:cf:13:b6:b2:
         20:0b:6a:0e:db:86:4b:2f:ff:49:49:ac:ff:9c:c6:29:22:83:
         be:fb:db:bd:f3:47:54:f2:a6:11:13:54:be:98:53:e1:c4:b7:
         c5:c0:e2:f2:94:1a:24:3d:c2:1f:b7:da:6a:ba:c1:6a:57:91:
         fc:fb:67:6a:e4:0c:2d:65:ba:37:de:a6:f5:b9:c7:18:48:db:
         06:a4:66:83:e8:37:a1:04:9b:c7:fa:0e:c1:3a:ca:61:21:1f:
         45:51:96:f8:15:51:1e:e0:7f:c4:c1:94:08:75:1d:99:81:03:
         a7:43:f7:ea:52:6d:a3:59:f0:38:ee:ef:13:25:d1:72:fa:be:
         50:93:15:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org