Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/mYt3MfFJkzhdVGXfR_eZkrsDTQ0.roa
File:                     mYt3MfFJkzhdVGXfR_eZkrsDTQ0.roa (raw, json)
Hash identifier:          ZKL+jcXy76S4fBxvwmV1EtLzNukmwUo60KO7orX4M7Q=
Subject key identifier:   99:8B:77:31:F1:49:93:38:5D:54:65:DF:47:F7:99:92:BB:03:4D:0D
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       046F
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/mYt3MfFJkzhdVGXfR_eZkrsDTQ0.roa
Signing time:             Thu 13 Apr 2023 09:59:47 +0000
ROA not before:           Thu 13 Apr 2023 09:59:47 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        61.198.104.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1135 (0x46f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:59:47 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=998B7731F14993385D5465DF47F79992BB034D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:85:23:3e:54:da:12:92:4e:ed:59:93:04:85:
                    f5:f7:95:02:ee:47:e6:db:dd:7d:67:0b:7e:ca:6c:
                    12:48:d8:a0:5a:e0:4f:92:66:bb:aa:99:74:4c:56:
                    61:d1:51:ed:7d:41:92:f7:10:ca:83:fd:3b:ab:1d:
                    4f:68:5e:63:bf:0e:30:03:f4:6b:b2:e9:b4:df:71:
                    8a:ac:5a:16:56:b0:c8:e3:d3:7e:07:93:c0:47:d1:
                    e7:5c:81:b5:1b:74:f4:c3:5d:68:b5:d5:ac:27:a7:
                    fc:72:ef:25:e5:68:ea:b7:1e:5a:ca:1e:90:40:c5:
                    c6:0b:b8:88:7d:f6:8c:6e:c8:f3:fe:91:75:04:b7:
                    f7:e4:a8:8b:b5:bc:79:c7:23:2b:f4:d6:7a:a2:3e:
                    60:dd:06:e7:f7:18:67:67:f6:07:67:39:38:62:20:
                    05:27:e7:d1:79:2e:ee:19:29:1e:77:14:05:63:dc:
                    8b:3a:38:c4:b6:be:4b:37:51:a5:05:4e:e0:16:b5:
                    57:6f:40:e1:bf:9e:6c:30:67:cd:0f:cb:5a:20:87:
                    44:49:7e:aa:72:4e:de:39:70:c9:bb:07:b4:a8:ab:
                    ff:46:c6:dd:e8:b0:81:64:55:01:b8:9f:a1:c7:fc:
                    11:09:40:03:a2:f5:6e:b3:89:97:3a:f3:49:9e:a0:
                    df:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8B:77:31:F1:49:93:38:5D:54:65:DF:47:F7:99:92:BB:03:4D:0D
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/mYt3MfFJkzhdVGXfR_eZkrsDTQ0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.198.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ca:cd:83:ec:e6:0f:04:57:ba:bc:d0:17:45:5f:05:b8:9f:e7:
         38:5f:8c:6c:ff:3a:80:a9:bf:7a:82:51:b2:fc:f2:ec:86:2e:
         bc:c7:8b:7a:6e:6e:8b:7f:bf:3a:0d:76:a0:eb:cb:95:93:79:
         18:2e:a7:16:2d:f5:e1:25:be:7d:4d:56:84:1b:60:39:cb:52:
         13:33:01:2a:a4:4f:a4:f7:ea:12:8e:82:5d:c9:29:f9:34:14:
         89:dc:94:c9:74:46:bc:0e:25:4b:61:54:ae:8e:41:d2:1e:ab:
         ec:92:17:fe:e5:c4:1b:23:39:a9:da:07:a5:21:0c:4d:51:69:
         fe:e0:50:74:4d:40:d8:80:04:58:9a:bb:87:0e:aa:24:82:66:
         eb:86:0c:93:2d:9f:69:5c:ba:a8:56:c7:9a:17:f8:ec:c1:52:
         a5:55:f5:a6:33:f7:2b:93:93:af:23:72:91:2d:55:9f:ca:7d:
         31:13:58:00:9c:5f:56:48:fc:d5:86:0b:5f:23:76:4f:b9:5d:
         6f:2c:a0:bc:86:54:f6:1f:d6:29:8d:fd:54:17:5d:ff:1c:c9:
         ee:3b:ff:92:9f:5a:c8:51:06:c5:f5:d5:3c:ee:14:2d:d0:ba:
         35:4e:f3:83:51:c8:0f:99:b5:8b:29:00:13:b4:e7:b3:8d:97:
         71:5b:4c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org