Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/msDXTfhzPPqqF85Z18w0JJwOLGA.roa
File:                     msDXTfhzPPqqF85Z18w0JJwOLGA.roa (raw, json)
Hash identifier:          SlfW4PUmVspLTbFRTvxZY76Ttg9EpOl5ek+5W5vZo+M=
Subject key identifier:   9A:C0:D7:4D:F8:73:3C:FA:AA:17:CE:59:D7:CC:34:24:9C:0E:2C:60
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03CB
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/msDXTfhzPPqqF85Z18w0JJwOLGA.roa
Signing time:             Sun 01 May 2022 01:32:58 +0000
ROA not before:           Sun 01 May 2022 01:32:58 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        203.95.48.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 971 (0x3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:58 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=9AC0D74DF8733CFAAA17CE59D7CC34249C0E2C60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:17:4f:5f:16:59:62:05:05:e9:23:9d:ab:
                    83:17:32:52:12:c9:4f:d2:5b:af:a6:93:19:78:66:
                    1a:ea:7a:90:5f:91:60:e8:60:31:65:51:dc:bd:55:
                    d4:40:11:ff:c7:c6:2e:bb:5c:4f:1c:2f:4d:2c:cd:
                    6f:06:6c:63:f1:33:e1:ba:a2:8a:24:52:e3:ed:87:
                    43:22:19:22:58:ce:70:c8:94:6b:15:7b:61:5c:27:
                    c7:17:c1:de:a9:47:1e:d2:8e:28:8a:97:34:02:c0:
                    58:c0:6a:4e:da:ee:c0:c8:e9:d5:70:8d:7c:4d:71:
                    7d:ce:a7:1b:a4:56:06:eb:b4:b7:81:a1:e1:cd:a2:
                    4e:8c:23:49:c0:b8:e4:1b:7d:2c:c3:2e:4c:bd:43:
                    11:c7:86:1f:aa:c4:25:30:e6:f6:9a:bc:87:2d:df:
                    fb:0a:03:67:90:93:18:05:29:1b:b5:71:07:1d:17:
                    00:28:fb:b7:da:30:78:5a:da:54:53:af:f1:15:b0:
                    5c:f3:82:41:85:01:b5:0a:4d:4e:61:2d:5a:e2:90:
                    66:f0:68:0a:2d:dd:98:f7:1f:4f:17:19:c2:c0:47:
                    de:a7:03:dc:f8:cf:7d:28:a2:08:48:41:3f:67:74:
                    c1:28:36:98:43:59:62:a2:9b:40:7f:b8:ae:4b:78:
                    a6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C0:D7:4D:F8:73:3C:FA:AA:17:CE:59:D7:CC:34:24:9C:0E:2C:60
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/msDXTfhzPPqqF85Z18w0JJwOLGA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.95.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:b8:e8:96:ea:7d:8d:fb:82:4d:26:11:2c:8c:16:99:61:5c:
         50:5b:16:1f:9e:d3:cb:f9:9d:ea:9b:72:60:a7:26:6a:92:b3:
         c1:a3:d0:9c:55:47:ac:9e:34:d7:28:36:cc:79:ce:7f:42:0d:
         dd:28:de:96:0c:a6:f4:ff:59:c0:77:c8:f2:a2:04:4c:78:97:
         f9:a6:78:81:c3:6b:26:c7:76:9c:dd:f2:80:52:1b:01:65:be:
         2e:61:0c:14:79:11:7e:dc:3c:30:25:8f:4b:cb:c4:a1:4a:b8:
         ed:7a:4f:e1:0a:ac:04:95:d1:57:2b:a4:62:67:21:f1:8e:b9:
         9b:6c:a3:99:cb:c2:f3:9d:7e:82:94:dc:c4:36:bf:16:e6:b8:
         d4:14:73:8c:47:cf:fe:25:e4:bb:83:b0:fa:9f:90:06:69:95:
         37:03:1a:c5:06:fc:24:b2:a5:93:35:92:72:42:d3:23:af:63:
         68:ba:03:e6:ec:26:91:5e:ef:8b:55:61:6c:6d:94:50:b9:3c:
         44:d7:d8:86:f0:f5:3e:03:1a:ad:de:8f:9f:22:cf:43:18:42:
         2a:77:b3:34:b9:1b:71:06:b4:46:3f:99:bf:17:44:7d:7f:64:
         dc:20:20:7a:74:9c:21:57:56:8c:87:d3:66:01:85:eb:9d:7e:
         2e:c2:8d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:16 2023 by rpki-client on console-ams.rpki-client.org