Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/mtMztowKJGOeH8al-nxEyN5o4Q8.roa
File:                     mtMztowKJGOeH8al-nxEyN5o4Q8.roa (raw, json)
Hash identifier:          sqyGMk+1utsCbsnKfV/yJQavDGABicjIyC7K3sPuLfA=
Subject key identifier:   9A:D3:33:B6:8C:0A:24:63:9E:1F:C6:A5:FA:7C:44:C8:DE:68:E1:0F
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       02F6
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/mtMztowKJGOeH8al-nxEyN5o4Q8.roa
Signing time:             Tue 25 May 2021 02:41:57 +0000
ROA not before:           Tue 25 May 2021 02:41:57 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        124.47.192.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 758 (0x2f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:41:57 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=9AD333B68C0A24639E1FC6A5FA7C44C8DE68E10F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:87:93:e2:df:9e:fb:94:2b:75:c3:b2:b4:
                    8a:c3:48:27:fc:53:b6:02:fe:c1:a9:b9:87:f6:e4:
                    af:04:00:6f:d0:44:49:b6:ca:7d:ff:ba:e4:fe:22:
                    03:13:cb:ca:8e:67:c3:49:ca:c3:23:24:41:51:12:
                    4a:89:74:c3:ad:29:09:8c:d1:0a:7a:68:c9:91:bb:
                    f9:b1:61:23:ee:4c:12:00:52:d7:6f:b4:2d:31:66:
                    a4:ac:03:0e:61:de:3b:90:fc:c0:99:91:9c:fa:37:
                    34:a7:b9:94:a6:e5:13:b7:b5:e4:8f:b1:69:7d:23:
                    25:91:bc:28:4b:90:0b:75:1b:db:43:76:9f:91:d2:
                    cd:f5:61:d4:9b:79:56:12:0c:f8:f9:1f:5b:51:c0:
                    d6:7e:35:92:26:50:c4:15:92:de:c3:88:c6:4d:07:
                    cb:a5:9c:32:ff:63:60:4d:57:50:71:f4:97:c6:ea:
                    01:72:c2:a7:f6:48:01:4e:6f:ef:d0:30:1e:35:f9:
                    74:1d:59:d5:1b:4d:6e:99:6c:c0:4b:7a:17:78:4f:
                    49:f1:6f:4e:02:1d:f7:7a:ab:31:f4:15:ae:8c:a3:
                    3a:8a:d1:77:82:d4:59:fa:60:f4:5b:bc:31:b2:bc:
                    b4:b8:e3:c0:18:ae:2e:d9:6e:93:c4:06:ef:51:1f:
                    4d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D3:33:B6:8C:0A:24:63:9E:1F:C6:A5:FA:7C:44:C8:DE:68:E1:0F
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/mtMztowKJGOeH8al-nxEyN5o4Q8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.47.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         25:5a:3c:06:cc:d0:e3:52:58:c3:89:a6:80:28:6d:15:dc:3e:
         43:d5:fa:00:0b:ae:47:38:cc:f8:9e:11:68:0c:6f:47:09:2c:
         cf:bd:fe:b2:a6:df:0e:fa:c2:a3:5d:29:4a:bc:f3:73:bd:8a:
         6e:df:4c:07:dc:78:7f:e1:41:b3:42:8a:6f:f7:16:c7:84:10:
         2d:21:c2:5a:1a:48:73:e2:22:0c:49:48:73:15:2f:f1:5e:09:
         23:5b:95:82:6d:03:be:11:b8:db:8a:ba:02:31:5c:8f:7f:f4:
         fe:87:4e:7a:a4:84:1d:84:73:00:a6:af:aa:e6:45:41:e5:ca:
         00:99:e1:7a:ca:71:1a:17:db:81:d4:d0:39:74:af:1a:c9:90:
         2f:a2:2d:bb:ae:c3:01:2b:2b:6d:16:bd:b9:37:35:70:40:14:
         1a:f0:7d:32:c6:97:aa:04:8c:50:78:8e:d6:93:43:0f:7c:ac:
         3f:03:9c:a6:5f:d6:6e:5c:a8:a7:31:bc:82:34:a4:0f:28:71:
         27:70:b9:a3:5b:a2:84:2f:c7:77:5e:f0:ac:d8:ec:02:4c:93:
         57:82:ea:97:bb:1b:67:70:2e:d3:48:54:8d:dd:8f:75:55:cd:
         f2:08:f5:1f:a7:c8:5b:04:ab:5a:ee:a4:1c:06:0c:c4:7d:c7:
         2b:cd:d6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org