Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/nFY_-C38NPdxik_hbFg8Do_wdYg.roa
File:                     nFY_-C38NPdxik_hbFg8Do_wdYg.roa (raw, json)
Hash identifier:          yYQeyXS1Ip/wOw0rg5TYiDpX+ZGOKuRxTQdw6RHaZNY=
Subject key identifier:   9C:56:3F:F8:2D:FC:34:F7:71:8A:4F:E1:6C:58:3C:0E:8F:F0:75:88
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       02EC
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/nFY_-C38NPdxik_hbFg8Do_wdYg.roa
Signing time:             Tue 25 May 2021 02:41:53 +0000
ROA not before:           Tue 25 May 2021 02:41:53 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        182.21.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748 (0x2ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:41:53 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=9C563FF82DFC34F7718A4FE16C583C0E8FF07588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:3b:36:81:5e:20:3c:36:0e:76:4f:77:fd:
                    96:82:02:a6:7f:ca:b8:eb:9b:5d:43:fe:7d:c7:d6:
                    95:af:bd:a8:20:58:15:b8:04:5a:3f:88:cb:e6:b9:
                    62:79:3c:3b:77:9e:b6:bb:e2:5a:17:cc:c1:67:22:
                    21:f8:f6:aa:0a:75:31:fd:dd:64:4d:b8:e6:bb:47:
                    63:6d:2b:a7:b5:20:5a:ea:d4:ad:1b:3d:eb:2f:10:
                    b7:90:f5:11:13:a0:f1:92:40:fe:d8:78:b7:5e:3d:
                    70:a9:03:7b:25:02:c3:49:9e:3b:b4:e0:1a:b3:ac:
                    e0:77:05:dd:ea:d5:11:0f:8d:be:18:d7:24:86:b6:
                    57:0a:eb:8e:eb:df:a1:56:87:1b:a4:56:11:b1:11:
                    6c:9f:cf:36:21:a2:7f:ca:c7:e3:6e:9a:81:0c:3d:
                    ef:bd:c4:d0:01:b8:18:22:07:10:2e:0f:25:1e:9a:
                    72:5c:ab:2f:e0:9e:c1:40:50:8b:1b:de:80:05:7a:
                    dc:17:c0:06:42:0b:bb:a8:0c:dd:a1:5e:ec:b8:74:
                    c8:05:67:22:d2:ed:97:93:e8:dc:e2:d1:77:f5:ee:
                    e2:59:72:32:b2:d6:c5:87:45:3b:86:fa:ae:63:f1:
                    4d:2c:7f:86:bc:b8:34:6e:06:0a:45:67:5a:9e:80:
                    15:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:56:3F:F8:2D:FC:34:F7:71:8A:4F:E1:6C:58:3C:0E:8F:F0:75:88
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/nFY_-C38NPdxik_hbFg8Do_wdYg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.21.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         85:56:78:e1:57:86:73:86:33:7f:6c:8f:65:a1:70:4f:23:96:
         e2:f4:f5:6a:cc:7f:80:a9:d1:47:12:c7:22:fa:e8:fe:67:90:
         b3:8a:17:d7:df:e3:ce:fe:d2:18:b8:7d:0e:ab:d4:c9:fd:b1:
         f0:70:9a:8c:7e:f7:7c:ab:58:6b:20:01:e3:f9:da:37:34:f1:
         03:c2:39:b3:72:42:ee:17:10:fc:32:8a:46:e4:5f:86:b5:86:
         af:21:b4:13:41:dd:9f:ba:be:3d:09:59:a4:64:b7:c7:5f:4d:
         8c:b9:b1:a7:95:65:bb:bb:d1:5c:39:2f:64:31:bf:8a:97:e5:
         da:5c:5b:1a:dc:15:0f:22:cf:48:83:f3:76:e2:ea:7f:44:9d:
         34:ef:90:fa:9d:c4:53:e0:06:c4:f9:2f:ae:77:2e:12:87:42:
         38:f2:8b:d1:d2:32:de:b1:5c:09:ad:03:a0:88:2e:a4:06:0b:
         ae:42:6c:9b:b4:3f:28:8d:d0:83:72:59:cc:ff:03:bb:63:51:
         ad:32:ae:87:bf:ac:f6:6a:be:ed:cb:09:ff:ce:0f:0b:0d:4c:
         aa:2a:d4:da:d9:59:b0:fd:d0:33:7a:b3:a3:5c:ca:81:57:17:
         8b:c5:40:85:75:05:10:64:01:08:4d:0d:40:47:b1:2d:f6:d4:
         31:62:3a:f9
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMTA1MjUw
MjQxNTNaFw0yMjA1MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlDNTYzRkY4MkRGQzM0
Rjc3MThBNEZFMTZDNTgzQzBFOEZGMDc1ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC29Ts2gV4gPDYOdk93/ZaCAqZ/yrjrm11D/n3H1pWvvaggWBW4
BFo/iMvmuWJ5PDt3nra74loXzMFnIiH49qoKdTH93WRNuOa7R2NtK6e1IFrq1K0b
PesvELeQ9REToPGSQP7YeLdePXCpA3slAsNJnju04BqzrOB3Bd3q1REPjb4Y1ySG
tlcK647r36FWhxukVhGxEWyfzzYhon/Kx+NumoEMPe+9xNABuBgiBxAuDyUemnJc
qy/gnsFAUIsb3oAFetwXwAZCC7uoDN2hXuy4dMgFZyLS7ZeT6Nzi0Xf17uJZcjKy
1sWHRTuG+q5j8U0sf4a8uDRuBgpFZ1qegBUpAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUnFY/+C38NPdxik/hbFg8Do/wdYgwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTQ1L25GWV8tQzM4TlBkeGlrX2hiRmc4RG9fd2RZZy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAe2FQAwDQYJKoZIhvcNAQELBQADggEB
AIVWeOFXhnOGM39sj2WhcE8jluL09WrMf4Cp0UcSxyL66P5nkLOKF9ff487+0hi4
fQ6r1Mn9sfBwmox+93yrWGsgAeP52jc08QPCObNyQu4XEPwyikbkX4a1hq8htBNB
3Z+6vj0JWaRkt8dfTYy5saeVZbu70Vw5L2Qxv4qX5dpcWxrcFQ8iz0iD83bi6n9E
nTTvkPqdxFPgBsT5L653LhKHQjjyi9HSMt6xXAmtA6CILqQGC65CbJu0PyiN0INy
Wcz/A7tjUa0yroe/rPZqvu3LCf/ODwsNTKoq1NrZWbD90DN6s6NcyoFXF4vFQIV1
BRBkAQhNDUBHsS321DFiOvk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:11 2023 by rpki-client on console-fra.rpki-client.org