Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/nNBx6uQuin2D1tsrFvHHA7lZWbQ.roa
File:                     nNBx6uQuin2D1tsrFvHHA7lZWbQ.roa (raw, json)
Hash identifier:          u/0YtzesvC30sB1GuEABX9JGIVj38XBFd0WtxRT/pPI=
Subject key identifier:   9C:D0:71:EA:E4:2E:8A:7D:83:D6:DB:2B:16:F1:C7:03:B9:59:59:B4
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0373
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/nNBx6uQuin2D1tsrFvHHA7lZWbQ.roa
Signing time:             Sun 01 May 2022 01:29:35 +0000
ROA not before:           Sun 01 May 2022 01:29:35 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        220.216.124.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883 (0x373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:35 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=9CD071EAE42E8A7D83D6DB2B16F1C703B95959B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e7:07:fc:11:b9:df:5f:6a:f3:56:92:3f:94:
                    5c:6d:c5:81:99:e4:13:e2:20:d1:f6:ce:1d:7c:0f:
                    b6:ea:96:f0:67:3a:92:00:72:7d:54:4a:26:8b:35:
                    98:28:6e:68:c1:21:55:c3:37:6d:d8:99:de:1d:14:
                    ae:a9:80:42:58:9b:59:a4:28:a7:d2:c4:20:7b:5f:
                    6f:4b:7f:46:15:10:dd:b7:35:02:0c:f6:b6:1f:34:
                    ac:9a:25:4d:26:af:e1:96:99:70:fb:e1:d5:ce:11:
                    15:8e:0a:76:a2:c6:a8:3d:7f:4b:2d:6e:70:32:0c:
                    72:d3:4e:c1:e0:11:d0:e3:fd:2d:5b:d4:58:14:9f:
                    e9:19:1b:44:01:b4:aa:6c:37:9d:4d:2d:c9:42:f5:
                    f9:2c:19:c0:ef:6b:87:09:a3:08:9f:de:47:10:d1:
                    a8:83:c3:4b:d1:7b:bc:fc:90:ed:14:64:da:26:23:
                    6d:37:ea:1a:6a:14:c9:1a:ae:6f:72:56:27:eb:8c:
                    7e:54:ec:c4:05:28:ef:a9:4e:d3:03:29:1c:4e:a7:
                    44:b4:90:b2:69:a4:22:ff:0a:61:26:ae:d1:f4:37:
                    fd:71:08:42:14:6f:cb:d5:d1:7c:ea:30:78:a3:33:
                    3d:bb:a0:f2:59:03:05:2c:18:5c:2c:97:55:0b:d8:
                    c7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D0:71:EA:E4:2E:8A:7D:83:D6:DB:2B:16:F1:C7:03:B9:59:59:B4
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/nNBx6uQuin2D1tsrFvHHA7lZWbQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:1e:f9:3d:81:1d:53:fb:0c:a0:9b:29:51:86:f8:38:20:00:
         8f:ac:b6:51:4b:cb:4c:51:95:54:bf:84:16:5c:3c:be:cc:c1:
         c0:7b:2f:94:d7:6e:da:ef:eb:61:a6:2d:87:57:77:a3:fb:a6:
         22:95:42:15:f6:d7:fe:92:e8:c6:c5:ed:2e:49:b0:1d:3c:4b:
         52:dd:f4:90:f3:16:81:d8:be:5d:20:d4:46:d6:2b:51:99:c6:
         7c:3c:32:a9:28:08:7a:ce:18:e9:00:bb:bd:5b:60:b2:3a:c2:
         b8:80:9c:16:24:7b:a7:bd:77:68:38:c6:f7:08:0f:0a:5f:3f:
         63:87:1a:50:5e:da:fd:7b:33:ef:e4:e4:a6:75:b6:05:f8:63:
         5c:ae:d5:ee:33:4e:4b:b7:7c:0f:13:70:2b:d8:b4:7a:cc:5d:
         4a:96:da:49:a7:ed:6d:fc:3c:4f:c4:bb:7b:f7:2e:cf:ab:1f:
         0a:2b:90:37:67:6a:c0:57:b8:24:90:8b:52:b4:05:a7:ed:99:
         dd:23:9e:ff:76:72:2f:bb:4a:a4:5e:f3:9f:4d:51:c7:6b:25:
         2c:6b:3f:47:52:56:48:dc:0e:92:f0:72:10:c3:1a:6e:93:62:
         88:0d:1f:55:a5:5b:d1:e3:bd:35:fe:d2:96:50:5f:b3:69:02:
         ab:97:b6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org