Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/oNfo4IEX8GAAyqQbusxEwb1xl1I.roa
File:                     oNfo4IEX8GAAyqQbusxEwb1xl1I.roa (raw, json)
Hash identifier:          YZTT1n4vy6k7sA4y9//sijKM0BUSzGMgjaRbs4x1Nas=
Subject key identifier:   A0:D7:E8:E0:81:17:F0:60:00:CA:A4:1B:BA:CC:44:C1:BD:71:97:52
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       035B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/oNfo4IEX8GAAyqQbusxEwb1xl1I.roa
Signing time:             Tue 25 May 2021 02:43:07 +0000
ROA not before:           Tue 25 May 2021 02:43:07 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        180.149.204.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 859 (0x35b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:43:07 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=A0D7E8E08117F06000CAA41BBACC44C1BD719752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:00:b1:4c:81:d8:b8:6a:dd:5c:e8:12:25:
                    a2:ae:c7:e9:37:bd:74:04:62:16:e6:0d:31:71:33:
                    c2:da:1e:ee:5d:41:45:e4:3c:3a:5a:4d:37:32:c3:
                    ca:5c:30:0b:18:24:0f:fe:49:eb:cb:ec:9f:b6:14:
                    51:66:ad:42:e2:d9:e0:66:74:2a:03:8a:6f:d1:f2:
                    8e:95:bc:72:40:4f:16:69:af:49:63:7a:8b:78:a2:
                    1c:0e:af:fa:5d:d6:63:af:9a:16:31:87:21:29:ab:
                    05:72:b7:dc:d7:c0:68:f5:aa:f5:70:73:d5:d5:e1:
                    04:94:b9:90:b9:6a:cc:ff:06:79:6e:45:78:5b:83:
                    21:3c:c1:4b:14:b7:1e:f5:97:a2:79:32:51:1f:bc:
                    4b:cf:8d:f1:0b:15:56:a0:d9:50:d8:a1:e5:9c:fb:
                    ef:05:0e:e1:65:c3:25:2a:4a:3d:dd:5f:b5:55:a8:
                    88:31:07:38:4a:82:09:85:c1:48:1e:eb:61:67:b4:
                    43:d1:13:5d:d0:97:fb:8b:92:ed:cd:36:46:08:81:
                    9f:9c:ff:a0:86:dc:6c:6b:25:c5:cf:14:8f:2b:45:
                    14:6f:a6:81:52:27:f8:d2:f6:91:72:de:c9:1f:e8:
                    56:99:14:2e:75:70:1e:bb:69:81:71:4b:d6:3f:0c:
                    90:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D7:E8:E0:81:17:F0:60:00:CA:A4:1B:BA:CC:44:C1:BD:71:97:52
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/oNfo4IEX8GAAyqQbusxEwb1xl1I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.149.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:97:05:0f:bd:8a:b0:71:bc:6e:14:8d:f2:76:7b:97:b6:d9:
         ad:2c:20:1a:07:ae:2e:60:78:3b:64:b2:e3:12:99:cb:9e:15:
         d6:09:f5:8e:ad:98:53:da:ef:90:c1:c0:84:17:aa:ba:0c:a6:
         9f:25:6f:c6:4b:66:da:98:5d:17:2b:d4:74:d0:c9:51:01:f5:
         1b:bd:2b:6a:90:52:09:c0:83:a7:d8:74:32:94:b5:9f:7a:af:
         11:2a:e7:2d:64:d6:e0:9e:b7:ec:1d:44:ed:d2:63:e6:ee:4a:
         8b:9b:22:2c:07:f9:fe:d1:70:6c:3f:26:f2:60:b6:8b:26:cb:
         84:85:38:4c:7b:63:3f:47:0f:31:43:a0:80:c6:21:1b:0e:22:
         8c:6b:33:60:10:b6:44:a8:9e:97:ed:6b:10:e2:d5:4d:06:c7:
         f9:d8:87:be:aa:47:a7:97:d6:5c:09:8f:96:d5:da:3d:6e:16:
         70:7d:00:ef:ef:9c:5e:4d:c6:20:6e:44:d8:69:98:7b:69:db:
         ca:30:13:2f:6f:37:fa:7b:a6:85:35:59:e7:ec:d2:c5:1a:16:
         0b:d4:2c:f2:48:ea:a3:13:27:fc:f9:25:14:6d:69:83:20:45:
         78:9e:17:bb:0e:fc:9b:d7:5c:8d:02:b0:df:6f:83:9a:ed:d2:
         ca:c4:c5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org