Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/oRnRhzllc9lKvVp2fSfh_QvmKCY.roa
File:                     oRnRhzllc9lKvVp2fSfh_QvmKCY.roa (raw, json)
Hash identifier:          yNGNjHHGuqmaK4t6U7ZozBmQ566Jh+BXk9YOmVaPqas=
Subject key identifier:   A1:19:D1:87:39:65:73:D9:4A:BD:5A:76:7D:27:E1:FD:0B:E6:28:26
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       044E
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/oRnRhzllc9lKvVp2fSfh_QvmKCY.roa
Signing time:             Thu 13 Apr 2023 09:57:46 +0000
ROA not before:           Thu 13 Apr 2023 09:57:46 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        219.96.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1102 (0x44e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:57:46 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=A119D187396573D94ABD5A767D27E1FD0BE62826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:7c:bf:da:db:5a:01:8d:18:50:93:32:eb:
                    5c:91:c8:38:43:a0:48:2f:88:4f:a6:a3:a2:79:4b:
                    6a:11:72:68:5a:5c:10:c7:8e:d1:8b:50:f0:76:84:
                    e6:2f:59:3b:1b:e8:49:e0:c1:ef:5b:2f:6c:8c:8f:
                    0f:02:43:e0:8f:19:27:12:e1:9c:db:1c:44:af:5b:
                    f8:db:f2:77:3f:89:40:af:02:00:23:f5:83:67:5e:
                    8c:0f:f2:5a:ce:04:55:bf:4a:19:ae:82:bb:85:22:
                    e4:fc:53:4b:cf:94:f9:41:31:83:73:51:9d:7a:f3:
                    db:a8:2a:fa:c8:d8:54:e8:e0:87:ca:9b:b3:3a:69:
                    18:a7:0b:49:be:ca:e6:00:a9:63:9f:40:3d:7e:4e:
                    97:0b:eb:8a:1c:de:ee:c6:af:32:00:3b:eb:05:73:
                    de:90:a5:f5:87:00:44:9b:09:68:3f:96:47:50:bc:
                    ea:8a:44:2f:ce:9e:1d:c8:e6:08:1a:b8:9c:85:c0:
                    9c:4c:af:e5:c1:f2:5c:95:48:65:21:a8:a2:3e:91:
                    78:10:4d:08:6d:aa:f9:6b:72:0e:9f:10:6f:f5:f2:
                    e4:39:85:9e:3d:47:04:01:58:e9:1a:33:46:e1:64:
                    e0:b1:70:2f:84:59:2d:3c:8a:57:97:3a:05:6b:c2:
                    a1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:19:D1:87:39:65:73:D9:4A:BD:5A:76:7D:27:E1:FD:0B:E6:28:26
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/oRnRhzllc9lKvVp2fSfh_QvmKCY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         06:c8:57:8e:d0:75:62:7c:b0:5e:63:d1:df:08:47:fd:84:b6:
         11:23:41:19:9c:8b:52:28:11:32:f5:e9:c1:95:bf:a5:b2:a2:
         0b:20:31:cf:98:fc:32:c5:d6:9f:e7:b8:f4:03:6a:30:7e:75:
         7b:e3:43:c9:47:13:3a:ce:4f:e1:6e:35:98:2a:e8:de:89:a9:
         12:59:45:bb:bf:56:4f:74:49:c9:3d:ee:73:df:da:ea:82:7f:
         7b:29:a6:0e:49:0a:85:e2:54:ea:8a:e8:2d:17:64:93:e5:42:
         9f:c9:9e:9d:2a:2e:e5:05:27:03:f9:df:c5:7b:a1:f6:dc:7d:
         36:cf:92:b2:e6:27:c7:5f:65:41:22:7d:37:25:50:b2:f1:91:
         74:70:e1:58:68:fd:d4:63:12:77:0a:19:2a:c9:f3:d0:55:87:
         98:ca:65:8e:83:d7:bc:1e:e6:c2:b9:c9:32:0e:61:29:03:6f:
         88:48:49:a0:57:7f:7a:a0:9d:9a:9a:f7:cb:15:26:e3:97:36:
         0b:1e:44:90:58:fa:d0:78:78:4a:de:64:b1:7c:a5:f9:49:31:
         e0:aa:8a:54:f9:20:cc:a4:2c:9e:58:1e:73:6a:ca:6b:3f:60:
         30:cf:6c:56:9c:5f:83:09:ad:b6:45:16:57:03:9e:c8:ef:d0:
         a4:6e:2b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org