Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/p1PDFLEJc1rCHzIsm3xfYnXdW3s.roa
File:                     p1PDFLEJc1rCHzIsm3xfYnXdW3s.roa (raw, json)
Hash identifier:          tLf2X/qac7qhS+Umz8dIfCp6vkbhKdPcejZQMvGEGAg=
Subject key identifier:   A7:53:C3:14:B1:09:73:5A:C2:1F:32:2C:9B:7C:5F:62:75:DD:5B:7B
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       046D
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/p1PDFLEJc1rCHzIsm3xfYnXdW3s.roa
Signing time:             Thu 13 Apr 2023 09:59:47 +0000
ROA not before:           Thu 13 Apr 2023 09:59:47 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.104.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1133 (0x46d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:59:47 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=A753C314B109735AC21F322C9B7C5F6275DD5B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cc:a3:4a:4d:16:64:ea:fe:94:36:6a:63:cb:
                    bd:eb:20:9b:da:1d:fb:0f:29:35:d8:4c:21:18:29:
                    ad:48:56:e7:ba:b7:bd:a1:db:7c:8c:73:99:ec:80:
                    7b:6c:4f:1b:c6:2a:b9:c0:9c:cd:93:79:e9:e5:72:
                    0e:93:19:4d:83:37:53:54:8d:fe:1a:0e:bc:56:94:
                    20:cb:6e:cf:93:0f:d9:83:db:63:14:88:50:4f:59:
                    8e:70:b2:af:50:43:d8:ac:75:59:fb:be:16:01:d8:
                    95:c2:e2:48:74:e2:ef:cf:4c:0f:6d:7f:12:0a:57:
                    0d:d1:28:01:11:9c:56:75:15:15:95:7c:f2:42:72:
                    67:1b:ea:40:4c:7c:31:54:75:5f:e5:18:eb:6f:a0:
                    26:2b:23:13:51:b0:81:ca:49:74:0a:51:9a:34:33:
                    96:4b:8e:33:23:83:2e:9b:6d:d6:9b:7f:1d:20:9c:
                    87:b9:eb:c9:a0:47:6c:65:d8:72:8b:00:41:48:21:
                    d1:a5:58:a2:2c:e9:0b:58:91:89:7b:c2:12:ad:da:
                    77:f1:f3:24:4d:24:66:2c:8d:4f:c8:10:c3:9e:fc:
                    d7:0e:cf:c8:69:d7:b4:30:ff:da:8c:51:0f:e8:94:
                    de:f7:ea:a2:f7:d1:20:e0:7b:72:e6:59:e9:55:80:
                    59:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:53:C3:14:B1:09:73:5A:C2:1F:32:2C:9B:7C:5F:62:75:DD:5B:7B
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/p1PDFLEJc1rCHzIsm3xfYnXdW3s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:4a:24:86:da:be:3a:0b:61:ea:b7:ac:c6:00:b3:60:c6:3a:
         aa:5a:44:9c:d9:e2:be:d2:32:56:97:42:6f:75:ec:c7:f4:10:
         24:42:7d:9d:6a:6e:10:e2:8b:8f:0d:9f:ed:d7:2d:50:b8:13:
         02:5d:d5:30:15:0b:0a:3c:22:9b:67:d7:64:61:de:4a:aa:69:
         5c:5d:5c:0a:ff:26:57:01:3d:6d:37:f5:b9:e0:15:aa:34:1c:
         d1:54:ad:95:7b:eb:e0:fd:b1:18:62:cc:3f:e5:e8:29:ad:ab:
         e0:3d:01:07:ff:47:d4:6b:3e:16:ba:c2:8d:47:14:a7:26:de:
         ee:1e:5c:82:5b:73:82:83:21:39:7f:9e:01:ff:cc:b8:e2:70:
         19:d2:09:83:67:a4:cf:7c:71:2e:28:12:f6:38:e4:f3:c5:4b:
         e5:59:5a:4c:09:fb:30:22:72:e8:b1:68:13:6d:d5:78:cf:64:
         f9:3e:73:49:f0:27:39:09:8a:28:38:0b:b9:94:9a:11:c3:1b:
         c4:64:55:3a:1e:2c:c7:f7:49:8b:85:f4:8f:f6:8e:f0:eb:cd:
         00:cc:28:d8:0c:65:fc:1a:69:f7:92:25:e0:f5:10:14:97:fc:
         1c:ed:c5:08:fb:b8:82:f3:4b:83:e4:f4:6d:59:e8:c5:75:e3:
         e8:c0:31:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org