Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/qq6EDzb07AHrFOwrEYKLAwx46jo.roa
File:                     qq6EDzb07AHrFOwrEYKLAwx46jo.roa (raw, json)
Hash identifier:          +aywfInoCUqvuLYsvgn/OZAXve6DNNq9/HXfhGK6eD4=
Subject key identifier:   AA:AE:84:0F:36:F4:EC:01:EB:14:EC:2B:11:82:8B:03:0C:78:EA:3A
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       037E
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/qq6EDzb07AHrFOwrEYKLAwx46jo.roa
Signing time:             Sun 01 May 2022 01:29:40 +0000
ROA not before:           Sun 01 May 2022 01:29:40 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        182.21.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894 (0x37e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:40 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=AAAE840F36F4EC01EB14EC2B11828B030C78EA3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3f:8f:93:a9:ba:3a:76:4c:e1:27:b4:e4:d1:
                    f3:8f:42:75:93:63:98:f7:5a:09:74:7f:eb:c7:4e:
                    c3:14:01:ce:91:c3:2d:8e:06:df:d6:22:4e:3e:c8:
                    71:9d:3a:9d:fb:e9:9c:a9:79:79:37:3e:2d:15:e1:
                    47:f2:9a:e8:22:17:4b:0d:fb:19:ff:a1:7b:15:d0:
                    e4:ca:40:e3:a3:bd:46:c5:21:7c:9d:89:f6:e0:e1:
                    69:d7:18:fa:b0:a3:dc:9c:d9:41:84:86:d1:eb:20:
                    56:92:8d:a8:37:a5:be:f2:77:3d:ad:f9:df:a7:0a:
                    c5:4f:71:44:5e:8f:f1:cb:ac:18:e6:2e:1c:a9:55:
                    5f:35:66:bb:d1:78:17:88:0a:61:fb:d9:3e:c6:3d:
                    24:e5:65:65:8c:c6:e5:da:5c:64:f2:bb:dc:c9:f1:
                    ed:c7:cf:e7:c1:6a:6c:21:c8:f8:00:44:4b:67:88:
                    2e:d4:97:f6:73:28:59:6e:e4:d6:a1:91:e2:4a:2d:
                    9f:0b:95:61:f9:9b:fc:7c:97:2c:62:c1:f8:d2:3f:
                    83:cb:23:2c:94:54:8d:a8:07:b1:e8:cd:07:d2:13:
                    3f:d5:7a:1e:48:bd:ee:4c:2f:56:64:69:89:1d:c2:
                    02:bc:a7:63:a9:a5:33:bd:4b:c4:3a:0a:35:82:98:
                    61:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AE:84:0F:36:F4:EC:01:EB:14:EC:2B:11:82:8B:03:0C:78:EA:3A
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/qq6EDzb07AHrFOwrEYKLAwx46jo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.21.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ab:07:84:07:33:33:20:ab:19:43:df:2e:f0:f6:e5:be:a1:db:
         4d:9f:e0:5c:a1:33:ac:1d:39:ee:85:e5:e2:ab:ed:40:e2:34:
         1f:19:e4:36:c3:6b:ce:b4:ef:f2:bd:d1:43:cb:59:6b:e1:fc:
         0a:ed:72:de:10:a9:2e:6d:eb:d4:97:90:79:86:1b:42:70:06:
         f3:c0:4d:bd:cb:09:28:c7:4e:4f:e6:0f:36:12:d5:67:48:b2:
         f9:bf:4a:5a:11:23:16:f1:76:f2:73:36:b4:5c:31:05:49:03:
         01:72:45:47:44:b8:32:6a:8d:a3:cc:b9:72:fb:50:af:e5:cb:
         e8:de:71:a1:b3:3e:ad:18:c4:ae:1e:46:55:7f:9f:31:38:98:
         c0:a1:1f:f9:be:32:27:b0:f7:3e:aa:52:74:9d:22:67:93:73:
         c1:00:94:b5:96:c6:13:56:74:9c:7b:f5:ac:58:87:6b:4c:16:
         a2:f9:63:ab:65:9b:60:45:08:66:46:77:23:a3:2e:80:d7:04:
         2c:7c:5c:b7:ff:58:9c:9c:a9:14:69:ec:c4:be:66:aa:57:44:
         77:35:93:fd:1e:24:2e:e0:b3:f9:b9:c9:20:a6:27:c0:45:67:
         63:0d:db:a5:05:09:b5:66:7c:50:5d:d4:6e:29:9e:21:9f:7b:
         a8:5c:55:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org