Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/rcUZNZCEOKj_Sm-Lu3HO9Sip5DY.roa
File:                     rcUZNZCEOKj_Sm-Lu3HO9Sip5DY.roa (raw, json)
Hash identifier:          VIVXSvgt6D68XRjPbuNEuKQEeWJUjvlVIrAFp67BZjU=
Subject key identifier:   AD:C5:19:35:90:84:38:A8:FF:4A:6F:8B:BB:71:CE:F5:28:A9:E4:36
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0409
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/rcUZNZCEOKj_Sm-Lu3HO9Sip5DY.roa
Signing time:             Thu 13 Apr 2023 09:52:17 +0000
ROA not before:           Thu 13 Apr 2023 09:52:17 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.96.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1033 (0x409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:52:17 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=ADC51935908438A8FF4A6F8BBB71CEF528A9E436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:82:11:f2:51:31:fb:a2:98:59:5a:b8:b9:55:
                    57:04:54:28:09:c9:65:74:33:c0:a6:4e:c8:c8:4a:
                    28:af:59:44:46:0b:4f:3a:f4:67:9d:ea:30:55:15:
                    d2:27:97:76:fe:84:db:c9:13:e4:bd:7f:f0:9c:31:
                    0f:88:63:71:e7:13:78:14:70:70:77:17:2e:10:03:
                    ae:7a:f2:80:9a:b7:db:0b:6e:7e:a7:de:7d:2c:06:
                    8d:10:f4:59:28:2f:5a:e3:18:34:11:aa:24:45:94:
                    9f:2f:18:2c:d1:4b:bb:a9:b9:00:b7:42:98:22:c9:
                    b5:fe:e3:df:ff:62:d5:23:fe:f6:1b:88:3b:1b:ec:
                    6c:4c:90:e3:af:83:45:d2:c4:1c:8d:2c:6f:dc:fb:
                    89:a9:20:47:d9:50:22:39:36:d4:1a:72:00:72:21:
                    32:b6:a1:1d:7b:6d:96:72:b4:d6:bf:ed:fa:ae:67:
                    09:6c:e9:a8:84:79:17:82:f8:76:a3:48:16:a0:fe:
                    3e:26:ac:71:27:1d:9e:c7:63:6e:a1:d6:69:b5:51:
                    08:3d:f5:6f:cc:66:ca:cc:9c:36:5b:13:10:e3:21:
                    f0:11:bd:59:2c:7a:9f:a2:42:f8:dd:1c:b8:c7:25:
                    d3:4c:86:71:8e:53:97:93:6a:e2:b7:f2:6d:a3:c4:
                    3e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C5:19:35:90:84:38:A8:FF:4A:6F:8B:BB:71:CE:F5:28:A9:E4:36
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/rcUZNZCEOKj_Sm-Lu3HO9Sip5DY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:74:3d:1b:34:83:7a:57:0b:43:f7:d7:25:20:0d:df:5b:cd:
         e0:34:fb:c5:16:ed:b9:03:65:a7:8e:1c:d0:ce:72:a9:8e:f9:
         fa:6e:67:59:57:a5:45:58:26:b9:24:7c:49:e2:95:73:9b:94:
         5e:72:d4:ef:c1:93:3b:38:2f:5b:2b:06:73:93:d1:4d:f5:ce:
         13:e2:9a:40:c5:28:67:85:d0:65:ef:29:bc:76:66:8f:30:9d:
         73:7b:e9:b3:7d:ba:ee:4a:86:f6:70:27:88:2b:61:07:a5:cc:
         d5:8f:f7:8f:1d:f8:03:11:bc:1e:c2:6e:33:ba:44:a3:78:40:
         dc:f9:4f:ef:43:2b:44:a2:0d:e8:8c:a2:90:56:4d:2e:ed:15:
         9e:46:22:c7:34:f3:3d:f9:7a:23:17:6a:c4:d2:3c:f5:3f:67:
         90:e2:42:ff:d2:e4:03:f9:93:73:f1:6f:4c:63:84:01:ab:d1:
         55:3a:4a:09:0b:da:ed:08:67:4c:c6:29:f4:d7:a8:77:d6:df:
         80:18:18:89:1d:5a:5f:60:b2:66:2c:1d:40:6f:4f:c5:9c:3a:
         0f:84:49:5c:54:4e:99:8b:00:f8:bd:ba:09:c5:b9:31:00:30:
         36:08:01:0a:fd:14:81:93:d4:7c:1a:03:9a:09:60:0b:a3:bc:
         ba:96:e4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org