Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/rcUb02WtmSkSZjNv8rw7Xbtx4iQ.roa
File:                     rcUb02WtmSkSZjNv8rw7Xbtx4iQ.roa (raw, json)
Hash identifier:          SlNaJ3pL+D/WHU4tH6scNbF3klM49CPcdHr9Pe4NcQ4=
Subject key identifier:   AD:C5:1B:D3:65:AD:99:29:12:66:33:6F:F2:BC:3B:5D:BB:71:E2:24
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03BA
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/rcUb02WtmSkSZjNv8rw7Xbtx4iQ.roa
Signing time:             Sun 01 May 2022 01:32:08 +0000
ROA not before:           Sun 01 May 2022 01:32:08 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        42.125.196.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 954 (0x3ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:08 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=ADC51BD365AD99291266336FF2BC3B5DBB71E224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:03:39:14:16:6b:dd:8f:e2:d6:c8:94:71:a9:
                    67:ec:e4:36:c3:87:35:ee:e5:f3:26:f3:e0:b0:76:
                    e9:95:27:f3:e0:20:7f:52:c9:62:5f:34:26:ee:0a:
                    e8:14:c2:06:7c:13:93:d8:0c:19:a0:c0:a9:d6:4b:
                    7c:33:f9:3b:d6:52:fa:a2:6f:0f:7a:56:6d:07:6b:
                    96:df:eb:d6:c4:dc:8b:e6:a3:75:1a:6a:c0:fb:e6:
                    fe:59:f3:af:c8:52:d5:1b:ac:d0:15:91:17:32:db:
                    c3:81:94:ef:c3:84:4a:0c:72:48:dc:0b:3b:f9:ea:
                    cd:b9:62:ed:f0:cf:97:f1:2b:38:65:4f:06:c5:5d:
                    d2:bd:23:35:1a:a2:14:48:af:1b:62:52:c3:a3:53:
                    6c:0e:1b:c0:1c:0b:68:3b:ab:4c:3c:36:73:1a:b7:
                    ef:28:ba:9b:4f:98:a0:33:b0:97:d9:66:cf:eb:8f:
                    10:5d:f7:aa:65:b3:86:a6:f6:d7:89:32:76:0a:cb:
                    6b:7c:23:ad:23:2d:1c:b7:49:44:9f:03:b5:53:ca:
                    63:84:cf:ff:ff:65:77:5f:2c:25:a2:8a:8c:1f:a2:
                    e0:50:47:be:48:ef:84:11:e8:ba:c0:2b:50:71:d7:
                    21:bc:82:e4:11:39:71:47:62:8a:d0:88:f8:8b:fb:
                    7e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C5:1B:D3:65:AD:99:29:12:66:33:6F:F2:BC:3B:5D:BB:71:E2:24
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/rcUb02WtmSkSZjNv8rw7Xbtx4iQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:49:35:6e:af:a6:08:f8:c8:67:6f:78:92:de:9e:69:c5:84:
         7e:12:b9:d0:8c:3b:17:09:32:b9:12:7f:ce:a5:2d:a6:53:e8:
         8b:b4:d0:e4:4c:ac:59:10:36:a1:1e:65:a0:2d:f9:1b:65:d0:
         ca:c8:23:c8:ad:49:e3:c6:8b:56:62:00:7c:ae:05:12:ca:5e:
         e2:e5:14:8f:59:2f:69:63:8f:7d:0e:13:4e:45:3e:54:2a:03:
         15:70:bb:4a:f9:ec:db:82:13:f7:71:de:5e:2c:56:df:1f:62:
         b9:55:a4:eb:ec:b0:3b:76:a4:b7:41:5e:bf:4e:b9:8b:76:f9:
         04:ee:d0:34:20:3d:5d:a2:16:df:4c:07:fc:63:8e:b4:99:29:
         05:5e:24:c3:fe:db:01:54:32:09:03:79:b8:21:0e:4d:ba:a6:
         f6:f6:4c:11:3d:90:bb:1f:f1:21:1e:97:38:04:d3:72:b8:72:
         02:5f:58:29:71:da:5a:9b:38:df:01:fe:cf:d9:10:8f:f7:1f:
         4a:f5:03:24:57:c8:f2:a7:87:c9:e7:d2:b8:83:43:f8:b2:4e:
         76:0c:bd:0d:2b:f2:e1:22:3d:94:e2:aa:8a:8f:bd:b6:03:59:
         14:90:d8:53:16:fe:8d:cb:9f:ff:73:8d:3c:4d:49:74:d3:6d:
         fa:bc:db:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org