Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/s0Nfvt_ePoj7YJdn3N81wId4nNM.roa
File:                     s0Nfvt_ePoj7YJdn3N81wId4nNM.roa (raw, json)
Hash identifier:          xakWNX7djtaAMDBszHDVtmjc7TJvipIJMVg/b031HTQ=
Subject key identifier:   B3:43:5F:BE:DF:DE:3E:88:FB:60:97:67:DC:DF:35:C0:87:78:9C:D3
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       02FC
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/s0Nfvt_ePoj7YJdn3N81wId4nNM.roa
Signing time:             Tue 25 May 2021 02:41:59 +0000
ROA not before:           Tue 25 May 2021 02:41:59 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        219.96.16.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 764 (0x2fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:41:59 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=B3435FBEDFDE3E88FB609767DCDF35C087789CD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:44:14:1f:59:65:4f:f0:e4:b2:94:1b:3d:1c:
                    ea:dd:c8:63:c6:69:4a:e1:7d:e1:9a:fe:d8:b0:1d:
                    8b:da:6c:79:98:6b:56:00:0e:55:65:9f:6b:0f:c3:
                    58:a3:dd:44:8b:0e:a6:1b:dd:42:33:9f:f6:ea:0c:
                    30:4a:b9:b8:b8:30:08:7c:69:54:18:c6:9c:1e:04:
                    8e:f4:44:9f:00:6b:f0:b0:7f:68:8e:e9:45:d8:db:
                    ca:01:67:7d:1a:9e:cf:7d:58:11:22:e7:10:ec:f3:
                    71:48:d6:7f:30:c0:22:a4:d3:b4:86:5a:3d:1d:65:
                    d9:51:03:37:db:6e:de:93:82:62:99:79:a5:67:73:
                    35:f4:56:92:20:ea:65:2c:00:a5:e4:79:f1:06:5c:
                    14:eb:b2:68:a8:5d:1b:d7:c8:cb:49:8e:7a:46:d4:
                    10:39:5d:92:07:b6:a9:8a:f6:d2:ff:ed:8a:b1:6f:
                    41:5a:93:4e:3d:5f:9c:05:5b:11:e4:66:70:64:2d:
                    6a:bf:26:75:95:98:0f:0b:e1:96:a7:3c:fd:65:ee:
                    34:eb:8a:4b:98:4f:a5:26:65:8a:4b:a6:75:53:2e:
                    4e:9b:4d:89:40:88:b2:d6:8d:97:98:5d:2a:24:b8:
                    29:28:ad:33:f2:1f:2e:8f:eb:67:30:6b:cd:20:b4:
                    ca:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:43:5F:BE:DF:DE:3E:88:FB:60:97:67:DC:DF:35:C0:87:78:9C:D3
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/s0Nfvt_ePoj7YJdn3N81wId4nNM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:36:22:41:a9:84:d2:8d:85:9f:cc:67:8d:37:ac:b0:63:a7:
         7f:60:f5:b0:42:57:29:ce:6a:4c:db:da:34:8c:ba:a2:d0:04:
         cc:c8:98:ab:f8:59:32:4c:06:b2:5a:d0:b1:ad:63:f5:fe:25:
         73:67:97:62:ef:84:13:62:4f:81:22:27:97:45:df:e4:ea:0f:
         b6:2c:63:ed:97:c9:1f:2e:af:a9:62:b0:a4:52:8d:8c:87:d4:
         84:3d:32:c8:82:4e:58:3f:0c:01:91:e6:10:a2:fd:8b:2f:74:
         37:8a:4c:38:80:72:f6:44:c9:2d:6c:e0:45:80:43:9d:10:68:
         41:d4:6a:a9:e6:ef:39:4c:91:8d:cd:63:d8:c7:10:23:98:59:
         dd:c1:da:82:55:91:f9:31:04:4a:f7:4e:ab:69:fc:b9:c6:ba:
         a4:5a:4b:d7:bf:0d:bb:00:61:76:1e:94:4b:5c:96:ba:8f:ab:
         25:e8:90:d1:43:81:f8:65:1c:e6:29:55:a9:d3:ed:6c:4c:a2:
         50:c2:51:80:c3:0b:6f:a1:b3:99:df:c5:ab:5d:06:de:67:4b:
         19:3d:30:5d:16:10:5f:af:1f:06:d2:ac:0f:77:4b:3d:52:03:
         16:bd:00:ed:f9:23:a5:35:8e:c9:96:1c:29:30:8f:d2:1e:6b:
         3a:fa:85:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org