Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/s3VL1HgpO0kxjhaKVvEeeLp0Df4.roa
File:                     s3VL1HgpO0kxjhaKVvEeeLp0Df4.roa (raw, json)
Hash identifier:          /IPa+DMqN4LXd9ZTvsY8YZHfnHe84PPxZ9dwNfDv/No=
Subject key identifier:   B3:75:4B:D4:78:29:3B:49:31:8E:16:8A:56:F1:1E:78:BA:74:0D:FE
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0438
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/s3VL1HgpO0kxjhaKVvEeeLp0Df4.roa
Signing time:             Thu 13 Apr 2023 09:55:27 +0000
ROA not before:           Thu 13 Apr 2023 09:55:27 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        116.254.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1080 (0x438)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:55:27 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=B3754BD478293B49318E168A56F11E78BA740DFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:77:87:39:54:fb:5c:63:80:64:c6:81:bc:ad:
                    fe:31:64:9f:07:84:2b:f4:52:74:cb:cf:4d:93:cf:
                    76:9a:6a:6d:0c:62:47:0c:f2:e4:6c:f2:18:96:e4:
                    87:b9:d7:f6:54:34:8a:32:f8:d9:ef:81:2e:6b:ba:
                    cf:f8:e1:9b:21:16:0c:93:78:6d:61:f3:7f:69:b4:
                    6a:32:6d:44:40:4d:3d:06:e7:22:18:4a:f9:d6:7a:
                    5d:d2:c2:b9:42:de:85:0b:c7:de:d6:37:e8:cf:bc:
                    7d:46:16:12:72:e0:cc:29:87:e8:d5:2d:4f:b7:55:
                    aa:9e:ec:c7:f7:2f:1f:c7:28:7a:f9:c8:88:7f:92:
                    1b:60:3b:97:38:99:3d:99:69:f0:7f:14:d6:fb:e0:
                    b6:90:d6:f6:95:d2:17:bc:1d:78:af:dc:5b:f6:14:
                    d0:63:bb:f4:56:63:07:0d:ae:29:52:a6:2c:e7:83:
                    57:ce:9e:db:cd:1a:f4:6b:b9:d3:d5:ec:50:10:ee:
                    b1:cc:19:05:0c:54:65:3d:5b:c6:56:52:13:76:a4:
                    36:c7:9b:c6:04:d0:6e:cd:d0:b5:13:cb:dd:55:b0:
                    de:e3:60:a6:3e:09:8a:90:f5:f7:bc:70:f4:0d:d8:
                    64:0d:d0:82:4a:f1:96:d2:d0:56:0b:ec:1d:60:59:
                    34:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:75:4B:D4:78:29:3B:49:31:8E:16:8A:56:F1:1E:78:BA:74:0D:FE
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/s3VL1HgpO0kxjhaKVvEeeLp0Df4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.254.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c3:28:45:d7:34:b9:b8:48:aa:53:cd:3e:01:98:02:36:e1:7b:
         21:b1:02:a8:87:e9:d4:83:b9:ec:bb:f2:4c:38:e3:fa:d9:8c:
         f3:78:f7:8a:12:a2:31:92:a1:b0:ee:a0:80:fb:cc:1b:a0:e6:
         dc:c1:d1:a0:52:81:57:73:c1:3b:79:ee:57:02:11:60:bc:9b:
         22:77:b4:48:f2:0c:95:03:c7:0d:13:3a:35:7d:40:15:c0:cf:
         55:89:0e:ee:d9:e1:12:d4:31:c3:d6:60:50:20:97:79:f2:6e:
         b6:9e:8b:1a:29:10:6a:6d:e4:2d:30:9c:8c:61:f1:c8:e6:10:
         75:a9:a8:05:a7:08:0c:da:fa:c0:79:14:e7:05:fd:54:8b:c5:
         ba:e1:9a:fc:5f:be:9f:03:f6:09:65:d1:7e:c1:0a:54:39:59:
         98:03:f7:ae:0f:ae:32:99:86:72:6f:63:e6:98:ea:9c:dc:81:
         c8:fa:03:68:7c:a4:b2:eb:58:23:7e:27:31:3b:21:5a:9d:4f:
         3e:33:0e:f4:d3:9d:f6:25:32:3c:c0:79:c6:9f:0c:44:23:84:
         6e:4b:ca:89:ab:d4:49:61:21:10:b0:5d:61:11:a0:80:75:f1:
         56:47:c0:b7:c1:21:b0:7b:7c:b6:8b:f0:28:ab:c3:7c:d8:09:
         76:1c:27:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org