Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/s4dwMLLrUm5klLofZMaU8634iwY.roa
File:                     s4dwMLLrUm5klLofZMaU8634iwY.roa (raw, json)
Hash identifier:          avLVGcKRVxhiTs+Mhkpa4xanzFhbOIFBD+DWd1GeLAc=
Subject key identifier:   B3:87:70:30:B2:EB:52:6E:64:94:BA:1F:64:C6:94:F3:AD:F8:8B:06
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0356
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/s4dwMLLrUm5klLofZMaU8634iwY.roa
Signing time:             Tue 25 May 2021 02:43:06 +0000
ROA not before:           Tue 25 May 2021 02:43:06 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        61.198.112.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854 (0x356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:43:06 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=B3877030B2EB526E6494BA1F64C694F3ADF88B06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:20:d1:e7:30:e0:e6:12:c2:bf:71:68:01:51:
                    48:84:1d:2a:aa:83:db:80:00:fd:c9:4a:4d:18:2c:
                    17:5c:79:8f:3c:60:83:5d:ad:aa:a0:74:5e:49:93:
                    6f:fb:33:d6:71:8c:51:b1:5b:6c:d3:e9:6e:ac:d8:
                    54:8d:b4:09:5e:ed:19:36:4f:f9:d7:43:fe:19:d3:
                    d5:ff:93:4f:80:e6:fd:8c:8a:b3:e9:1d:ac:f3:c6:
                    80:a9:ca:16:cd:b9:ef:28:e8:69:93:a9:c8:9e:13:
                    12:f9:34:51:f4:1c:6a:83:7e:f2:91:9b:60:c9:e0:
                    40:fd:01:68:9b:46:b5:aa:5d:4f:93:a5:30:53:64:
                    2c:42:d3:b3:b2:ab:c5:a5:d4:c1:34:a2:54:47:80:
                    74:66:5f:0a:41:37:31:da:aa:01:dc:f2:4d:49:4f:
                    b0:c9:2e:1e:2f:27:41:2c:c3:d8:58:b2:7b:c8:49:
                    77:09:0f:f6:56:b5:b8:f1:12:5e:d7:2f:0f:be:3c:
                    11:35:5d:49:06:6e:72:b1:f4:0f:36:0b:0f:ef:8c:
                    52:a4:70:95:76:95:6e:46:1e:12:1d:b3:68:f7:15:
                    80:83:e8:cc:5f:e6:b2:02:dc:44:97:f9:86:02:d6:
                    e6:fd:44:ea:48:82:57:4b:83:93:b1:46:22:08:4e:
                    d3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:87:70:30:B2:EB:52:6E:64:94:BA:1F:64:C6:94:F3:AD:F8:8B:06
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/s4dwMLLrUm5klLofZMaU8634iwY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.198.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:06:0f:5a:47:66:b2:34:00:1c:57:e9:e1:5a:69:64:68:5e:
         65:47:26:9a:b5:a9:56:36:53:88:c8:a2:f8:65:fd:e6:ce:fa:
         b9:e6:4b:59:0b:40:e9:c2:1b:b7:5d:88:e4:f6:f9:3d:5f:73:
         1c:ef:3b:89:e0:aa:0b:84:2a:fa:77:20:2b:32:2b:bd:b7:73:
         b5:82:91:a6:8d:36:ba:32:68:54:02:a8:47:7b:c6:8b:b1:f0:
         16:43:c2:dc:24:ad:22:e5:cc:c7:ae:b8:83:d6:9e:5d:87:87:
         cd:25:3f:f4:c1:4a:dd:50:0c:4e:a4:fc:31:1d:f3:39:66:ad:
         25:b3:9a:14:a4:06:e2:d5:1b:2d:06:4e:76:30:d8:91:21:d5:
         6b:9f:d8:f9:ac:a1:90:bf:5d:a2:ed:1d:38:8a:e0:78:e2:53:
         66:ce:33:03:06:55:ba:54:98:36:0a:1a:dd:b1:aa:b6:98:22:
         51:c1:e6:ca:1d:85:5c:ad:b8:e6:71:8f:f2:2f:77:a3:1a:4e:
         7c:e4:ee:65:e7:47:82:b7:1c:d5:bf:b9:b6:27:48:ef:b7:0f:
         0b:a0:f8:e1:16:6c:a2:21:4a:f2:c8:cd:13:96:3c:a9:94:eb:
         4f:ee:67:56:e7:62:40:62:ed:57:e3:a6:1f:93:ab:7a:9b:1b:
         ff:22:8f:76
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICA1YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMTA1MjUw
MjQzMDZaFw0yMjA1MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIzODc3MDMwQjJFQjUy
NkU2NDk0QkExRjY0QzY5NEYzQURGODhCMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTINHnMODmEsK/cWgBUUiEHSqqg9uAAP3JSk0YLBdceY88YINd
raqgdF5Jk2/7M9ZxjFGxW2zT6W6s2FSNtAle7Rk2T/nXQ/4Z09X/k0+A5v2MirPp
HazzxoCpyhbNue8o6GmTqcieExL5NFH0HGqDfvKRm2DJ4ED9AWibRrWqXU+TpTBT
ZCxC07Oyq8Wl1ME0olRHgHRmXwpBNzHaqgHc8k1JT7DJLh4vJ0Esw9hYsnvISXcJ
D/ZWtbjxEl7XLw++PBE1XUkGbnKx9A82Cw/vjFKkcJV2lW5GHhIds2j3FYCD6Mxf
5rIC3ESX+YYC1ub9ROpIgldLg5OxRiIITtNVAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUs4dwMLLrUm5klLofZMaU8634iwYwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTQ1L3M0ZHdNTExyVW01a2xMb2ZaTWFVODYzNGl3WS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9xnAwDQYJKoZIhvcNAQELBQADggEB
ACkGD1pHZrI0ABxX6eFaaWRoXmVHJpq1qVY2U4jIovhl/ebO+rnmS1kLQOnCG7dd
iOT2+T1fcxzvO4ngqguEKvp3ICsyK723c7WCkaaNNroyaFQCqEd7xoux8BZDwtwk
rSLlzMeuuIPWnl2Hh80lP/TBSt1QDE6k/DEd8zlmrSWzmhSkBuLVGy0GTnYw2JEh
1Wuf2PmsoZC/XaLtHTiK4HjiU2bOMwMGVbpUmDYKGt2xqraYIlHB5sodhVytuOZx
j/Ivd6MaTnzk7mXnR4K3HNW/ubYnSO+3Dwug+OEWbKIhSvLIzROWPKmU60/uZ1bn
YkBi7Vfjph+Tq3qbG/8ij3Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org