Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/sIGkcaodUkxA21NHSzu31hqiwEQ.roa
File:                     sIGkcaodUkxA21NHSzu31hqiwEQ.roa (raw, json)
Hash identifier:          po5OhQfzd1jlnc2S3aUwl8zlhk9m0zi05adRoPSWGRs=
Subject key identifier:   B0:81:A4:71:AA:1D:52:4C:40:DB:53:47:4B:3B:B7:D6:1A:A2:C0:44
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0473
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/sIGkcaodUkxA21NHSzu31hqiwEQ.roa
Signing time:             Thu 13 Apr 2023 09:59:49 +0000
ROA not before:           Thu 13 Apr 2023 09:59:48 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        61.211.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1139 (0x473)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:59:48 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=B081A471AA1D524C40DB53474B3BB7D61AA2C044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1d:af:91:ea:24:52:77:20:6f:d7:27:09:63:
                    62:95:cc:ff:9f:c9:5d:e9:2a:08:a9:e6:d2:af:e9:
                    2b:a2:56:7c:8d:61:68:36:c3:ba:2d:f4:9f:39:28:
                    45:50:c9:9f:62:2b:20:03:a3:fb:0c:e8:44:4e:2c:
                    cf:3f:87:2b:88:2a:36:46:39:00:80:a9:ce:a1:c0:
                    f7:36:50:a8:5e:2d:0d:f0:8a:7c:ff:0b:28:b0:c3:
                    85:37:0f:cd:64:5e:6e:b3:c9:42:6d:fa:99:f3:eb:
                    3f:ea:f9:65:30:eb:2e:e8:53:62:25:eb:3c:54:d6:
                    17:5b:fe:c1:16:02:bf:b3:0f:6d:b2:19:5f:c1:5f:
                    1f:43:15:c5:92:c0:0f:ec:19:8e:be:27:62:5f:0b:
                    97:36:af:dd:a7:b8:df:00:18:55:f7:9a:00:70:22:
                    b1:af:ef:c1:d8:01:e0:c8:aa:66:5c:3c:b3:57:8c:
                    3e:e0:0d:d0:7a:63:33:c1:ce:ae:b7:db:a9:4b:cd:
                    64:0c:3c:3c:17:3b:24:ce:f7:c2:c8:7c:e6:c4:dc:
                    d4:58:7b:a2:0b:ab:4e:a6:aa:47:6d:de:c4:af:a8:
                    e3:c4:ff:b0:dc:9b:27:d8:d3:6d:35:59:47:09:eb:
                    4b:33:90:dc:a3:95:0c:91:ba:03:d9:d4:7c:3a:10:
                    ba:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:81:A4:71:AA:1D:52:4C:40:DB:53:47:4B:3B:B7:D6:1A:A2:C0:44
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/sIGkcaodUkxA21NHSzu31hqiwEQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0f:cd:8a:24:74:15:b6:96:56:a7:a8:34:c2:6d:b7:26:6e:36:
         a8:05:fe:96:c1:e9:59:0f:5c:58:54:52:8a:c9:7f:7d:1c:4d:
         3a:1f:8a:30:2a:0c:4c:d5:4a:6b:ed:e1:22:e2:1e:1d:20:66:
         e1:47:1b:2b:84:2d:0b:55:1c:70:91:3e:d9:01:f1:f3:c2:48:
         1f:b5:48:d9:5e:99:09:9c:2a:93:1d:4f:2d:e4:6d:16:70:ea:
         e3:9d:16:c8:81:31:26:8b:f7:71:18:53:22:42:72:e8:1c:09:
         78:d0:e3:74:83:d7:05:74:96:6d:09:9f:9e:7f:5c:56:de:da:
         59:e7:da:5d:31:e4:93:e5:8a:57:12:b8:b5:1f:1e:bf:80:d5:
         8b:49:cf:71:97:72:88:69:dd:3a:1c:df:0e:a5:c0:77:69:d3:
         03:65:81:c9:00:8f:aa:41:97:cd:54:e2:9d:be:36:d3:c2:19:
         29:e6:3c:f5:7f:76:71:ac:b2:46:a9:82:f1:95:d7:e8:ad:c3:
         24:48:2e:02:d7:de:94:7f:f4:ee:30:36:4f:f6:6a:fc:b0:bd:
         f5:e2:36:19:55:09:8a:38:08:ac:8f:3a:96:8a:1f:1f:f6:3b:
         84:d8:65:fe:08:2b:d0:0b:a5:c5:91:1b:8b:2f:53:68:bb:b8:
         13:cb:2f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org