Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/tB6jGCudej6wvp4Kdrl0bUsCWb8.roa
File:                     tB6jGCudej6wvp4Kdrl0bUsCWb8.roa (raw, json)
Hash identifier:          OfhRVHD21YUPUBjqCRYL0omjpRmrlwRfYOeirnxtqJA=
Subject key identifier:   B4:1E:A3:18:2B:9D:7A:3E:B0:BE:9E:0A:76:B9:74:6D:4B:02:59:BF
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       046C
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/tB6jGCudej6wvp4Kdrl0bUsCWb8.roa
Signing time:             Thu 13 Apr 2023 09:59:46 +0000
ROA not before:           Thu 13 Apr 2023 09:59:46 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        42.127.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1132 (0x46c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:59:46 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=B41EA3182B9D7A3EB0BE9E0A76B9746D4B0259BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:be:8f:d0:4c:37:ba:fd:cd:84:88:3f:c9:a2:
                    d8:50:6d:cf:51:e9:94:67:62:cf:3b:71:8d:53:e2:
                    2c:af:42:6b:3a:3a:b4:f7:f9:38:df:f8:24:23:63:
                    10:a8:40:f7:04:45:28:7f:3a:ac:61:bd:8f:07:e3:
                    86:b1:5d:d3:c4:fe:6e:0e:a0:9f:c6:6d:b9:6b:4c:
                    1a:f2:4e:2a:df:69:54:a1:94:e6:6a:39:8c:c5:1f:
                    2c:80:de:e4:68:ab:56:70:b4:62:1e:cb:4f:8f:b1:
                    cb:0c:7c:7b:44:2c:b0:08:39:53:d4:2e:c4:0b:a6:
                    88:0c:a5:ea:09:82:22:bb:ce:f9:9b:85:40:a8:b9:
                    40:16:48:5f:28:5a:f8:f2:bf:b7:e1:a7:61:64:f4:
                    9a:e4:c4:c2:cf:0d:47:d8:c1:04:94:9e:80:48:b4:
                    13:4b:e9:1c:d5:18:73:8e:c1:4b:23:64:11:60:89:
                    a7:ad:a2:f9:4c:8d:07:d1:07:55:73:7d:50:08:e5:
                    c7:4c:4d:eb:e1:38:74:00:c9:cf:d5:b6:1d:77:39:
                    bb:48:69:a0:c9:f5:2f:1c:d7:1e:10:35:66:84:bf:
                    39:a4:fa:ed:60:d0:d1:1e:dd:a2:f1:06:a5:e7:3b:
                    31:ad:59:86:8b:6c:31:aa:f2:a2:11:df:3e:4b:6a:
                    76:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1E:A3:18:2B:9D:7A:3E:B0:BE:9E:0A:76:B9:74:6D:4B:02:59:BF
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/tB6jGCudej6wvp4Kdrl0bUsCWb8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.127.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9b:18:cf:f6:53:64:69:40:fb:13:77:5d:d6:38:94:a5:b3:36:
         83:4c:cb:40:3d:28:6f:46:83:7b:d5:b9:16:ce:27:c1:f9:96:
         79:bf:8c:38:1f:1f:84:cf:b7:92:94:a7:c2:8e:ba:3c:eb:cd:
         8d:0b:fc:19:4d:88:9c:bd:c9:2d:f6:6d:1b:1e:29:eb:6f:30:
         d0:63:10:6b:52:aa:e3:b3:3c:40:25:45:74:c6:6a:86:29:9a:
         de:9f:b1:c9:72:03:92:c4:36:18:59:22:d2:99:6a:38:9f:39:
         dc:12:20:97:2a:e6:4b:9f:84:97:eb:87:f7:58:7b:e2:23:61:
         66:e8:97:05:56:4c:25:45:95:a0:14:08:c6:cc:b3:7a:6c:d7:
         8b:54:e8:67:f5:68:ba:c3:cf:55:3f:53:d7:1b:70:b9:b5:6e:
         5e:2f:4c:ed:51:bb:11:cc:e8:56:d7:e3:3b:fd:2f:3f:8a:b5:
         77:54:ad:42:06:33:86:32:4d:69:6e:61:39:91:15:78:18:17:
         db:66:4c:f1:a9:b5:5a:0c:fd:58:63:61:96:cc:d5:70:9a:d5:
         31:9f:fc:9d:05:a7:52:0c:4d:58:79:f6:a7:df:64:c3:80:ad:
         9a:9f:05:19:e2:79:5c:ce:5e:cc:fe:dd:cf:19:40:2c:51:b9:
         d4:66:17:e6
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBGwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMzA0MTMw
OTU5NDZaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKEI0MUVBMzE4MkI5RDdB
M0VCMEJFOUUwQTc2Qjk3NDZENEIwMjU5QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNvo/QTDe6/c2EiD/JothQbc9R6ZRnYs87cY1T4iyvQms6OrT3
+Tjf+CQjYxCoQPcERSh/OqxhvY8H44axXdPE/m4OoJ/GbblrTBryTirfaVShlOZq
OYzFHyyA3uRoq1ZwtGIey0+PscsMfHtELLAIOVPULsQLpogMpeoJgiK7zvmbhUCo
uUAWSF8oWvjyv7fhp2Fk9JrkxMLPDUfYwQSUnoBItBNL6RzVGHOOwUsjZBFgiaet
ovlMjQfRB1VzfVAI5cdMTevhOHQAyc/Vth13ObtIaaDJ9S8c1x4QNWaEvzmk+u1g
0NEe3aLxBqXnOzGtWYaLbDGq8qIR3z5LanavAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUtB6jGCudej6wvp4Kdrl0bUsCWb8wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L3RCNmpHQ3VkZWo2d3ZwNEtkcmwwYlVzQ1diOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAcqfwAwDQYJKoZIhvcNAQELBQADggEBAJsYz/ZTZGlA+xN3XdY4lKWzNoNM
y0A9KG9Gg3vVuRbOJ8H5lnm/jDgfH4TPt5KUp8KOujzrzY0L/BlNiJy9yS32bRse
KetvMNBjEGtSquOzPEAlRXTGaoYpmt6fsclyA5LENhhZItKZajifOdwSIJcq5kuf
hJfrh/dYe+IjYWbolwVWTCVFlaAUCMbMs3ps14tU6Gf1aLrDz1U/U9cbcLm1bl4v
TO1RuxHM6FbX4zv9Lz+KtXdUrUIGM4YyTWluYTmRFXgYF9tmTPGptVoM/VhjYZbM
1XCa1TGf/J0Fp1IMTVh59qffZMOArZqfBRnieVzOXsz+3c8ZQCxRudRmF+Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org