Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/v-SFoKZ6PTIdWs5dHI27vECNxuA.roa
File:                     v-SFoKZ6PTIdWs5dHI27vECNxuA.roa (raw, json)
Hash identifier:          u6WH0HezYInEemQra62mbGon3qICoDX5HB+XYjmtkbc=
Subject key identifier:   BF:E4:85:A0:A6:7A:3D:32:1D:5A:CE:5D:1C:8D:BB:BC:40:8D:C6:E0
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03A9
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/v-SFoKZ6PTIdWs5dHI27vECNxuA.roa
Signing time:             Sun 01 May 2022 01:32:04 +0000
ROA not before:           Sun 01 May 2022 01:32:04 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        61.198.96.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937 (0x3a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:04 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=BFE485A0A67A3D321D5ACE5D1C8DBBBC408DC6E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:42:2f:49:9c:e0:b3:bd:e6:0c:55:97:9d:85:
                    f9:71:0d:32:ef:6b:94:af:ab:13:7e:6e:d4:fc:05:
                    e0:99:86:10:4c:04:fb:32:7d:2f:35:2b:26:52:fc:
                    36:4e:44:57:f3:a7:f0:d0:e0:06:0f:d9:39:54:7a:
                    1d:94:0b:93:71:0e:e2:0b:43:2a:1a:f3:93:2a:5a:
                    fe:1b:87:cd:43:e4:1b:22:68:7d:66:2f:01:7d:d4:
                    a1:c3:5c:cc:50:e2:99:88:d0:3c:54:5f:12:50:19:
                    82:21:59:49:85:8d:33:b1:c7:56:8f:75:29:36:6d:
                    19:6a:79:3c:8d:ae:84:01:8e:a1:d9:cd:9f:27:80:
                    f2:2c:c6:cc:27:d5:5b:7a:2e:aa:ee:21:6c:50:76:
                    ef:ea:cc:11:9d:f4:83:b2:5b:d0:8a:b0:0a:33:96:
                    bc:a2:38:d8:74:92:fe:e4:9e:69:6b:cb:2a:19:0a:
                    c4:0b:75:10:0d:de:d1:37:6e:a5:19:ac:f7:72:db:
                    11:20:15:a8:0e:14:ea:00:74:38:66:23:51:e7:15:
                    be:b9:cf:7d:e8:e8:39:64:1c:d0:26:51:e1:d9:a8:
                    c3:5f:a2:a9:dc:a6:7a:1b:8a:fe:7b:69:54:a7:f6:
                    91:cd:be:b2:b5:e0:82:b1:ac:fd:87:34:47:8d:c8:
                    b6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E4:85:A0:A6:7A:3D:32:1D:5A:CE:5D:1C:8D:BB:BC:40:8D:C6:E0
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/v-SFoKZ6PTIdWs5dHI27vECNxuA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.198.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5f:b0:d8:69:87:3c:7d:f2:96:08:2c:aa:f0:3b:f1:27:6d:5b:
         29:cb:f2:12:6b:ef:1d:58:4c:3a:30:51:16:7b:10:49:0c:a8:
         5c:7b:14:6c:aa:b3:1b:f6:83:a1:e6:bd:7c:fa:c3:25:c7:47:
         71:e1:d1:83:83:eb:75:38:ec:6e:81:98:88:b6:5f:99:c5:e0:
         04:03:a4:b2:68:e5:20:19:24:95:8f:c0:88:20:77:bb:1d:fe:
         6f:f2:6b:fc:8a:5f:30:41:ef:a7:e6:e4:bf:45:b5:19:3a:5d:
         1a:6a:47:fd:21:21:d0:4a:17:08:5e:47:6c:7f:98:29:ae:ff:
         15:96:06:1c:5b:23:33:da:bf:8c:d3:0e:a9:9a:ea:41:38:ce:
         88:11:3c:02:4e:b4:d1:45:b1:16:a1:91:2a:84:3a:24:ca:7e:
         83:e1:3b:47:ad:a0:63:4b:dd:e9:42:e8:3e:54:21:7c:26:ff:
         70:7c:00:31:63:49:e1:c5:6b:b6:74:94:32:82:49:fd:4b:e2:
         55:a1:ea:43:61:be:ab:1a:bb:ae:fe:cb:e1:87:94:e8:0c:65:
         f3:88:45:fc:1e:d8:41:1b:ad:27:48:2f:30:aa:29:a2:ee:e3:
         93:aa:85:3e:f1:31:71:ed:d2:8d:9b:be:db:fb:8f:e7:1f:29:
         48:13:2d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org