Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/v0EdjE8DgLrgRIaW6eO7OeVuvLU.roa
File:                     v0EdjE8DgLrgRIaW6eO7OeVuvLU.roa (raw, json)
Hash identifier:          TtKKwkvY2fB0adM2f0cHNHnyhMycTNhgxG2ZzcpPNBE=
Subject key identifier:   BF:41:1D:8C:4F:03:80:BA:E0:44:86:96:E9:E3:BB:39:E5:6E:BC:B5
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0412
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/v0EdjE8DgLrgRIaW6eO7OeVuvLU.roa
Signing time:             Thu 13 Apr 2023 09:52:21 +0000
ROA not before:           Thu 13 Apr 2023 09:52:21 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        61.200.112.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1042 (0x412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:52:21 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=BF411D8C4F0380BAE0448696E9E3BB39E56EBCB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fc:93:c1:cf:f8:60:c2:a0:9d:da:3b:a2:91:
                    cd:6a:88:87:17:6e:d3:79:e1:30:21:d8:bf:6c:f9:
                    4b:00:79:c3:19:02:0f:fc:57:9a:a9:75:be:4a:3f:
                    35:fc:8e:a5:d6:29:7b:64:1c:b9:0b:0f:b3:0c:52:
                    4c:fb:40:d0:82:f0:9e:eb:2c:a3:65:8c:c6:94:81:
                    97:4a:31:4e:2f:ae:fe:f3:51:35:cf:cf:96:1f:f8:
                    b3:bb:9a:87:8e:46:fa:17:28:42:48:64:0e:37:14:
                    57:b6:e5:e8:db:4d:f4:1d:29:42:a7:e1:97:7a:3e:
                    52:c5:2e:95:90:50:e0:ff:41:c3:bf:cb:41:20:7e:
                    1b:36:1f:06:6e:8f:f1:11:6e:4b:d7:15:64:e7:46:
                    66:91:29:a6:47:c4:a1:67:0c:88:1f:5d:e9:7c:8a:
                    bc:43:51:bd:6c:06:a4:e7:2c:2f:6e:6d:3f:f3:20:
                    41:62:03:5b:db:1a:65:c5:58:10:1d:21:04:32:22:
                    2f:34:fd:97:5c:52:b0:32:c3:56:a9:d7:01:15:aa:
                    19:c8:4d:98:50:11:ea:79:33:73:0c:29:41:f9:8d:
                    a0:1b:6c:91:21:ee:ca:70:36:60:4a:51:b8:c4:4d:
                    91:e9:b1:39:7b:de:a1:54:17:f8:a1:96:40:1c:a8:
                    73:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:41:1D:8C:4F:03:80:BA:E0:44:86:96:E9:E3:BB:39:E5:6E:BC:B5
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/v0EdjE8DgLrgRIaW6eO7OeVuvLU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:d5:6a:98:32:92:1f:ce:04:51:76:51:2b:c0:e0:9d:c5:a1:
         a4:2d:67:f2:d7:0c:ea:d8:ac:1d:1d:43:28:0e:bf:e5:10:19:
         d2:0c:c0:45:b4:ad:5d:7f:00:65:29:98:f6:88:2b:b0:f1:0a:
         ec:b9:3e:af:e6:5b:53:8c:ef:28:6b:e5:04:aa:c9:d5:e3:92:
         09:1a:0f:7a:1a:26:3a:6f:8c:56:b6:d8:05:f8:d8:33:29:04:
         1a:9d:0b:ee:fe:9f:f0:a4:77:f7:e8:bb:b1:06:b2:ad:49:f5:
         e3:d8:bd:b9:7c:6a:e7:f5:86:f4:b0:83:16:f0:ae:10:d2:f4:
         ce:48:ea:d8:a2:6a:c5:86:58:88:58:d2:6a:a1:7d:af:13:aa:
         7f:10:10:fb:bf:49:8b:e8:79:a7:16:4a:91:97:c8:90:47:f8:
         69:90:20:5f:ca:6c:b7:42:24:41:b6:8f:5c:c3:e3:19:b1:3e:
         1c:d0:53:80:35:6c:c2:87:c7:59:4a:46:e9:f7:5e:4c:98:b5:
         98:1a:44:4f:9e:de:75:0b:88:c8:36:89:89:e5:45:ec:e1:02:
         b4:ae:fd:ad:64:ad:b0:05:7c:c2:de:4d:4f:3f:37:79:97:a5:
         4a:c5:08:7e:9a:7d:4b:8d:02:6d:83:38:f8:fe:94:69:a5:66:
         75:2c:9b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org