Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/vSXSFCTvSLYslvAVt6M2-qa8eqA.roa
File:                     vSXSFCTvSLYslvAVt6M2-qa8eqA.roa (raw, json)
Hash identifier:          0MzvhTvWOGq5Sug5yo7Fo5IKJx62BHEgcTzazqJqz9k=
Subject key identifier:   BD:25:D2:14:24:EF:48:B6:2C:96:F0:15:B7:A3:36:FA:A6:BC:7A:A0
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03BE
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/vSXSFCTvSLYslvAVt6M2-qa8eqA.roa
Signing time:             Sun 01 May 2022 01:32:10 +0000
ROA not before:           Sun 01 May 2022 01:32:10 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        220.216.88.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 958 (0x3be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:10 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=BD25D21424EF48B62C96F015B7A336FAA6BC7AA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:47:83:68:3a:44:ca:84:93:c3:72:ab:47:
                    b2:54:87:9d:ad:dc:45:6d:2a:1f:66:ab:e0:dc:b6:
                    4b:e5:67:6c:03:25:e3:fd:40:fd:ff:54:d0:91:bb:
                    36:69:f5:7b:35:44:e6:81:10:5b:3c:f0:42:c6:04:
                    97:d2:3d:5c:47:c7:b2:ec:0d:78:df:80:ff:2f:17:
                    79:78:da:8c:76:0c:ba:b9:f7:c3:92:63:34:e3:10:
                    e0:e0:ef:43:d6:93:84:dc:d3:da:66:6d:2e:15:ef:
                    ba:bd:b5:1d:23:72:49:90:4f:9f:39:43:56:e1:14:
                    cd:f2:75:01:83:bd:a6:35:bd:54:ec:62:50:1d:47:
                    97:53:84:31:ff:01:68:97:8d:02:27:e7:aa:f1:36:
                    87:54:a0:89:ec:c4:5c:b9:98:dd:81:3c:1f:51:d8:
                    8b:1a:27:43:2c:04:76:b7:4b:27:31:9e:c1:cd:77:
                    3a:ec:62:ae:03:b6:40:37:e6:be:54:f5:46:e8:b6:
                    c8:e2:d0:6a:3d:b8:35:04:d9:1d:57:8e:62:fb:c4:
                    b1:ca:2d:cf:c4:bc:4e:e1:5f:3f:b9:91:87:a9:f0:
                    de:31:9f:3b:af:af:fa:89:f9:58:21:29:86:8e:4a:
                    fc:d7:56:4e:b1:d1:75:08:52:25:70:ac:a6:fb:11:
                    41:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:25:D2:14:24:EF:48:B6:2C:96:F0:15:B7:A3:36:FA:A6:BC:7A:A0
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/vSXSFCTvSLYslvAVt6M2-qa8eqA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:69:67:b6:6e:9b:c2:73:04:d9:8b:76:bd:79:47:17:3c:af:
         ba:e7:b3:79:07:82:bd:e4:7d:0e:3d:c5:b1:81:bc:50:af:5e:
         2d:6c:4e:0f:2a:56:a2:51:99:71:5b:c9:01:5d:29:00:80:a5:
         25:07:bf:aa:90:fb:f5:26:7d:4d:a2:40:25:94:91:6f:e9:d5:
         b8:31:76:82:96:7e:70:12:29:d9:6d:41:28:ee:aa:37:3f:f1:
         10:6f:3c:b5:9a:fa:8b:47:eb:4b:5f:aa:6f:27:4f:69:56:de:
         ea:03:80:c0:b5:10:a0:cb:4f:57:e2:60:be:b6:11:c8:00:2a:
         4a:7b:82:b2:6b:15:05:f4:04:b6:31:25:d0:93:9c:50:e6:46:
         8a:d6:fe:2c:99:4f:e6:c6:6f:9e:b6:50:d6:1b:d4:6c:53:b1:
         9c:b7:8e:0b:f2:20:d3:ae:e2:4c:3a:f1:9b:e3:1c:9e:63:1c:
         fb:7f:12:15:ad:4f:e8:57:26:7f:7a:92:a1:83:1d:d4:8f:a0:
         eb:15:d4:a8:55:b3:c4:c9:4f:9f:ff:bb:f0:bb:cb:90:7f:06:
         71:ba:99:bb:49:af:dd:d9:9e:7e:4a:62:42:14:85:d8:4e:90:
         6e:c7:20:ab:85:a5:47:1f:28:48:0b:1d:54:63:79:0f:b3:91:
         85:06:fd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org