Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/w05vtvgosbtFZfgNYNRytRkleTU.roa
File:                     w05vtvgosbtFZfgNYNRytRkleTU.roa (raw, json)
Hash identifier:          URpOKkmPwPPGl0XjZPCcjaxVH/+tdSdkr07M8WuFDzI=
Subject key identifier:   C3:4E:6F:B6:F8:28:B1:BB:45:65:F8:0D:60:D4:72:B5:19:25:79:35
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0419
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/w05vtvgosbtFZfgNYNRytRkleTU.roa
Signing time:             Thu 13 Apr 2023 09:52:24 +0000
ROA not before:           Thu 13 Apr 2023 09:52:24 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        202.226.16.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1049 (0x419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:52:24 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=C34E6FB6F828B1BB4565F80D60D472B519257935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e5:d0:ff:4b:7f:a8:b4:61:12:fb:e3:cf:af:
                    58:66:b9:30:fd:6c:1b:9a:b9:bf:4d:ee:d3:8a:96:
                    d1:9b:75:b8:37:c8:6c:e4:44:52:fd:e0:84:7d:08:
                    d2:8b:17:12:23:dd:dd:70:ad:2f:e4:5c:e8:52:0c:
                    80:4a:0e:d7:5c:17:51:b3:cf:eb:9d:c5:0c:45:ec:
                    dd:11:93:76:ea:6e:1a:7f:c3:29:ed:31:cc:6d:ea:
                    16:b3:59:6d:d1:3b:50:e9:43:cd:1c:3b:98:f2:36:
                    64:92:58:8f:e1:c9:ed:52:fa:fe:04:46:31:4c:e0:
                    60:db:4f:f4:30:a9:76:36:5d:16:5e:f1:54:ca:0d:
                    da:4c:ef:f4:db:e8:73:51:76:d9:9b:6b:1d:00:b1:
                    26:dd:a9:ae:ff:47:ae:77:6e:28:c1:23:92:e1:f9:
                    19:03:36:75:39:63:1e:b5:20:f3:6f:97:44:9b:7c:
                    59:8d:8e:84:df:29:42:82:14:35:cb:a6:82:fd:9d:
                    1d:d1:20:29:16:8c:f2:44:21:0e:de:30:80:28:7f:
                    c1:43:ee:82:75:9a:cb:94:4b:22:6d:0e:02:5d:18:
                    a4:ac:5c:7b:37:2b:47:ec:79:47:78:3b:eb:53:18:
                    41:29:3d:5a:4d:17:a9:90:f7:32:ea:47:37:bd:89:
                    b4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4E:6F:B6:F8:28:B1:BB:45:65:F8:0D:60:D4:72:B5:19:25:79:35
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/w05vtvgosbtFZfgNYNRytRkleTU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:1f:3f:22:ec:1b:06:e3:88:b6:6f:48:fd:1f:96:21:00:2e:
         12:95:6d:b8:59:e2:73:68:04:d5:58:6b:87:7d:5d:2b:ce:69:
         01:5b:e9:11:ca:4a:ef:6e:21:ea:89:d1:cf:67:b8:ce:dc:4e:
         ab:b3:24:5d:76:b3:55:55:c6:1f:b1:18:36:11:29:38:46:bd:
         db:05:e2:91:21:c3:21:df:7f:1d:a0:27:61:b5:42:04:fa:18:
         6f:30:0e:4c:4d:dc:03:ef:e2:be:80:c6:d6:3d:03:24:03:cd:
         60:23:c1:12:16:29:bb:16:74:ab:ce:2a:bf:ef:38:c7:e2:a1:
         a2:c3:40:ff:a4:2a:d8:da:4a:8e:78:3b:a6:35:79:6c:36:a7:
         7e:c2:b5:34:d7:5d:33:61:48:43:7d:b7:dc:47:b9:0f:60:d5:
         a7:d6:ed:02:43:12:65:72:24:a5:7b:5e:14:f1:36:93:9e:e2:
         47:00:dd:a6:e5:a9:48:36:ea:5b:75:02:91:46:f4:5b:56:25:
         45:bd:ca:84:46:00:e4:78:de:c1:00:b0:b4:aa:86:1c:38:44:
         f2:ba:2d:53:2b:c7:91:8c:8b:07:9b:53:b7:6c:5b:23:8a:33:
         16:f0:be:ac:ad:4a:4e:14:91:e0:76:c3:9f:1e:e9:b7:bc:75:
         c1:60:00:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org