Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/wQQiEjNqOwHk_FNupiV2qy5gMHE.roa
File:                     wQQiEjNqOwHk_FNupiV2qy5gMHE.roa (raw, json)
Hash identifier:          Bhnfii0Lu0wUp87emERT4stKlnIy06KP4FdbMSH29Fg=
Subject key identifier:   C1:04:22:12:33:6A:3B:01:E4:FC:53:6E:A6:25:76:AB:2E:60:30:71
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03BF
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/wQQiEjNqOwHk_FNupiV2qy5gMHE.roa
Signing time:             Sun 01 May 2022 01:32:10 +0000
ROA not before:           Sun 01 May 2022 01:32:10 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        219.117.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959 (0x3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:10 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=C1042212336A3B01E4FC536EA62576AB2E603071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8e:2c:c6:89:19:6d:6c:48:f3:dd:17:cd:c0:
                    ae:17:c8:67:f3:9a:35:dc:06:d7:cf:c5:16:b6:33:
                    23:61:d1:b3:34:eb:06:55:28:f9:e7:1c:a1:8a:9e:
                    7c:9d:69:12:f4:f6:06:90:c4:9c:85:09:1f:3b:ca:
                    4e:a8:49:d7:a6:01:d5:12:72:e4:83:b3:59:a2:4b:
                    8d:a1:81:85:a2:80:9d:8d:9b:70:d2:4a:a3:ab:35:
                    7c:ae:69:cc:c0:df:c3:71:0d:9d:ed:a0:ed:8d:44:
                    01:ec:30:16:57:3f:13:36:c7:e8:b1:35:4c:7c:97:
                    37:c7:50:34:84:78:f4:7a:cc:3f:69:4a:7c:c5:1c:
                    87:63:21:a3:8d:35:81:4e:8b:0c:35:11:4f:5b:54:
                    13:83:e8:a1:49:f1:d0:99:89:30:3f:dd:ee:90:0d:
                    6b:a3:22:14:65:c2:2b:1b:83:3b:6c:47:81:2a:48:
                    45:6b:0d:5b:73:72:e1:03:fd:66:6d:75:4b:67:ff:
                    ba:fd:69:15:2b:62:eb:8b:4e:d2:fa:bb:60:b0:e8:
                    43:0a:1f:7a:09:cd:10:b5:85:1c:78:c3:8f:ad:c3:
                    de:50:70:e7:02:4d:31:57:37:50:6a:bb:0a:b8:7a:
                    a7:5a:4e:ba:75:85:25:31:41:46:b7:0f:98:1f:c8:
                    9b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:04:22:12:33:6A:3B:01:E4:FC:53:6E:A6:25:76:AB:2E:60:30:71
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/wQQiEjNqOwHk_FNupiV2qy5gMHE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.117.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3c:74:bd:5b:d8:12:c1:5e:93:3d:40:74:60:1d:12:a4:01:28:
         fa:74:82:81:f9:92:cc:ac:84:bb:a0:06:77:3f:40:ed:d7:71:
         b0:94:10:30:2b:9d:34:12:c0:3b:5d:6f:8c:a6:e1:d9:98:a0:
         48:04:01:50:00:af:ff:16:15:be:b2:ef:39:7e:a6:3e:10:0b:
         52:16:d4:75:19:33:8f:31:a2:e3:3c:d4:53:26:0e:20:9e:9c:
         f8:a6:f7:e0:c8:32:72:15:e7:d3:e3:0a:ed:7b:b9:b3:ba:4e:
         9e:79:26:63:34:d6:21:82:21:ed:a7:1a:2e:7f:86:bc:13:bf:
         2c:b9:c4:d1:e5:6a:a4:22:a4:41:e3:95:cd:e7:73:57:98:70:
         6c:d8:29:7d:f9:52:a3:bb:39:a4:ef:d1:56:d3:4f:d4:9d:d2:
         59:21:6d:b3:53:27:05:57:4a:ff:db:39:13:d1:61:e3:3e:a0:
         3d:ca:61:b9:ce:55:20:be:b7:07:59:9e:d0:fb:b0:67:b5:63:
         90:78:f1:aa:75:71:f5:22:69:e7:12:0a:18:88:dc:2e:28:e3:
         97:ba:87:87:ce:c4:09:1a:27:8d:5d:3d:7c:ef:9d:0a:58:7f:
         5d:92:c3:a1:3d:3f:6e:5e:c7:98:e7:ab:ed:0a:c6:b5:9d:fa:
         7f:3f:e3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:16 2023 by rpki-client on console-ams.rpki-client.org