Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/w_82AGP7SMS4j3YBo8Imm2rezy8.roa
File:                     w_82AGP7SMS4j3YBo8Imm2rezy8.roa (raw, json)
Hash identifier:          xIXwhhkojEiJAf1UITP38t4fEPzfsCTRTYscuzv/rdw=
Subject key identifier:   C3:FF:36:00:63:FB:48:C4:B8:8F:76:01:A3:C2:26:9B:6A:DE:CF:2F
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0321
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/w_82AGP7SMS4j3YBo8Imm2rezy8.roa
Signing time:             Tue 25 May 2021 02:42:50 +0000
ROA not before:           Tue 25 May 2021 02:42:50 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        112.138.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 801 (0x321)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:50 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=C3FF360063FB48C4B88F7601A3C2269B6ADECF2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:7a:39:de:d8:30:10:1c:62:f9:69:d5:7d:
                    09:ca:f0:c8:cd:c6:d5:5e:6d:f9:a4:d9:b1:9a:7d:
                    f9:98:56:e3:19:22:2e:a4:1f:fd:05:ac:4e:4a:f9:
                    64:b4:3a:82:57:42:aa:52:83:11:3e:5a:12:0c:34:
                    df:9b:21:cf:b1:f2:e1:62:08:d8:9a:72:55:fa:72:
                    66:df:a6:d6:df:3d:55:ed:7b:4c:19:6d:6c:ec:70:
                    a9:24:b2:99:ef:ac:9a:20:7d:bf:e3:e4:bf:df:b7:
                    cb:03:a2:c0:08:65:11:ee:e3:ca:fe:88:71:32:cd:
                    d7:a1:74:cf:f8:91:21:94:ac:0f:f6:02:9a:13:71:
                    01:a0:9d:e2:56:b4:cd:ba:fd:70:1a:ec:9a:e8:c4:
                    91:bd:fd:53:c4:f1:d7:82:39:11:61:3f:2c:b6:80:
                    fb:cb:89:86:9d:8f:94:31:dc:a7:59:b5:cc:bd:1b:
                    16:aa:c8:9b:16:84:c8:42:35:bb:98:58:ca:04:9b:
                    61:3a:ce:41:ab:2f:b6:88:b7:bc:3f:3d:fa:c1:73:
                    0e:f6:3c:da:ed:6f:f6:5f:f3:84:ff:ca:e4:2a:6b:
                    df:aa:fe:a2:19:d7:b2:35:41:ed:d7:83:6a:93:a5:
                    12:d5:93:ed:3f:d3:3f:88:0f:f4:1f:9c:e2:db:64:
                    ae:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FF:36:00:63:FB:48:C4:B8:8F:76:01:A3:C2:26:9B:6A:DE:CF:2F
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/w_82AGP7SMS4j3YBo8Imm2rezy8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.138.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6e:11:ca:41:c3:23:39:8c:d3:d4:90:71:43:13:c2:e8:b4:c7:
         0c:e0:b8:78:91:87:17:df:c5:1b:87:df:b2:c4:52:f2:cb:f8:
         0e:65:49:ff:27:ee:71:5d:d9:e9:72:8d:b6:a6:bd:15:b2:98:
         d6:e4:5c:32:f9:5f:38:7a:33:6b:39:2f:9a:20:22:b3:a2:47:
         3c:92:7b:56:f5:71:ce:2d:b0:ff:48:48:5f:9f:f6:6c:7e:e0:
         96:91:c9:75:fc:31:d9:75:40:0a:1b:81:23:7e:d9:5c:38:ba:
         5d:94:cb:85:a1:ad:eb:90:35:46:1c:e5:b7:f9:80:29:5e:60:
         43:cb:1b:e5:fd:80:8e:01:44:d0:d7:7f:0b:fe:83:a9:87:5b:
         6c:6c:0b:d0:5e:56:72:f0:6b:a4:c1:6c:43:45:73:01:94:bc:
         b4:d3:33:49:d1:90:9e:2f:80:cf:73:f1:e5:61:50:3b:c0:66:
         44:cb:9d:c7:ac:39:56:62:ef:fc:df:66:1b:0f:6a:0e:40:fe:
         f2:47:8f:17:a6:3e:55:7f:99:9b:81:54:71:8a:99:89:d4:36:
         9b:fc:6e:10:84:38:a4:50:7c:19:d8:20:49:12:c3:f7:7f:fb:
         0c:ef:ed:b3:ee:08:b3:e7:46:b1:cf:c7:4b:7c:eb:ff:12:cc:
         ef:cc:17:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org