Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/watYwFzBZVO2dCRsrQikvpnvckg.roa
File:                     watYwFzBZVO2dCRsrQikvpnvckg.roa (raw, json)
Hash identifier:          JEtwIpjk+D19IxEwLAsIh85reVPt29STYCjCXPOypBk=
Subject key identifier:   C1:AB:58:C0:5C:C1:65:53:B6:74:24:6C:AD:08:A4:BE:99:EF:72:48
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0397
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/watYwFzBZVO2dCRsrQikvpnvckg.roa
Signing time:             Sun 01 May 2022 01:31:58 +0000
ROA not before:           Sun 01 May 2022 01:31:58 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        220.216.106.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919 (0x397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:31:58 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=C1AB58C05CC16553B674246CAD08A4BE99EF7248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e1:5b:cd:9f:28:0d:27:e6:39:9a:95:63:47:
                    db:59:95:a4:3f:0b:da:bd:8b:0d:24:70:54:2b:39:
                    bd:af:da:70:4c:03:64:09:fd:d8:85:fa:68:08:47:
                    db:df:20:c1:b5:70:1a:9d:ff:55:a4:21:7b:c4:d9:
                    18:64:9b:e9:d6:7c:c5:b8:c1:5a:1b:a9:3c:0e:37:
                    f4:7a:80:df:b1:7a:b0:ba:ad:4d:ea:88:a4:e7:ce:
                    26:6d:43:48:49:d0:c1:1b:2e:96:87:d1:e6:62:46:
                    b5:f3:d6:24:dc:ab:d7:68:27:db:b6:48:ee:36:b9:
                    ef:f1:77:0a:31:b3:d4:f4:17:cf:78:39:23:f1:c8:
                    74:c5:e3:26:9d:31:a9:e5:2a:d0:b7:e0:4e:76:fb:
                    b4:4f:31:fe:35:34:54:ff:18:9d:e3:60:ea:66:57:
                    18:6b:e8:21:12:eb:8b:df:42:0a:37:cb:2a:c2:80:
                    7f:a1:e1:87:a7:4f:58:47:c2:a7:3d:8c:6a:15:7c:
                    f9:d6:da:68:b2:85:fd:9d:d0:eb:dc:76:b3:44:1f:
                    75:bc:29:38:8c:65:2b:32:08:8e:e5:a6:40:cb:f8:
                    5c:cd:ef:b4:54:53:c8:7b:b7:60:15:41:f7:cb:23:
                    5d:8b:97:bc:48:be:e2:f1:75:b6:65:6f:38:1f:b0:
                    89:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AB:58:C0:5C:C1:65:53:B6:74:24:6C:AD:08:A4:BE:99:EF:72:48
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/watYwFzBZVO2dCRsrQikvpnvckg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:ad:bb:d6:71:5e:2e:80:b9:c6:d7:fb:32:f8:f3:06:25:5c:
         99:ff:3b:e2:98:b0:ed:33:7c:9a:28:05:98:8a:56:9f:69:e5:
         9f:43:ce:7b:de:76:96:10:6f:92:13:65:78:98:48:55:9c:bf:
         7c:dd:76:b0:7b:02:8f:e9:f4:55:b7:04:a3:b1:41:9b:ba:a8:
         ca:4d:d9:89:89:76:8e:29:d4:2e:f0:0e:42:e1:ba:86:ee:a0:
         21:dc:f9:68:d5:b2:9b:c1:bf:51:cc:1f:e1:94:a8:23:01:c1:
         ac:1d:0b:64:79:48:4d:bb:46:d7:b8:f6:59:00:4a:18:86:19:
         e2:c1:71:a4:06:15:50:1b:74:d2:13:26:37:85:d9:5d:83:5a:
         90:91:f0:a8:3c:61:2f:78:ed:e7:04:1d:4d:42:24:e3:03:ca:
         a4:01:dc:f0:7b:20:f8:00:dc:24:8e:c7:63:6d:a1:c8:99:3c:
         c7:b2:7c:c7:55:ee:a2:48:a9:3a:82:bb:98:79:f3:15:57:8c:
         64:f6:9d:e9:7d:1c:57:79:e0:dd:47:5d:1a:3c:ef:7b:9e:e9:
         e7:a0:54:75:5a:1e:25:9f:6e:56:00:0d:1d:c7:52:27:9e:98:
         ea:a5:72:b1:32:b4:e9:90:f4:86:ba:d4:90:57:62:43:67:bc:
         41:c5:f9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org