Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/xUFgMDpN678MbZE3M3Zq-ezixK0.roa
File:                     xUFgMDpN678MbZE3M3Zq-ezixK0.roa (raw, json)
Hash identifier:          mpn2h8d75bWKTvo5OM+MOZgjD7zarO/vVQSRi/b026Y=
Subject key identifier:   C5:41:60:30:3A:4D:EB:BF:0C:6D:91:37:33:76:6A:F9:EC:E2:C4:AD
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03EE
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/xUFgMDpN678MbZE3M3Zq-ezixK0.roa
Signing time:             Sun 01 May 2022 01:33:08 +0000
ROA not before:           Sun 01 May 2022 01:33:08 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        220.148.96.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1006 (0x3ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:33:08 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=C54160303A4DEBBF0C6D913733766AF9ECE2C4AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7c:d8:96:86:3d:4c:d5:4f:6f:20:3d:aa:32:
                    98:30:6a:e1:30:26:b2:66:c8:ff:12:e1:f7:ce:ba:
                    f7:b2:98:cb:61:23:31:d9:28:cb:73:45:6b:65:44:
                    27:c2:92:9d:b9:f6:4f:37:e2:3a:2b:46:c2:8e:06:
                    f6:77:61:7f:fa:ae:ce:7f:d7:21:ef:1a:08:98:e7:
                    a4:da:77:40:2d:f4:68:9f:c8:8d:53:27:c2:a7:b9:
                    00:25:62:91:cb:ae:73:47:4c:f1:b6:35:d4:cf:e0:
                    e2:81:3a:4b:e7:01:4e:12:a9:be:c5:a7:12:fa:bd:
                    bb:f8:e9:a5:34:18:9c:53:f9:4a:0f:9e:0f:c5:43:
                    59:80:7c:53:43:ae:bd:73:e8:22:56:1f:12:17:45:
                    6c:10:a9:b6:d1:81:84:b8:5c:80:8c:7d:4c:59:ae:
                    a8:86:07:c6:db:a8:3d:de:c9:a7:28:62:61:cc:67:
                    42:a0:24:ee:01:56:5a:85:a2:f6:bd:b5:26:7c:70:
                    2e:da:db:a2:a5:49:07:e5:a4:6a:c2:a5:46:4b:b3:
                    43:19:9d:bc:b0:cb:93:32:8c:89:01:98:67:18:19:
                    4f:31:0b:fa:9b:c2:90:4e:36:f6:bc:db:28:71:96:
                    5a:78:8d:92:a3:76:e4:ae:c7:57:e8:0a:9f:8a:75:
                    16:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:41:60:30:3A:4D:EB:BF:0C:6D:91:37:33:76:6A:F9:EC:E2:C4:AD
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/xUFgMDpN678MbZE3M3Zq-ezixK0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:55:8e:34:15:50:06:a9:54:69:90:9a:69:d8:59:ab:15:12:
         2c:fd:16:45:0f:89:54:3b:73:33:6e:0f:af:dc:c8:ae:75:e3:
         81:8b:11:f1:48:62:7e:13:cd:4e:30:69:d9:d7:7f:78:89:d8:
         e5:8c:4b:ef:6b:de:76:a9:2d:86:d7:93:f7:68:84:61:86:b2:
         ea:fc:94:1b:49:e5:c2:30:f4:d5:c4:a0:fd:2b:8f:18:e7:7f:
         c1:ce:13:8e:a4:ea:aa:37:51:4a:6d:15:89:21:57:5c:31:7c:
         58:ea:48:ee:b2:f2:6a:e6:5f:d8:d1:12:6a:be:94:42:ba:87:
         ab:da:a9:d4:7c:1a:2c:af:45:e6:b6:5d:d8:42:a3:29:ae:60:
         4c:61:7e:00:81:31:ae:54:db:65:cc:7a:e1:de:85:aa:15:1b:
         90:76:3a:18:13:68:d6:26:25:68:12:61:1a:12:5d:8f:e1:0a:
         2a:b5:e4:cb:69:6f:3a:bb:3b:35:07:7f:d9:2c:5b:8e:78:8d:
         8c:9f:b1:f3:56:c6:c7:52:d1:05:2b:4b:16:e9:a6:3e:2c:cf:
         a8:1e:21:b4:c0:f3:f6:c5:c9:27:28:0e:c4:d5:b8:7f:a9:28:
         59:e2:97:1b:4e:bf:66:7e:d2:18:c1:78:bb:1a:16:68:63:1f:
         98:d4:0c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org