Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/xu1SVLf1yhTqNg0OQ0kj3W_5IfI.roa
File:                     xu1SVLf1yhTqNg0OQ0kj3W_5IfI.roa (raw, json)
Hash identifier:          S0xI1rgpNdFhzKR6w2T2OEdk3KmVq7pYGU1+wLH4Pa8=
Subject key identifier:   C6:ED:52:54:B7:F5:CA:14:EA:36:0D:0E:43:49:23:DD:6F:F9:21:F2
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       042E
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/xu1SVLf1yhTqNg0OQ0kj3W_5IfI.roa
Signing time:             Thu 13 Apr 2023 09:55:23 +0000
ROA not before:           Thu 13 Apr 2023 09:55:23 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        112.140.0.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070 (0x42e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:55:23 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=C6ED5254B7F5CA14EA360D0E434923DD6FF921F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3a:75:1a:1f:79:53:eb:e1:f0:09:1b:97:46:
                    b4:52:0a:96:c4:41:cd:c0:61:ee:65:35:66:33:45:
                    2c:ab:38:7c:a4:e2:c3:69:71:04:7a:95:20:ea:b5:
                    6f:55:9a:65:62:fb:b5:b0:28:5d:9b:7c:da:30:f9:
                    75:f2:74:45:78:2f:78:f4:54:87:df:84:6c:ac:0a:
                    57:7d:fc:db:d1:3d:b9:13:0a:2e:1c:c9:00:f5:df:
                    04:4e:8e:f4:87:73:6d:8e:43:da:74:5f:ef:c8:20:
                    60:3d:a0:e7:3d:34:1c:77:3c:30:45:fd:ca:05:e3:
                    35:6c:2f:af:18:77:42:28:b4:71:3e:51:3c:ce:10:
                    8e:36:68:d6:9e:da:dd:9b:40:b9:08:22:c3:65:a0:
                    92:b2:03:75:5e:65:19:0f:10:d7:b5:e7:b2:67:a0:
                    9f:31:be:2a:42:e4:02:24:3c:6b:8d:e4:db:2f:be:
                    86:b4:1c:7e:4e:75:e6:b6:6d:46:a8:f9:20:9a:67:
                    44:9c:7e:58:ff:10:f5:00:e4:0d:80:3b:b2:0c:19:
                    06:e5:44:02:29:88:d8:54:80:05:ed:7f:82:da:7b:
                    59:f7:64:ff:95:2e:3e:88:d3:1a:2d:d2:f8:cd:73:
                    90:1c:76:0a:03:5b:2e:d2:2a:43:4d:84:6c:e6:fe:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:ED:52:54:B7:F5:CA:14:EA:36:0D:0E:43:49:23:DD:6F:F9:21:F2
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/xu1SVLf1yhTqNg0OQ0kj3W_5IfI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.140.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:fd:84:41:cf:12:a8:35:de:6c:57:dc:ea:48:57:4d:ba:19:
         db:e5:96:4a:fb:14:18:05:5a:5f:19:9e:3e:3e:de:b3:3e:d5:
         fe:4d:25:6d:cd:4d:9f:07:4a:a1:32:bc:84:28:8a:f2:0b:7c:
         7a:f1:9f:66:86:e6:da:eb:d3:2b:f2:a8:42:2e:ff:a2:ad:4d:
         83:f3:6d:20:53:d4:41:93:58:6a:3a:a9:f9:77:d2:74:67:0a:
         86:3a:74:b5:52:e3:5b:b9:61:3f:ab:e1:e0:88:7e:3e:87:4f:
         77:03:e9:17:36:b1:ea:91:d7:21:e6:73:3a:66:77:2f:11:ac:
         e5:49:78:79:c2:3a:23:fb:e1:55:cb:ee:e5:65:4e:72:46:d6:
         a0:ce:a9:0f:2b:04:cc:8b:23:89:a5:c3:47:ec:8b:94:56:42:
         f9:42:7a:dc:93:68:72:92:e7:8c:60:ce:bf:9d:51:e3:9d:02:
         58:28:a7:d0:c2:63:2f:b9:62:f0:73:1d:10:02:d5:63:84:74:
         a2:16:79:2c:da:3f:8b:c3:32:8d:c7:85:5c:ad:d2:52:d7:43:
         d0:b8:7d:63:01:7e:71:b4:41:79:09:c4:b6:82:5b:04:10:70:
         3f:1e:c1:7b:09:0c:22:f1:9d:26:0d:6a:b9:b3:2e:72:af:62:
         c7:d3:cb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org