Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/xuiHxBrIbwto9MJ3ZYI-z6-QJyA.roa
File:                     xuiHxBrIbwto9MJ3ZYI-z6-QJyA.roa (raw, json)
Hash identifier:          2d1+8LV8MyId7H4NR+bRK+FDyEXCyp4P9rk9/aQGUKY=
Subject key identifier:   C6:E8:87:C4:1A:C8:6F:0B:68:F4:C2:77:65:82:3E:CF:AF:90:27:20
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       033B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/xuiHxBrIbwto9MJ3ZYI-z6-QJyA.roa
Signing time:             Tue 25 May 2021 02:42:58 +0000
ROA not before:           Tue 25 May 2021 02:42:58 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        42.125.243.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 827 (0x33b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:58 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=C6E887C41AC86F0B68F4C27765823ECFAF902720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0c:1b:13:51:b8:31:91:c3:ea:61:6a:6f:29:
                    0b:81:fa:24:5b:f3:a6:08:dd:32:de:a8:bf:10:2e:
                    e4:b6:82:d6:ce:81:b7:d8:5b:a5:4e:56:22:e9:ea:
                    fd:3d:b8:cc:a6:30:77:f8:7c:10:32:87:37:7d:a7:
                    e7:3e:d6:f6:cc:11:14:50:20:09:07:7d:14:58:c8:
                    33:76:f3:6c:c1:e7:f5:9e:5c:5a:98:8a:af:fb:ff:
                    95:e7:07:84:9d:b7:88:89:87:7e:ca:25:73:6a:46:
                    00:10:2c:e7:24:5c:44:16:ed:17:21:68:38:70:35:
                    37:81:5b:3d:b5:e0:80:87:50:72:ce:a0:8e:ab:78:
                    fc:34:f6:d7:3b:83:e8:b2:78:e0:58:ad:3f:fa:a4:
                    cc:88:9a:a3:6c:ac:d6:1d:ed:d4:0f:0b:55:f2:0d:
                    21:45:08:e4:b5:4c:76:d9:23:44:36:29:f5:d7:d8:
                    5a:37:ec:e6:50:01:6c:73:16:9e:37:e4:7e:db:e9:
                    f4:f3:6b:03:7e:c2:c4:c5:96:0c:17:0d:95:f0:21:
                    eb:3e:30:1e:2c:30:16:52:89:30:93:ba:c9:17:b4:
                    de:e6:d4:46:73:56:38:c4:28:5a:4d:9e:a5:1a:86:
                    6c:0c:f2:26:77:35:e2:09:2a:b4:33:bf:b0:77:a3:
                    7c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E8:87:C4:1A:C8:6F:0B:68:F4:C2:77:65:82:3E:CF:AF:90:27:20
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/xuiHxBrIbwto9MJ3ZYI-z6-QJyA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.125.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:96:a9:aa:54:e8:76:6a:18:74:94:a5:2f:2a:26:ba:2e:14:
         e4:34:d8:b4:ce:8f:4e:76:5b:c8:b7:1e:5d:50:0a:f1:24:0e:
         b8:ee:36:4a:7f:69:6e:c5:8b:18:44:eb:c7:85:d8:0b:e7:f9:
         cf:96:19:11:90:7e:6d:e9:65:d8:95:1f:d3:a0:da:df:49:74:
         9d:6b:67:31:8b:4f:86:3b:4d:3a:24:db:eb:2d:e5:40:34:55:
         1e:c0:b3:b1:f0:0d:d2:ae:ec:c5:29:be:93:2b:ea:a6:7e:99:
         40:6f:3c:38:ef:31:43:f6:b2:01:29:de:5d:a9:bb:d5:15:04:
         35:d9:d6:ca:d1:25:41:f4:e2:d7:73:27:36:94:c7:6c:74:8d:
         2f:7f:5e:e7:6d:99:86:15:dc:50:aa:65:0f:9f:07:5f:6d:0e:
         a3:00:1b:6d:30:02:9d:89:45:a3:f8:d9:b3:5b:3b:34:db:6e:
         c8:82:ee:ad:47:45:4c:59:bf:5d:fb:a0:b5:31:2f:cb:a0:3f:
         a7:e4:14:57:0e:49:82:34:4a:e0:f1:66:39:8f:fd:ac:c9:30:
         a7:0a:dc:19:23:5b:0c:1d:78:05:1f:25:e6:0c:48:4c:08:39:
         dd:f4:77:a9:69:41:d9:af:04:38:76:b9:d1:aa:bf:e3:66:d2:
         39:89:81:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org