Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/y3a566TK_TWQX6RJIWkJzh5VEyU.roa
File:                     y3a566TK_TWQX6RJIWkJzh5VEyU.roa (raw, json)
Hash identifier:          dmL8kxmig3Kl1E1VgNL7CFdgmdTWzfVC1Nlgk8rgsrM=
Subject key identifier:   CB:76:B9:EB:A4:CA:FD:35:90:5F:A4:49:21:69:09:CE:1E:55:13:25
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       041A
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/y3a566TK_TWQX6RJIWkJzh5VEyU.roa
Signing time:             Thu 13 Apr 2023 09:52:25 +0000
ROA not before:           Thu 13 Apr 2023 09:52:25 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        124.47.192.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1050 (0x41a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:52:25 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=CB76B9EBA4CAFD35905FA449216909CE1E551325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:70:1e:c9:3d:87:83:8b:05:ba:e1:ab:c5:39:
                    41:dc:c7:86:8f:73:13:09:ec:9f:04:f4:21:c8:a6:
                    b3:0b:a5:cd:b5:a6:5d:40:a9:c0:d0:75:b7:44:23:
                    5c:5b:54:15:a2:8e:01:ee:05:5a:32:de:97:f6:5f:
                    6a:45:ed:b2:20:c0:8d:b6:45:c6:af:0e:42:bb:7d:
                    c8:2a:58:80:4a:c8:3f:02:00:7f:52:e7:c6:b9:a4:
                    56:4f:42:0b:c8:5d:10:26:5f:7f:eb:f3:16:5e:19:
                    58:7a:24:f8:12:10:0c:0a:fd:43:07:20:f4:a5:55:
                    a0:89:ef:8c:43:82:9b:6e:b9:f6:e4:08:82:03:89:
                    49:b8:e4:9d:8a:dd:ba:93:03:46:dd:fc:ab:c0:4b:
                    5e:e2:b7:73:2d:45:33:37:4c:1d:71:73:6b:91:17:
                    fd:70:09:0f:ee:7e:e3:e7:10:9b:ba:87:e0:dc:3a:
                    7a:04:cf:21:e4:bb:66:d1:fc:57:8d:b0:33:45:6e:
                    3b:94:26:bf:1a:ee:e5:d3:6e:a8:b3:59:99:43:a3:
                    ec:83:13:9f:8f:c1:81:b9:c2:03:25:1d:f9:15:d3:
                    3c:0c:01:6a:b4:ab:78:df:22:11:62:f1:53:fa:50:
                    4e:04:b7:b4:1b:ac:49:91:eb:7f:b2:b8:e1:0b:1d:
                    05:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:76:B9:EB:A4:CA:FD:35:90:5F:A4:49:21:69:09:CE:1E:55:13:25
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/y3a566TK_TWQX6RJIWkJzh5VEyU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.47.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9c:9a:47:56:3d:9c:f9:7b:b6:29:65:83:c9:2f:4e:ab:21:08:
         22:52:db:24:27:a7:af:61:34:b8:31:5e:f1:00:7c:72:49:eb:
         50:58:5e:7a:a4:97:10:ce:18:f8:02:38:f9:7d:da:78:f7:ea:
         e0:f2:be:e9:ad:9d:a6:77:2b:2c:f8:45:75:d6:7d:66:22:63:
         64:01:61:4d:ef:f1:c5:be:c1:75:dc:59:81:4b:17:df:fb:71:
         69:6f:81:46:f3:8a:a8:01:8d:e1:ad:e8:2e:86:5a:3e:c6:6c:
         d3:e3:a3:08:f2:30:5f:4f:97:0d:83:ed:29:f6:dd:12:7c:8b:
         80:3c:18:7d:80:ac:87:ef:ac:72:03:ae:03:62:69:28:fe:26:
         11:25:b1:4b:2d:77:dd:af:86:69:3b:c1:6f:1a:f3:a9:ec:cd:
         7e:b1:1d:a5:79:d3:ab:0c:42:6e:64:24:2d:02:66:21:6a:c2:
         dd:c8:1f:94:92:8a:b3:1c:13:d6:b3:e7:01:e7:6c:47:1f:fa:
         d9:64:59:36:4d:d3:e2:fc:d5:a3:a8:eb:68:0a:13:f2:a1:69:
         9b:7f:19:7b:1e:5c:5a:2a:33:0b:b4:ae:50:b2:7f:32:55:05:
         b3:1f:d6:e5:8b:0f:43:70:6a:b0:37:ea:3e:03:d5:9c:e1:23:
         01:33:94:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org