Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/yJQtfbNqJjS9h6eRDZUjeE2tVco.roa
File:                     yJQtfbNqJjS9h6eRDZUjeE2tVco.roa (raw, json)
Hash identifier:          GOpHPkAmJgM7h/duzdDt+6zwuOjkhF+j+RbSS0ZQpmc=
Subject key identifier:   C8:94:2D:7D:B3:6A:26:34:BD:87:A7:91:0D:95:23:78:4D:AD:55:CA
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       031A
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/yJQtfbNqJjS9h6eRDZUjeE2tVco.roa
Signing time:             Tue 25 May 2021 02:42:48 +0000
ROA not before:           Tue 25 May 2021 02:42:48 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        103.139.250.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794 (0x31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:48 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=C8942D7DB36A2634BD87A7910D9523784DAD55CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d0:16:7d:46:14:57:f5:64:a3:42:60:7e:6f:
                    27:6d:71:88:86:1a:5c:c8:fd:d8:d7:1e:4a:e1:ba:
                    4d:cc:c3:2c:42:78:df:bd:58:ba:8c:69:f9:42:9b:
                    d6:19:33:12:54:d6:52:1b:bb:2d:03:eb:eb:c0:16:
                    3f:6d:f7:09:67:4a:a1:ef:07:b4:ff:be:10:96:b1:
                    17:51:15:39:00:dc:02:b7:d2:fe:c1:96:a8:de:6b:
                    ee:6b:4d:b4:b4:93:82:41:21:0d:f3:52:b4:c6:3e:
                    7e:ef:10:f5:c7:c1:d9:25:96:14:7c:b8:14:8c:3c:
                    cc:3f:d1:b4:42:55:66:e2:95:39:fb:a0:bf:01:7c:
                    ea:74:80:b3:09:6b:9f:74:b6:f5:0c:17:eb:1f:9e:
                    fa:2a:bc:a2:00:db:fd:34:9e:48:be:04:21:94:d1:
                    ef:d0:7c:74:70:3f:53:5b:31:72:45:19:f0:29:25:
                    de:e7:d1:48:81:6a:cf:a5:c4:ad:ed:c1:12:d9:fb:
                    63:aa:49:5c:05:5c:bf:98:a7:eb:8a:8a:1b:59:0c:
                    12:88:f4:48:a4:96:71:4c:03:54:45:29:f7:9f:b3:
                    c4:6b:be:b4:1d:a6:3c:14:87:5f:67:fc:4e:c4:5e:
                    5f:e8:5e:7f:7d:83:46:c1:88:1a:31:26:c2:f9:a9:
                    f9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:94:2D:7D:B3:6A:26:34:BD:87:A7:91:0D:95:23:78:4D:AD:55:CA
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/yJQtfbNqJjS9h6eRDZUjeE2tVco.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:ce:7e:d9:0b:30:1d:6a:38:cc:19:04:2d:1f:51:2b:95:3d:
         2b:b1:a7:44:4c:c0:ae:36:9c:65:ad:5f:3d:e9:57:d7:83:a9:
         c1:a6:13:a0:70:6e:83:06:b0:68:58:55:0a:7a:a8:9f:77:12:
         24:34:34:de:5e:b3:c0:ae:56:62:0b:e1:05:ba:43:42:a3:c6:
         7e:de:68:3e:78:77:fb:41:c3:1b:d6:ba:42:ab:b4:95:84:3a:
         7f:70:e2:48:2a:06:50:24:85:21:9e:d4:b5:1c:72:d1:3b:4c:
         53:70:55:c5:f0:1d:78:d1:10:be:85:27:d8:bf:88:87:66:e1:
         b7:12:ee:91:1e:c6:2d:f0:77:91:12:cf:d9:b1:27:3a:ad:ee:
         1f:9a:1f:9c:64:b8:a2:60:de:af:6f:9e:75:9e:c4:26:2b:8b:
         c9:f9:47:bf:a2:15:df:ab:fd:cb:11:cc:b2:14:50:e6:f1:aa:
         04:ab:66:70:e9:2a:4e:59:9e:f7:18:fe:a0:23:bc:9a:c0:80:
         db:98:ba:df:c5:a7:02:2f:19:86:47:5f:49:b7:5c:11:a1:7f:
         bb:83:59:fd:aa:b2:ab:31:25:0c:5f:4c:ed:6c:28:d4:cb:73:
         ed:d2:93:10:9c:45:ae:5e:4e:03:87:d3:c5:d3:0a:f6:97:67:
         aa:53:50:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:11 2023 by rpki-client on console-fra.rpki-client.org