Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/ymk6hhfJiFL9W8fTKNgpRl6XPLE.roa
File:                     ymk6hhfJiFL9W8fTKNgpRl6XPLE.roa (raw, json)
Hash identifier:          FXXFzgo6/QMVHP7/9+6I15AN6nGT+FKAvX8PxY6/0RM=
Subject key identifier:   CA:69:3A:86:17:C9:88:52:FD:5B:C7:D3:28:D8:29:46:5E:97:3C:B1
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03A2
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ymk6hhfJiFL9W8fTKNgpRl6XPLE.roa
Signing time:             Sun 01 May 2022 01:32:02 +0000
ROA not before:           Sun 01 May 2022 01:32:02 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        42.124.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 930 (0x3a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:02 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=CA693A8617C98852FD5BC7D328D829465E973CB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9f:41:ce:8c:8e:2a:ae:99:f2:b3:a6:a7:4f:
                    83:dc:d7:bd:55:49:f6:d1:b0:14:a0:93:47:e3:62:
                    89:c8:e0:29:ab:a5:4e:a1:9d:b3:65:bc:3a:99:e8:
                    64:1e:ea:2e:d3:ad:90:5b:e2:e9:06:9e:1a:bc:3b:
                    94:ba:c1:a7:0e:bb:11:87:56:4c:7d:49:94:e0:08:
                    f3:d8:60:63:e8:95:4d:25:be:20:08:a7:d8:1e:f7:
                    91:0e:d3:93:15:f2:39:6e:63:4c:78:af:bf:5b:0a:
                    2c:10:af:90:df:9f:03:21:d5:a5:ac:61:e4:bc:41:
                    d9:e1:60:e9:d2:0c:ba:02:86:87:03:42:74:4e:68:
                    80:82:42:8c:a4:2d:0e:82:a3:d2:c8:b1:2d:34:a8:
                    08:62:15:2a:ca:73:15:10:1a:b9:38:e5:db:7c:7a:
                    be:4c:27:f2:26:d3:a8:83:3f:df:96:a7:57:a7:5a:
                    41:6b:51:dc:82:f6:0c:9e:72:60:33:1a:0e:dd:9e:
                    be:67:52:0a:68:a2:af:44:7b:05:20:f4:23:e1:22:
                    e8:45:ba:18:21:cb:05:7c:38:39:dc:89:dd:68:63:
                    1d:ed:5d:07:e2:77:b8:aa:c6:ce:ad:14:20:1a:8e:
                    58:2c:43:f4:ec:06:e6:90:3b:34:ef:2a:89:18:7d:
                    26:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:69:3A:86:17:C9:88:52:FD:5B:C7:D3:28:D8:29:46:5E:97:3C:B1
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ymk6hhfJiFL9W8fTKNgpRl6XPLE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.124.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         02:26:f9:8b:50:c7:3b:0c:f7:ad:5d:b9:1f:ab:96:0b:83:f8:
         37:d9:3a:a6:b5:40:75:45:b4:07:bd:84:fa:06:1a:59:e0:7e:
         bb:9a:d1:10:5a:40:e5:22:69:ba:dc:3e:ca:90:d5:19:d3:45:
         28:97:48:9a:0b:6c:e9:50:3f:5e:a3:7d:01:c4:a2:a1:77:a3:
         83:b1:04:f6:40:6a:5e:ba:c7:a1:45:5e:99:ba:c3:c0:92:6d:
         94:7a:6e:06:5f:60:f5:ce:72:3f:7b:a8:16:3b:d3:34:92:e5:
         76:42:a9:83:4b:29:8f:d0:c4:12:b1:24:ce:e7:ad:3d:2a:49:
         17:f1:c3:fb:37:e4:75:42:79:b2:57:8c:be:0b:22:89:3a:70:
         4f:7f:89:c8:03:91:ac:1f:78:fe:36:0b:34:a1:33:8f:03:36:
         54:83:a9:7f:32:44:13:b3:4b:46:87:58:c1:1c:4b:9c:b1:57:
         a6:7f:d3:55:c0:02:66:07:a2:e9:82:87:8c:4b:b9:8b:87:99:
         44:a3:43:4a:c4:5f:07:95:78:9d:42:47:08:db:2b:fa:ce:e5:
         d4:20:16:81:98:e6:d7:0b:a6:23:aa:03:f6:e3:86:1c:c5:2a:
         47:19:b2:6f:e1:4c:ec:09:48:2f:fd:59:1f:0a:21:2d:26:cb:
         b8:e7:bb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org