Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/z0AxZGQyR0OE9ChIcc6G32Eo9yo.roa
File:                     z0AxZGQyR0OE9ChIcc6G32Eo9yo.roa (raw, json)
Hash identifier:          F5iYOLxQiJSfzmKy2d0lbsoiSHLKSYYFUh820rWKp7w=
Subject key identifier:   CF:40:31:64:64:32:47:43:84:F4:28:48:71:CE:86:DF:61:28:F7:2A
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03E8
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/z0AxZGQyR0OE9ChIcc6G32Eo9yo.roa
Signing time:             Sun 01 May 2022 01:33:06 +0000
ROA not before:           Sun 01 May 2022 01:33:06 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        61.198.112.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1000 (0x3e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:33:06 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=CF4031646432474384F4284871CE86DF6128F72A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:35:c7:ea:ab:fa:db:13:48:78:c0:7b:44:77:
                    fe:00:74:f5:4d:8b:7e:ab:32:e5:0c:2b:15:35:e3:
                    d4:6e:67:bf:9b:e2:83:d4:fc:da:dc:4e:73:22:38:
                    32:c9:c5:78:45:11:83:26:7f:fd:3c:2e:bd:c3:c9:
                    df:74:2c:8d:5f:1c:aa:8c:2b:16:91:eb:5d:2f:b5:
                    5a:ee:82:b6:fa:2f:30:12:3d:fb:c0:b5:cb:4d:b2:
                    d6:e3:55:bb:cd:b2:59:12:d8:98:f5:e1:22:2a:48:
                    d3:36:4d:b2:fa:ad:b0:3e:18:51:e1:75:b4:6b:64:
                    34:18:d7:37:84:6e:1c:6d:37:57:95:b9:84:41:96:
                    26:78:0b:6c:ab:b8:a3:96:8d:93:ae:b3:6a:46:39:
                    88:e5:30:c0:10:75:ff:41:88:29:cb:bc:90:83:a0:
                    b7:11:5e:7c:92:98:ce:bd:ad:f2:57:6a:1b:a2:26:
                    08:ab:f3:ee:ec:fd:e2:b5:e1:c2:19:53:24:a8:df:
                    2c:2f:0c:07:0e:b0:26:e3:9c:af:b2:d3:ec:4a:23:
                    4a:4d:dc:55:32:ad:c6:34:cd:cb:80:b6:eb:9b:d0:
                    1f:68:66:a8:14:4d:21:bb:4d:f3:72:65:ac:db:91:
                    32:fe:ad:4e:04:c3:88:f2:7e:2c:e6:cc:5d:3c:2c:
                    1e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:40:31:64:64:32:47:43:84:F4:28:48:71:CE:86:DF:61:28:F7:2A
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/z0AxZGQyR0OE9ChIcc6G32Eo9yo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.198.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c0:65:8f:e3:2f:ca:b2:18:1d:80:ca:fa:50:64:de:6f:98:db:
         8d:96:85:2d:13:cd:6c:0c:3e:3c:13:58:a8:32:e8:d7:90:3d:
         33:5a:60:66:3b:87:d3:77:1a:8a:29:13:8d:e7:09:e7:64:6a:
         8f:b4:95:c8:75:d9:26:8f:9c:e7:5f:fd:2f:46:bb:87:d8:6a:
         f6:34:c5:02:43:ad:84:95:b8:92:4b:5c:ef:73:81:dd:a7:f4:
         a8:2f:98:ea:a9:3f:23:63:ab:80:e2:ab:24:31:59:26:d1:ef:
         1e:56:d1:bc:6c:b0:e6:4f:68:1a:6e:24:b0:b1:4f:0b:64:ad:
         f6:f3:0e:65:7c:d7:4b:bf:6a:e3:26:34:aa:0e:21:4a:1b:b9:
         1b:05:65:6b:97:74:43:79:0f:52:1d:38:01:b6:f2:43:6b:39:
         c7:78:63:e7:c3:aa:07:c4:40:38:21:c7:c1:6e:ab:38:14:df:
         a5:69:da:7d:c8:02:85:50:09:b2:7a:46:66:81:43:e2:fc:65:
         98:a2:49:35:54:de:e7:5d:94:df:f3:28:69:f2:f9:30:7c:34:
         f0:9d:c1:83:30:5f:08:27:f7:59:63:aa:4f:cd:c5:3e:d5:a4:
         f7:c0:b3:3d:4f:14:4b:b2:4c:46:d4:93:be:92:5e:2e:9d:29:
         32:16:ad:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org