Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/zFVrX6zgM-DdH9eAule4N4nbA_g.roa
File:                     zFVrX6zgM-DdH9eAule4N4nbA_g.roa (raw, json)
Hash identifier:          J3rxo2AdC2eVSB3sCRWZQCGxyiKDYLPnZ+2E7A73IR0=
Subject key identifier:   CC:55:6B:5F:AC:E0:33:E0:DD:1F:D7:80:BA:57:B8:37:89:DB:03:F8
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0404
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/zFVrX6zgM-DdH9eAule4N4nbA_g.roa
Signing time:             Thu 13 Apr 2023 09:52:14 +0000
ROA not before:           Thu 13 Apr 2023 09:52:14 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        27.98.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1028 (0x404)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:52:14 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=CC556B5FACE033E0DD1FD780BA57B83789DB03F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9b:44:27:80:c2:3e:34:3b:cf:dd:52:8e:4b:
                    89:2f:ba:4e:56:6b:fb:da:46:99:87:2e:9b:e1:5a:
                    ae:c6:75:22:75:b4:cc:1b:d9:a2:43:c3:62:35:d0:
                    ab:af:e8:a8:65:f6:56:b7:fc:30:d4:e5:d3:b4:a4:
                    f8:7b:9f:99:6d:d5:50:d1:7e:5c:29:d8:56:e0:4c:
                    ad:3e:7c:29:4f:c9:dd:0c:59:39:87:cb:1e:57:7d:
                    87:b8:19:12:8e:96:9c:db:05:24:ae:9a:e6:a5:91:
                    e5:77:91:ad:3d:4f:e7:43:b3:71:25:85:af:13:11:
                    71:1e:a5:46:87:53:72:78:71:6c:53:20:6a:76:b0:
                    47:d4:bc:b8:72:83:23:64:f7:a7:28:d3:0f:15:d2:
                    1a:c1:b6:35:cf:aa:8d:9a:cd:b8:4f:35:02:d8:80:
                    7f:a8:1a:c0:6b:47:f6:6c:74:a3:10:61:66:83:73:
                    8d:d2:22:18:4b:93:f2:f2:b2:04:9c:11:2f:b4:09:
                    ad:d6:cf:0a:4c:11:96:4d:51:04:74:73:11:f9:ee:
                    c7:ad:29:2a:45:14:72:c0:db:01:6b:47:e7:2b:1c:
                    a6:98:a5:6f:40:af:a1:55:cb:a1:dc:7c:be:46:2c:
                    35:2d:e1:b7:c7:ec:52:4f:af:2d:f7:15:00:9e:e3:
                    2c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:55:6B:5F:AC:E0:33:E0:DD:1F:D7:80:BA:57:B8:37:89:DB:03:F8
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/zFVrX6zgM-DdH9eAule4N4nbA_g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.98.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         70:2d:8e:1d:2f:d9:a9:42:19:f7:75:e0:6d:3e:35:03:1b:65:
         be:3b:e1:6f:89:d2:67:14:ba:0d:d5:6e:d5:8e:3d:c6:ae:21:
         a9:48:9e:a9:35:90:e9:a8:50:cb:a0:9a:0f:d9:f1:ef:64:9a:
         36:d6:55:32:1a:ba:f0:36:23:b6:db:ef:e0:b8:3c:92:41:ee:
         ee:bf:85:23:67:cf:b2:f7:35:71:fa:85:8a:a7:ab:91:f4:85:
         bc:77:9e:b7:41:39:19:53:3b:53:e9:43:97:2f:3a:8a:c6:97:
         ac:0a:33:36:d1:5b:b2:05:d0:1c:3c:29:1d:4e:75:0b:eb:47:
         57:b4:b1:e2:71:b4:ca:b4:4d:db:cd:01:cb:c5:f5:96:64:87:
         a1:cb:9a:9c:b5:cd:3f:5b:5e:a7:1a:f9:45:03:7e:31:fc:84:
         c2:6e:4a:9c:ca:15:a6:dd:dd:12:1a:9f:f8:20:cf:98:b5:dd:
         d9:39:16:1b:34:93:5e:1f:1c:65:3c:bb:db:e6:9c:30:f7:f3:
         cc:51:9d:d5:f2:00:9a:f0:90:1c:4d:a8:1e:b9:a4:09:b5:42:
         d4:e8:ef:ee:b9:d5:7c:04:52:ea:11:9a:17:fe:03:c2:18:1b:
         26:0d:02:f0:a6:08:b9:21:0f:be:0c:5b:d9:97:51:59:88:f4:
         b3:67:51:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org