Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/zq6nSzlenBdoaQn-9R1PRDc24Pc.roa
File:                     zq6nSzlenBdoaQn-9R1PRDc24Pc.roa (raw, json)
Hash identifier:          CX4YV3bp6yNxuR5G86V1mig8CteLK6w6AW8WdsVB5KQ=
Subject key identifier:   CE:AE:A7:4B:39:5E:9C:17:68:69:09:FE:F5:1D:4F:44:37:36:E0:F7
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0384
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/zq6nSzlenBdoaQn-9R1PRDc24Pc.roa
Signing time:             Sun 01 May 2022 01:29:42 +0000
ROA not before:           Sun 01 May 2022 01:29:42 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        112.138.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 900 (0x384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:42 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=CEAEA74B395E9C17686909FEF51D4F443736E0F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:88:33:43:18:b4:75:c0:10:f4:e5:b6:98:
                    cb:6a:60:67:02:6b:a6:ab:de:02:1a:37:2b:0c:c6:
                    44:b2:1c:59:3f:93:57:f1:23:8e:8a:2e:79:7a:01:
                    a1:25:78:50:f3:d3:bd:98:14:51:3d:4e:97:2e:d0:
                    c2:a7:6a:24:b5:96:a6:41:2b:d3:3e:2f:4f:4f:d8:
                    cb:37:67:4a:58:7f:85:e5:38:3f:f8:92:cd:91:60:
                    42:97:6f:08:35:17:ee:b3:81:a7:67:7f:b3:de:1f:
                    24:5a:00:5d:23:83:b8:64:79:11:9e:b6:0a:75:c8:
                    87:90:92:04:d8:75:fd:cd:fe:63:f3:81:18:fa:76:
                    86:2b:fd:77:16:ff:71:dc:22:28:d3:c3:ab:0a:92:
                    27:75:db:78:e9:a2:62:95:57:e1:d7:cc:fb:b8:07:
                    2b:cc:93:84:0d:c9:73:b4:d4:9b:17:5e:fc:e8:72:
                    24:d2:58:0b:96:5f:63:21:19:a1:a5:29:17:59:56:
                    9b:7a:40:d5:6a:e0:1b:3d:36:6a:01:ac:04:d6:5e:
                    15:88:73:2e:5c:4e:92:5f:af:ea:12:68:40:f1:58:
                    40:da:3c:ec:d8:4c:b1:02:50:64:6b:92:56:67:38:
                    cb:3d:0c:a4:9b:58:88:d5:15:b4:93:fd:75:c8:a3:
                    c5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AE:A7:4B:39:5E:9C:17:68:69:09:FE:F5:1D:4F:44:37:36:E0:F7
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/zq6nSzlenBdoaQn-9R1PRDc24Pc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.138.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5c:83:a4:09:57:04:6a:0b:03:3c:14:15:08:2f:bd:fb:ee:7d:
         ec:fd:a5:22:59:de:f9:6f:58:5d:27:71:9a:3c:68:81:d6:77:
         d8:48:c2:35:21:ad:62:e1:d8:43:8e:aa:54:74:33:3f:ba:32:
         24:f2:45:71:5d:42:93:11:bf:68:a2:89:52:c9:84:d5:83:37:
         f5:22:d2:6e:5c:e3:ab:11:c4:19:7f:61:9b:a3:c3:7b:ab:7c:
         d7:43:38:c2:d5:98:ff:17:7a:3b:f8:99:02:5a:2d:21:1a:fe:
         aa:47:4f:c2:35:00:d1:27:c7:42:d7:10:e8:04:ad:d7:be:ee:
         0c:35:42:9c:bb:a8:d0:55:5d:8f:57:04:fb:46:c7:c6:8f:fd:
         f0:5a:23:b7:a4:b7:ba:b5:88:f5:50:cf:08:71:d5:1b:05:99:
         9c:8e:51:e6:6c:5e:d8:68:0b:2f:c1:a6:58:a7:37:b6:00:f8:
         8b:16:80:02:64:20:14:96:c8:b8:29:36:a9:ca:eb:70:5f:74:
         ff:40:45:f3:1c:44:5d:50:50:f7:f9:c9:42:d7:5e:67:e7:01:
         01:fb:28:f6:a0:fc:c9:32:38:81:7e:af:06:52:10:e9:f9:ea:
         f9:4b:8a:5d:e5:b3:cd:ea:c4:ac:1f:41:8a:3d:72:3b:e4:a3:
         27:2e:6c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org