Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/4I7IdwXl7d2ZACe2hoCbgHnyQq8.roa
File:                     4I7IdwXl7d2ZACe2hoCbgHnyQq8.roa (raw, json)
Hash identifier:          PV46w/FAWH/JX1cZxXvvgWn658Ow1LbsVPurK6TX9mE=
Subject key identifier:   E0:8E:C8:77:05:E5:ED:DD:99:00:27:B6:86:80:9B:80:79:F2:42:AF
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0467
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/4I7IdwXl7d2ZACe2hoCbgHnyQq8.roa
Signing time:             Thu 13 Apr 2023 09:59:44 +0000
ROA not before:           Thu 13 Apr 2023 09:59:44 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        59.86.128.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1127 (0x467)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:59:44 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=E08EC87705E5EDDD990027B686809B8079F242AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:43:54:f6:70:2c:ab:66:20:47:c1:c2:06:61:
                    31:b2:4a:48:58:50:f4:be:95:02:d2:12:91:cb:26:
                    d6:5b:86:7c:ee:bc:9b:49:4e:46:1c:a5:27:b7:62:
                    1f:65:32:be:32:b5:14:b0:da:e3:ae:8b:56:42:a5:
                    f9:0a:88:d8:0a:1d:cc:fa:62:26:0f:70:03:7a:96:
                    77:80:53:74:5d:51:b8:14:b6:58:47:e2:6b:01:f9:
                    7d:65:a9:94:e8:7b:d6:4f:8c:f3:43:24:ae:0a:cc:
                    7d:5d:c1:37:21:d9:43:38:0e:c9:00:3e:ed:2e:1f:
                    ba:c8:b3:2f:15:56:0b:9d:00:99:fe:ea:85:2d:8b:
                    f3:ec:4a:57:ab:0b:90:64:f4:5c:7a:7c:07:99:90:
                    e9:51:ab:bb:29:aa:89:cd:0d:04:0f:75:01:60:17:
                    82:ff:27:e3:43:0a:ce:29:34:0a:48:b5:90:8e:da:
                    a3:58:c7:d4:f2:3d:6c:a0:38:53:20:e3:81:26:42:
                    62:de:bc:dd:bf:ca:7e:10:ea:ba:21:51:38:1b:1c:
                    75:83:32:b4:8d:8a:e5:f6:04:ed:d6:2c:5c:b7:1c:
                    5d:af:6e:59:70:8f:8b:ee:c9:fb:68:eb:a0:d8:5f:
                    67:49:21:98:0b:2f:04:4e:4d:eb:76:67:5e:51:52:
                    4a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8E:C8:77:05:E5:ED:DD:99:00:27:B6:86:80:9B:80:79:F2:42:AF
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/4I7IdwXl7d2ZACe2hoCbgHnyQq8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.86.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b3:22:28:3e:3d:92:42:a6:e9:3f:2f:75:9d:4c:c6:b2:e7:2e:
         f1:ef:b2:6b:de:42:d3:d1:f7:2b:e8:99:10:e7:cc:3d:0f:47:
         26:2d:c5:dd:fa:2c:76:6f:af:2c:f8:9d:8c:77:c7:39:d1:38:
         3d:a1:51:0a:82:47:7d:aa:d5:56:b2:ea:d2:0d:90:46:b7:b8:
         c7:9c:5b:11:f7:75:1f:4f:59:1d:42:b5:53:82:01:f4:86:e1:
         36:7d:d1:97:51:2d:e3:57:9f:cc:d5:5f:39:9a:2a:48:b4:31:
         ab:51:59:4e:97:af:b3:f0:fd:ba:a5:b2:de:ab:0b:0e:09:3d:
         69:28:2d:bc:87:fb:34:56:9f:4c:d6:08:4f:0a:e4:26:2a:17:
         c2:1c:5f:a2:c6:82:53:9c:f5:6f:66:aa:04:02:74:1e:7d:75:
         28:d2:6e:10:53:9e:63:32:e3:59:8b:de:59:60:19:f2:61:2e:
         04:71:c7:99:ad:c1:c1:e9:28:39:8a:8d:c3:e7:ab:b7:da:93:
         31:07:1e:2c:16:6c:af:1f:50:e0:0d:a1:9c:3e:9e:30:e1:c9:
         c9:e2:bf:f9:49:c6:c2:23:23:d3:c9:3a:aa:2c:28:80:46:55:
         c6:79:8e:29:ea:84:6a:eb:bc:7c:51:ec:00:bb:a7:95:8c:f3:
         d0:63:c9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org