Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/8B4DlQ1NBPz1arl_DFu9qufIyds.roa
File:                     8B4DlQ1NBPz1arl_DFu9qufIyds.roa (raw, json)
Hash identifier:          bzC7foaj+wKbHtRh1gUW6ILO3pbUctF8RLKmGGaYTtY=
Subject key identifier:   F0:1E:03:95:0D:4D:04:FC:F5:6A:B9:7F:0C:5B:BD:AA:E7:C8:C9:DB
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       045B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/8B4DlQ1NBPz1arl_DFu9qufIyds.roa
Signing time:             Thu 13 Apr 2023 09:57:53 +0000
ROA not before:           Thu 13 Apr 2023 09:57:53 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        59.86.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1115 (0x45b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:57:53 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=F01E03950D4D04FCF56AB97F0C5BBDAAE7C8C9DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:60:2b:f4:44:60:5b:34:19:81:49:66:a9:
                    09:d1:11:48:13:99:cd:b0:ab:0e:13:67:ca:13:19:
                    92:95:41:b9:4d:ed:87:ed:c7:92:1c:42:80:c3:9c:
                    3f:87:1a:c3:29:04:60:1c:1d:d8:56:ba:50:53:32:
                    11:13:a9:e5:c1:06:93:4b:10:7d:6e:2d:80:6b:d9:
                    f8:cd:a8:db:ca:dd:47:d1:8b:8f:1b:0a:b9:93:02:
                    0e:ef:57:ca:db:7e:1a:c1:e0:6f:55:35:61:30:57:
                    99:29:2b:be:c2:a5:01:7f:39:60:72:d7:6d:b3:82:
                    03:84:26:70:b2:15:78:6c:e4:c7:9f:78:7e:8a:3f:
                    ae:f6:29:3f:bf:63:bb:0b:72:31:3a:cc:95:02:7e:
                    bc:0c:d0:b0:a1:cb:0e:e7:55:d3:09:b4:a4:f3:f8:
                    c5:74:44:c8:b2:f7:a7:3d:86:43:e7:f8:66:5a:4c:
                    45:48:69:64:25:5b:28:2d:a8:2e:e8:4c:bc:8b:3d:
                    77:55:6b:de:73:47:56:00:b6:b6:6d:ce:de:b0:23:
                    f8:57:b3:17:17:b0:e2:01:22:09:47:90:9c:41:ca:
                    7d:96:76:24:d8:13:df:76:94:84:e9:a7:e1:f0:1f:
                    4d:c0:d3:3a:44:5f:47:03:78:72:9b:2c:c9:d0:c1:
                    aa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1E:03:95:0D:4D:04:FC:F5:6A:B9:7F:0C:5B:BD:AA:E7:C8:C9:DB
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/8B4DlQ1NBPz1arl_DFu9qufIyds.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.86.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         31:88:4a:a1:c1:45:73:68:23:5c:e7:ca:ce:88:8c:4e:43:43:
         d8:cb:47:78:db:24:15:22:87:fc:09:fc:73:c1:1a:85:0c:f8:
         7b:3f:22:26:43:aa:9f:13:6b:99:aa:5a:ab:ff:0a:41:e7:e0:
         b1:10:af:c0:d1:3b:30:07:b0:a1:72:a0:9a:62:f1:f1:63:a5:
         f1:32:96:5e:6c:d5:38:f6:8c:59:38:b8:82:d3:88:fb:61:4d:
         03:cf:4c:4d:7c:2c:a0:3a:f9:f8:65:16:07:16:d6:a3:b0:7a:
         51:56:f9:e9:db:dd:6b:b3:6a:15:2f:c0:a2:a6:8d:27:2e:9e:
         e9:df:bf:57:8f:a1:bc:a2:82:12:45:72:01:2f:37:69:30:30:
         7d:0e:12:06:ee:56:e6:b8:7a:b2:8d:b8:f5:26:61:62:ca:c8:
         3b:65:c7:4f:a6:94:b1:13:20:ab:0b:14:6b:80:27:c0:e9:64:
         c2:44:de:f6:ce:41:c2:01:17:2d:d9:4a:d4:92:33:f4:ce:4c:
         58:85:43:bb:f6:e4:23:5c:4d:18:51:85:45:8b:e8:2b:3c:95:
         e1:94:49:3f:f4:5f:ca:8e:03:3c:24:3d:d4:53:57:90:fc:37:
         8f:09:a6:89:53:c4:d4:ee:88:28:95:ce:ec:84:22:f3:5d:d8:
         d2:31:88:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org