Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/B0GB30i63w39cc5kC7c9JXZjIjE.roa
File:                     B0GB30i63w39cc5kC7c9JXZjIjE.roa (raw, json)
Hash identifier:          4bVK4sbGjXoxDotMj3lEKqGKIWCHIAWTB/S2Jwtn0SI=
Subject key identifier:   07:41:81:DF:48:BA:DF:0D:FD:71:CE:64:0B:B7:3D:25:76:63:22:31
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0343
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/B0GB30i63w39cc5kC7c9JXZjIjE.roa
Signing time:             Tue 25 May 2021 02:43:00 +0000
ROA not before:           Tue 25 May 2021 02:43:00 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        59.86.128.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 835 (0x343)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:43:00 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=074181DF48BADF0DFD71CE640BB73D2576632231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:01:49:8d:76:c7:7a:ae:5a:75:4c:0d:c0:
                    6f:99:9b:9c:54:60:83:aa:72:bf:ea:c9:88:39:7d:
                    f0:a8:2f:fe:30:89:7c:b8:04:48:a9:57:74:0a:24:
                    71:9e:b0:30:95:ab:2b:aa:9b:e3:14:bb:c4:21:ca:
                    fd:02:01:59:33:57:5d:09:cb:30:fb:62:08:be:55:
                    36:68:79:70:bd:32:2b:bd:aa:7d:65:6e:4a:8e:1b:
                    d1:46:05:55:3c:83:34:2f:76:60:9a:43:20:f0:5c:
                    ea:86:ab:3b:1e:49:be:fc:52:d5:37:83:39:c0:17:
                    7a:84:c6:09:eb:f8:03:5c:a7:57:63:6f:03:cb:99:
                    12:89:39:9c:84:90:d2:90:b4:3b:9a:20:15:b9:5f:
                    a7:03:61:0a:66:20:65:23:4e:69:d2:27:ae:55:ff:
                    de:dc:e0:eb:71:1a:d3:de:7d:78:5c:40:21:39:69:
                    ab:52:ae:bf:c4:14:92:27:48:bd:59:43:c6:d1:11:
                    3f:e0:ae:ce:a8:ff:e8:ae:0c:41:d4:df:1c:bd:d7:
                    98:61:61:14:09:48:4b:84:8f:83:ca:01:a9:ad:90:
                    60:47:a0:ee:a7:94:e5:01:9c:e4:b7:be:b9:80:65:
                    9c:1e:b6:3e:b7:98:0b:a4:cd:0b:90:e5:c9:5d:11:
                    c2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:41:81:DF:48:BA:DF:0D:FD:71:CE:64:0B:B7:3D:25:76:63:22:31
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/B0GB30i63w39cc5kC7c9JXZjIjE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.86.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:a9:57:c6:d5:9e:9d:06:a0:86:aa:38:76:87:f7:e9:30:dc:
         79:80:10:8f:15:64:2e:18:d2:c0:eb:5c:2e:5d:c5:e5:fc:2d:
         00:84:18:1c:71:f3:66:0c:80:77:2d:ed:4b:51:72:b2:7b:0c:
         c4:a0:ac:e1:73:63:a2:67:37:d7:d3:6f:4e:27:0d:ec:09:22:
         b5:71:7c:95:1c:a3:1b:15:27:80:d3:d5:e2:f1:22:cf:4d:6b:
         78:fa:c8:a4:f1:ea:2b:dc:43:b2:96:14:90:4d:8c:5b:d2:06:
         fb:52:27:96:fe:0b:d9:9c:41:9d:ba:74:56:bd:f5:ef:c9:ee:
         8b:64:92:50:90:a0:9e:be:83:c3:5c:4e:48:23:dc:c9:4e:f6:
         3b:0f:ca:87:7a:e7:3e:e0:24:bf:3b:98:0e:f4:3e:2a:ef:74:
         31:ed:95:1f:fe:68:11:aa:90:6d:c4:c7:f5:1d:e8:a2:ee:af:
         dc:62:23:1f:a3:6c:95:1f:b3:91:11:41:65:f6:6c:27:6b:0c:
         c7:de:dc:68:f1:ba:dd:68:72:ad:41:bc:ba:87:41:92:af:37:
         9b:80:00:2d:3f:2e:52:e9:e8:50:76:84:bb:a3:48:ca:50:f0:
         b8:f8:8a:ac:c3:44:dd:0a:83:f2:b2:d4:91:01:be:96:f3:a9:
         0a:2b:ab:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org