Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/LZmy-yarF_ddvj3Po22L2Zgm9ZY.roa
File:                     LZmy-yarF_ddvj3Po22L2Zgm9ZY.roa (raw, json)
Hash identifier:          f+gzfAImzHh0qGXHpAxhdQJgLzUxotKufZvsMXajOjQ=
Subject key identifier:   2D:99:B2:FB:26:AB:17:F7:5D:BE:3D:CF:A3:6D:8B:D9:98:26:F5:96
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       041B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/LZmy-yarF_ddvj3Po22L2Zgm9ZY.roa
Signing time:             Thu 13 Apr 2023 09:52:25 +0000
ROA not before:           Thu 13 Apr 2023 09:52:25 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        59.86.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1051 (0x41b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:52:25 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=2D99B2FB26AB17F75DBE3DCFA36D8BD99826F596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7b:9a:d6:2b:bf:7e:f0:63:87:ea:a0:18:c4:
                    e6:ab:5e:f4:84:6b:21:1e:16:45:f5:ed:29:ad:27:
                    c7:70:e7:46:8a:cd:25:23:3b:2d:6c:10:ec:44:c2:
                    18:8c:ca:35:26:ca:10:a5:cf:fb:f9:84:f1:d9:08:
                    f6:53:a4:46:c2:ca:51:e4:e7:87:0d:0d:2f:7a:16:
                    d6:b6:67:11:12:a3:08:43:a9:ef:a8:8a:07:bf:11:
                    9b:b4:85:a7:5d:a8:3e:96:c7:a2:0d:37:09:e9:ca:
                    c3:a6:09:56:f1:1f:aa:fa:31:19:2d:46:1c:e3:e8:
                    7b:8a:ec:8a:b9:fb:a7:33:96:38:13:64:88:a2:c8:
                    09:88:ae:fc:f1:70:41:24:6c:4a:32:12:e1:76:1e:
                    d8:9c:a5:1a:0b:67:48:92:06:c5:bd:13:9f:7e:ca:
                    ba:53:cc:6c:88:18:a4:1e:9c:6a:9a:c3:7e:18:6e:
                    5b:11:09:b8:bf:87:4e:9c:a9:8a:73:30:9f:aa:7f:
                    07:15:c7:7e:60:f0:3a:f6:d1:e4:1a:92:3b:b5:88:
                    c8:46:52:1c:ab:75:12:8a:4b:bc:5c:59:00:06:4f:
                    00:6a:aa:9e:d6:4d:9d:30:c7:64:3c:7c:9f:a2:3c:
                    57:a2:21:ba:2c:ef:76:23:db:ef:47:81:f9:bd:97:
                    fe:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:99:B2:FB:26:AB:17:F7:5D:BE:3D:CF:A3:6D:8B:D9:98:26:F5:96
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/LZmy-yarF_ddvj3Po22L2Zgm9ZY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.86.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1e:b0:9c:e2:a8:9c:3b:96:2f:15:c4:6d:fa:20:df:d7:97:da:
         41:29:f3:11:8a:7f:57:61:76:4e:d7:13:46:31:ae:2d:1e:07:
         fb:c8:9f:e1:78:01:59:2b:b9:86:a1:8a:53:2e:fc:d9:d8:a4:
         9f:14:a3:85:d0:bb:c3:a6:8d:7b:2a:d4:4a:33:e8:35:4d:71:
         54:56:59:ab:01:7e:e4:0f:3d:69:1f:bf:47:7b:81:23:f6:ab:
         69:c8:63:7a:13:23:b4:bc:23:70:05:af:70:d0:a2:39:a3:86:
         9d:02:a3:97:81:21:8d:1e:70:dc:39:6e:10:cb:47:59:93:8f:
         86:d4:dd:6d:20:6c:61:5a:15:fa:7e:34:6d:37:c2:89:d9:47:
         06:a9:7c:39:30:9c:08:8d:4d:c2:1a:05:bb:10:6f:97:d8:ec:
         6d:f8:30:81:9a:dc:5d:ab:e9:5f:62:0b:08:ab:c6:bc:37:cf:
         c8:60:a1:e8:cf:7c:bc:61:16:4a:a6:ab:e2:ba:dc:8f:29:18:
         5f:fc:d0:53:7d:2a:83:42:a7:cc:61:46:0e:4a:37:33:8e:8a:
         ff:d0:4c:87:ea:d8:ee:4c:f1:c1:28:53:e6:87:d5:b1:b3:54:
         c8:3d:7a:ab:6c:0e:0f:41:c6:94:4c:9f:b8:f7:5a:b8:5d:fa:
         cb:27:6d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org