Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/ZpTJ8vDN4RtPIa6I15KF6qTFDaw.roa
File:                     ZpTJ8vDN4RtPIa6I15KF6qTFDaw.roa (raw, json)
Hash identifier:          sNfpTSxyZIVQ3VMn3IcEhNAKISV2+i+z1VVI5gCzB0M=
Subject key identifier:   66:94:C9:F2:F0:CD:E1:1B:4F:21:AE:88:D7:92:85:EA:A4:C5:0D:AC
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0465
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ZpTJ8vDN4RtPIa6I15KF6qTFDaw.roa
Signing time:             Thu 13 Apr 2023 09:57:57 +0000
ROA not before:           Thu 13 Apr 2023 09:57:57 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        59.85.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1125 (0x465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:57:57 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=6694C9F2F0CDE11B4F21AE88D79285EAA4C50DAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1d:e8:e2:8d:74:84:2e:6a:0d:b7:16:2d:eb:
                    8c:84:83:46:66:39:73:f5:df:db:01:d4:b3:06:ad:
                    35:9c:35:18:c2:14:f4:bb:1f:cf:ce:22:3b:0a:38:
                    1d:24:bd:b1:21:a8:8a:50:6d:ed:ac:c7:b1:75:6e:
                    72:07:54:aa:b9:fd:fb:3e:e3:b6:e0:97:8e:c6:7e:
                    5c:32:75:72:22:30:b0:40:7a:62:a8:24:dc:82:88:
                    10:1f:d3:f0:9e:1a:34:8e:fe:70:ef:f6:2a:50:e3:
                    df:5c:ba:21:16:ad:5b:99:98:da:c6:2b:86:69:db:
                    1f:66:92:d3:7f:63:a4:e9:6f:4d:b0:f3:aa:87:e7:
                    46:25:e8:4d:a0:af:46:4a:20:e2:d3:38:94:0c:38:
                    41:aa:cc:ec:16:63:58:c5:d4:04:65:f6:c7:5d:3e:
                    ca:ae:39:c6:2c:df:6d:92:7f:e8:d8:8e:3c:d7:76:
                    53:c0:a7:a9:2e:ef:2b:23:d6:0d:64:51:98:40:25:
                    53:08:0e:aa:c2:d1:0c:8b:ae:3b:a1:98:ee:40:53:
                    54:5b:41:77:8a:0a:5c:6d:e2:6f:84:53:a3:af:9d:
                    ad:aa:bb:12:51:1c:56:de:20:73:16:a7:2c:e9:66:
                    26:ff:17:7c:73:72:6b:79:c7:d9:53:e0:ab:89:db:
                    8e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:94:C9:F2:F0:CD:E1:1B:4F:21:AE:88:D7:92:85:EA:A4:C5:0D:AC
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ZpTJ8vDN4RtPIa6I15KF6qTFDaw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.85.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6d:b8:b6:8c:0a:32:75:18:27:7b:c4:09:fb:2c:02:62:83:b1:
         81:03:43:e6:73:06:1a:38:32:82:d3:bd:a1:06:9b:6d:d5:e1:
         b5:1d:5a:36:c0:11:a4:5a:7e:03:6e:d4:d9:c7:90:0b:20:4b:
         8e:be:c4:c4:59:a7:5e:75:e4:01:cc:b6:c2:37:0e:5e:10:31:
         1d:47:fb:fa:77:d8:33:f7:8a:07:14:6e:56:f1:a7:c2:dc:bd:
         c0:20:96:e9:67:f5:b4:2b:5e:f7:8f:84:73:b4:15:4c:52:98:
         b1:ae:5b:ff:82:e2:df:33:76:58:3a:18:a9:e3:c6:39:8d:1b:
         a4:61:22:ee:4a:13:62:a4:e7:aa:e9:df:09:85:79:c6:bc:47:
         08:e7:98:e0:3c:17:38:cc:31:a1:73:0c:34:e4:34:47:53:fc:
         e5:83:03:d8:b2:c1:15:dc:2c:4b:eb:c8:ce:55:10:f6:bb:bf:
         af:f6:c6:3d:3c:35:4e:64:7b:46:00:c3:29:0a:ff:d0:bc:76:
         36:c1:ad:9f:f7:f0:66:59:fb:8a:8a:0a:dd:52:01:77:e9:5a:
         f4:fc:8b:97:c8:fd:bc:7e:04:6a:af:b4:b8:0a:c1:45:54:b1:
         13:a4:e8:a5:14:b6:e1:49:99:72:e5:c9:0a:b5:76:f6:cf:e1:
         37:f5:82:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org