Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/gQJTRgLFf7dt8exnEyLVt0QzqTI.roa
File:                     gQJTRgLFf7dt8exnEyLVt0QzqTI.roa (raw, json)
Hash identifier:          w6ZVbvHRBuOPkp35fVNOzR4Fe2GLGsEtrS1+Umu9X/w=
Subject key identifier:   81:02:53:46:02:C5:7F:B7:6D:F1:EC:67:13:22:D5:B7:44:33:A9:32
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0440
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/gQJTRgLFf7dt8exnEyLVt0QzqTI.roa
Signing time:             Thu 13 Apr 2023 09:55:31 +0000
ROA not before:           Thu 13 Apr 2023 09:55:31 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        219.96.59.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1088 (0x440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:55:31 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=8102534602C57FB76DF1EC671322D5B74433A932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:1b:c2:30:e4:b8:13:16:0f:27:c5:6a:3e:28:
                    ba:7b:cf:35:4b:e0:97:38:30:b3:7b:8d:b0:b1:8f:
                    00:e9:ba:56:48:39:0a:2a:6a:f7:08:fc:9d:bc:28:
                    c2:46:34:9f:0b:03:1c:5c:33:81:d8:f6:61:81:80:
                    ec:bc:46:60:33:68:d9:5a:a9:4e:c6:9a:23:a5:20:
                    72:a5:62:4d:35:7b:5a:1a:ac:ba:8a:05:5b:52:26:
                    a0:73:86:27:95:6d:06:3f:ad:d9:9d:bc:1f:b9:a2:
                    e0:25:c2:d7:ba:58:5e:a1:c8:e1:65:79:8a:f2:ca:
                    0e:12:bc:e5:4b:54:bc:67:89:b7:18:f2:ed:62:15:
                    c5:2a:87:06:1e:bf:bc:aa:f0:42:68:49:6c:04:2c:
                    ef:aa:d6:28:82:53:df:3a:a5:2f:12:3e:71:7d:19:
                    6c:c1:d9:e3:45:bb:6d:63:78:fb:1a:95:5d:cd:d4:
                    b1:4d:b2:9d:98:ad:53:67:be:c8:db:88:f2:c6:77:
                    dc:85:57:52:e3:1c:ca:c8:12:88:27:3c:f3:45:a8:
                    c6:ad:62:3c:57:c9:f3:a4:49:54:c2:eb:d5:1d:69:
                    1b:44:8a:a0:c0:48:ab:2d:2f:13:af:54:d5:97:0a:
                    24:a4:ff:38:ad:05:f2:d7:90:b7:1f:fe:d2:37:fe:
                    6b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:02:53:46:02:C5:7F:B7:6D:F1:EC:67:13:22:D5:B7:44:33:A9:32
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/gQJTRgLFf7dt8exnEyLVt0QzqTI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:d1:ea:c1:de:2e:25:e1:05:ca:3b:54:8b:cf:2b:3a:6c:85:
         7b:33:f4:14:3c:8d:04:59:17:51:17:5d:9c:13:bb:8c:a8:3b:
         d9:b5:55:2e:5e:b4:03:06:7e:71:17:f5:96:81:7d:de:cc:cf:
         8f:7d:0a:65:1a:13:cd:be:3e:ee:23:ff:46:45:82:76:13:a2:
         fc:83:55:77:84:22:57:28:1c:42:70:df:1b:73:1c:3b:18:a2:
         3b:30:c4:36:21:ae:b0:e3:2b:d9:e7:35:ef:2d:21:5c:01:c8:
         d9:f4:27:95:5c:c1:50:25:22:4d:cb:97:35:ed:a8:0d:6b:17:
         24:b8:09:5e:02:f0:55:f0:ec:ef:92:3b:f4:9c:70:93:a5:61:
         c5:d9:fc:70:6d:1f:62:31:2e:73:4a:f9:88:db:e0:e0:3b:2e:
         06:44:21:55:a9:0f:7d:66:17:f5:b1:96:0a:bc:a4:c0:ba:a0:
         c8:6f:d1:c7:01:e7:0c:1a:d9:6e:16:95:7c:38:66:9b:a2:4b:
         db:3d:8b:42:bb:0a:30:2d:7d:e0:79:03:b1:b2:b5:fc:e7:a1:
         72:9e:ec:ac:23:9f:b8:61:59:af:92:64:ec:db:cb:8c:25:0a:
         fb:79:07:66:09:9f:ab:71:1c:26:65:d4:59:16:fe:04:bc:69:
         88:99:f3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org