Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/i59Ji2N2jc1fDgMH8l2Dk5SLTfk.roa
File:                     i59Ji2N2jc1fDgMH8l2Dk5SLTfk.roa (raw, json)
Hash identifier:          On1WsgcTFOYrHbtHkp04UeQZi8xAFY9cCc25wph6/94=
Subject key identifier:   8B:9F:49:8B:63:76:8D:CD:5F:0E:03:07:F2:5D:83:93:94:8B:4D:F9
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0447
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/i59Ji2N2jc1fDgMH8l2Dk5SLTfk.roa
Signing time:             Thu 13 Apr 2023 09:57:43 +0000
ROA not before:           Thu 13 Apr 2023 09:57:43 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        42.127.192.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1095 (0x447)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:57:43 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=8B9F498B63768DCD5F0E0307F25D8393948B4DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e5:04:9c:51:77:2b:47:5e:db:5f:ce:99:10:
                    f2:bc:bf:88:4b:2a:c3:19:34:2f:ec:e5:0b:13:82:
                    9f:4d:69:d7:88:1a:79:4d:b0:6d:ed:d2:cd:1d:6c:
                    fe:ee:52:73:8d:a8:00:88:96:10:1e:37:5d:e2:ae:
                    a6:f4:85:97:c4:fb:27:fe:1f:d3:6a:db:c9:a6:f0:
                    85:c0:4b:85:1f:20:72:7c:62:22:41:5b:62:04:2b:
                    82:b6:b6:49:61:55:48:82:90:61:c9:36:75:40:54:
                    ee:fe:7b:5f:f0:52:ce:88:37:18:0f:b3:8f:6c:cf:
                    0b:83:4b:35:cb:a8:00:c6:22:d8:9a:72:f0:aa:00:
                    89:7f:b1:28:15:84:7a:85:03:9b:74:38:42:18:21:
                    a5:45:44:fa:40:47:44:73:54:70:6f:a4:58:c4:19:
                    3b:9e:47:1c:8b:1f:ef:5f:37:f7:84:62:0c:cb:78:
                    76:8e:64:23:b8:28:0f:1a:0d:e2:42:de:42:88:01:
                    b2:c7:32:94:5c:b4:71:9c:95:81:b1:13:ca:68:97:
                    d2:56:b5:2e:40:b1:a1:26:49:10:01:1e:30:b1:e6:
                    2d:f8:03:34:ac:06:ad:f0:5f:91:95:76:a6:37:6d:
                    0c:93:3e:b6:4d:d5:79:f4:65:c9:99:8d:f0:2e:39:
                    83:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9F:49:8B:63:76:8D:CD:5F:0E:03:07:F2:5D:83:93:94:8B:4D:F9
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/i59Ji2N2jc1fDgMH8l2Dk5SLTfk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.127.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c6:01:dd:d0:62:04:59:e0:fa:53:cb:45:33:f6:ef:7a:9d:88:
         37:b2:2a:6c:e4:de:17:49:cb:ea:3e:9e:bf:36:94:1d:00:08:
         37:af:cf:70:87:92:e2:e4:35:fa:a4:e1:33:b9:38:1a:47:61:
         3c:dc:3f:a2:8d:e9:35:10:55:c2:ea:bf:bd:98:83:91:c4:3a:
         b3:c1:82:d0:e4:dc:b3:e6:20:b0:30:84:1e:f9:4e:65:77:b3:
         64:c4:94:6c:98:ac:8a:f5:c1:29:7d:b2:7a:17:3e:0c:2a:3c:
         b3:20:db:4a:aa:7e:cc:4e:e4:1f:93:9f:fc:01:b7:81:02:05:
         12:c9:66:d1:2a:b2:14:ea:7d:f8:ec:b2:a5:14:8f:7e:b9:2c:
         91:ef:7a:d6:1e:08:a8:a9:60:28:da:61:95:cc:5e:cb:67:f7:
         f7:08:f2:4d:75:ed:f3:7d:21:86:78:98:9c:73:c6:3f:f6:20:
         9d:ae:cc:d5:da:54:d3:f1:e1:2b:98:db:39:81:d4:7c:04:16:
         d2:7c:82:41:f8:e3:1e:ed:ef:f5:70:46:12:40:bc:ee:f9:28:
         b6:81:96:06:29:bc:f1:f9:44:fa:8a:9a:8d:65:c9:32:93:b9:
         06:cf:3c:a5:64:22:4b:ae:24:10:c8:19:5d:39:4f:ec:50:05:
         cd:49:6f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org