Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/lhXNBfilwpq4uMAa_iI49Jeqi4s.roa
File:                     lhXNBfilwpq4uMAa_iI49Jeqi4s.roa (raw, json)
Hash identifier:          4qhnqBXv2ciQnEwuxFYh5q5JXOpFLl+mMWFjCoQhwNc=
Subject key identifier:   96:15:CD:05:F8:A5:C2:9A:B8:B8:C0:1A:FE:22:38:F4:97:AA:8B:8B
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0444
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/lhXNBfilwpq4uMAa_iI49Jeqi4s.roa
Signing time:             Thu 13 Apr 2023 09:55:33 +0000
ROA not before:           Thu 13 Apr 2023 09:55:33 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        112.139.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1092 (0x444)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:55:33 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=9615CD05F8A5C29AB8B8C01AFE2238F497AA8B8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:12:bf:90:91:c8:6a:85:36:9e:26:28:20:
                    f9:95:f6:05:7a:f4:97:cc:47:7e:3d:a4:2d:26:3d:
                    0b:7d:28:a5:9a:d3:5c:f7:9c:7f:20:69:e9:aa:98:
                    a9:56:00:2d:6a:4d:4a:16:16:9b:c7:26:13:07:86:
                    c3:0f:f3:61:35:53:9f:d6:9d:97:dc:2a:55:5c:64:
                    6d:d1:1a:49:b7:c8:2b:68:d2:96:6c:e8:5a:3a:59:
                    a3:f0:53:b7:38:a0:33:97:ed:a8:c3:16:21:75:55:
                    eb:e4:14:e4:01:5f:f0:73:52:de:62:5b:55:6c:5a:
                    65:29:a7:57:fd:fe:25:22:4c:a4:f6:93:3d:50:1f:
                    b8:97:2c:73:76:93:eb:c0:bf:b8:66:49:af:a8:1d:
                    05:8d:6b:f7:32:97:45:c7:55:f3:3b:28:98:61:c7:
                    b8:11:cd:72:52:c6:f1:b9:a0:b9:d7:65:ab:9d:bb:
                    cd:23:67:c3:c3:a6:fd:e4:f3:41:e8:ea:85:ab:a2:
                    7d:65:05:b2:e2:57:b9:b5:c3:ca:0a:b7:98:e2:46:
                    95:2c:95:05:0c:fa:27:f4:12:8d:89:89:2e:17:76:
                    c0:77:b0:cb:75:87:bc:13:82:1d:b9:92:20:fe:1d:
                    ff:7c:f2:75:8e:e8:37:2b:2c:5f:61:c5:1f:12:4d:
                    e1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:15:CD:05:F8:A5:C2:9A:B8:B8:C0:1A:FE:22:38:F4:97:AA:8B:8B
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/lhXNBfilwpq4uMAa_iI49Jeqi4s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.139.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4d:3c:0f:2f:65:b2:79:26:bb:c5:69:89:e7:b0:0f:12:c2:cd:
         b1:80:64:92:99:35:48:55:c1:11:e6:61:2d:da:f8:5e:ec:26:
         2c:46:b7:bb:b4:19:8e:4c:ac:75:c9:9d:b2:a1:6c:8e:e1:b0:
         ac:a7:36:ed:68:c1:7c:a4:b3:28:5b:0d:14:7f:8e:e0:ee:fb:
         27:91:01:c4:09:0d:4d:6f:5f:30:7d:e0:37:0d:68:fb:81:02:
         7e:24:7b:76:c1:f0:af:38:4d:a1:f1:0a:0c:b8:50:3c:c0:0b:
         8b:78:59:29:5b:bb:d4:f8:21:6a:1b:4d:ce:7f:92:d1:06:1c:
         3b:0e:5e:d4:a8:fa:bc:9c:13:15:82:cc:b4:5b:ac:ca:cc:5a:
         1c:95:04:21:56:92:04:13:d4:ad:41:0c:3e:b1:74:ff:61:cc:
         ff:32:50:f9:cf:6b:94:cc:de:2a:82:b1:50:71:0e:a5:20:bf:
         e3:82:af:80:70:36:96:da:c4:c4:5d:cc:71:c1:19:3a:f3:af:
         e0:c0:0a:e1:83:39:d9:83:f2:98:b5:9e:03:92:8b:78:41:e7:
         7c:38:16:7a:aa:f1:1c:12:4e:a6:51:56:8e:dc:c8:4e:64:3d:
         60:7b:d4:ff:6d:b9:ee:7e:19:a0:ad:17:fa:9a:19:f9:2d:7f:
         4c:eb:20:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org