Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/lnZ0TDMsjOxzA_XWYZwRCYt4CTc.roa
File:                     lnZ0TDMsjOxzA_XWYZwRCYt4CTc.roa (raw, json)
Hash identifier:          15dsqCsaqq1zmu8x8QE1BLJQ9H/qA8EISprvpQ1cE18=
Subject key identifier:   96:76:74:4C:33:2C:8C:EC:73:03:F5:D6:61:9C:11:09:8B:78:09:37
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0434
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/lnZ0TDMsjOxzA_XWYZwRCYt4CTc.roa
Signing time:             Thu 13 Apr 2023 09:55:25 +0000
ROA not before:           Thu 13 Apr 2023 09:55:25 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        42.124.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1076 (0x434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:55:25 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=9676744C332C8CEC7303F5D6619C11098B780937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:63:ca:7b:3a:c9:a4:2e:25:c5:c5:c6:18:6e:
                    72:77:3e:01:59:4e:f4:fe:cb:08:de:4d:c6:55:f7:
                    fd:b0:d4:3f:24:c0:74:8f:2c:5a:84:5c:04:8c:a6:
                    a4:dd:b7:f6:58:bb:fe:1d:5a:4c:ec:7f:68:3c:9a:
                    5a:8a:6d:67:b8:7d:0a:24:0d:1c:c1:af:6e:d4:f7:
                    c1:e6:3d:d6:f5:99:12:4b:31:16:0b:77:26:ee:3b:
                    11:11:04:61:d1:22:60:4e:7a:21:46:44:5e:65:05:
                    0f:16:07:86:3a:85:93:fe:07:85:43:aa:8c:55:19:
                    02:33:0b:dd:03:03:07:d4:f1:e7:33:85:c8:3f:36:
                    8c:06:b9:62:91:26:cd:57:2a:34:49:4a:0f:cf:cc:
                    16:ce:af:44:04:4b:73:8a:ee:4c:95:4b:54:26:42:
                    c0:66:a0:79:cd:5a:99:68:9c:65:ba:c5:e5:1f:40:
                    8a:5a:8a:2c:b7:9d:e2:ba:0e:14:49:34:87:a1:af:
                    56:6e:89:a4:ed:95:0e:1f:0c:a3:56:b7:0c:65:83:
                    e1:25:4f:f5:e3:18:49:4e:bf:c3:d1:22:a4:5b:84:
                    96:8a:1d:6a:b0:9a:a2:65:3e:b5:0e:ab:5a:27:96:
                    32:77:36:62:75:14:f8:06:e8:78:de:0f:58:f3:2b:
                    65:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:76:74:4C:33:2C:8C:EC:73:03:F5:D6:61:9C:11:09:8B:78:09:37
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/lnZ0TDMsjOxzA_XWYZwRCYt4CTc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.124.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7f:2f:4d:1b:96:3e:ea:f5:31:6e:ea:04:17:f3:57:73:7f:a5:
         79:f8:c8:95:ef:36:0e:c4:cb:14:c1:47:84:80:c6:21:43:8e:
         de:71:96:34:8f:99:34:a2:df:c9:b2:3b:4f:ae:82:b2:61:21:
         c6:7b:d3:30:da:6d:2b:e1:5c:0b:6d:f6:b6:bf:05:9d:1f:97:
         58:b8:17:cd:91:da:9e:cf:21:80:b6:ec:2e:f0:de:73:5c:6b:
         3f:35:64:ee:6f:5a:0f:7f:51:e9:12:64:bc:63:7c:3c:ca:c2:
         eb:7d:5b:ca:31:ae:bf:1a:d3:97:b5:8f:dc:d3:0e:f3:be:7e:
         46:ee:df:91:de:83:b3:21:e4:55:7d:23:c8:62:86:26:6a:2f:
         26:dd:79:cd:d3:e0:a4:df:c2:fa:d5:94:cb:6a:73:0d:33:8d:
         3a:af:e0:24:dd:02:23:b1:17:11:a7:86:3b:23:fb:97:e2:78:
         4a:fa:ab:3f:2a:53:be:18:0e:26:42:fe:27:25:8b:8f:26:72:
         6e:6c:a2:9d:e7:be:67:1a:3a:c4:66:37:04:ac:14:47:e1:b8:
         8f:d1:cc:e1:fc:bc:34:4f:1b:87:cd:49:71:a7:05:67:90:64:
         2f:57:07:16:3a:4f:1d:ee:f9:ad:ca:3b:5d:c5:9f:6a:c3:2d:
         c8:12:1a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org