Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/lqsKiPhC7psrjOI4OowxYQHQYNc.roa
File:                     lqsKiPhC7psrjOI4OowxYQHQYNc.roa (raw, json)
Hash identifier:          6LwW+xo0xhxfVVAreZYZ+noyQnFfLozYaIG5Z9hlGsM=
Subject key identifier:   96:AB:0A:88:F8:42:EE:9B:2B:8C:E2:38:3A:8C:31:61:01:D0:60:D7
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03AD
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/lqsKiPhC7psrjOI4OowxYQHQYNc.roa
Signing time:             Sun 01 May 2022 01:32:05 +0000
ROA not before:           Sun 01 May 2022 01:32:05 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        218.219.56.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 941 (0x3ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:05 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=96AB0A88F842EE9B2B8CE2383A8C316101D060D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b7:36:77:00:ef:c9:1f:c9:15:38:31:21:af:
                    92:9b:ff:c4:af:4c:79:a5:0b:d9:a2:f2:de:3d:fd:
                    76:e3:94:97:6c:ab:20:11:9d:ed:55:43:96:e4:c9:
                    cf:a8:27:e2:4e:63:7c:73:1a:37:fa:b2:58:9b:c2:
                    34:2e:89:43:e4:3a:12:e5:46:99:97:04:f4:c1:69:
                    2f:3e:d5:bb:29:c4:83:84:c8:b7:35:48:7a:af:e1:
                    58:06:55:8e:c6:c7:6b:65:d6:ea:58:5a:2a:fc:67:
                    4e:50:34:d5:50:56:e1:37:33:e6:48:50:b4:48:ae:
                    b2:b0:5e:6b:f9:8e:89:ea:6b:47:f4:9d:17:ae:de:
                    7b:23:33:f0:91:ba:e5:55:06:eb:61:7d:7f:03:51:
                    eb:74:59:b1:16:3c:6a:5a:09:15:24:1f:ad:e7:88:
                    3b:3f:09:e6:36:9a:b0:ea:2b:b9:ea:d5:37:60:d2:
                    11:5d:3c:8f:20:c1:46:a7:04:7b:24:40:80:07:2b:
                    ea:22:19:44:07:1c:d4:cc:4f:d9:38:ea:dd:25:c0:
                    9d:3c:70:9d:1b:26:b1:35:00:8f:5a:50:01:e9:67:
                    7b:46:d1:da:da:76:18:8b:a2:e1:81:fe:22:62:21:
                    81:78:17:53:14:e3:79:38:e6:f4:00:57:ec:fd:f1:
                    fb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AB:0A:88:F8:42:EE:9B:2B:8C:E2:38:3A:8C:31:61:01:D0:60:D7
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/lqsKiPhC7psrjOI4OowxYQHQYNc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:4d:c9:ce:dc:6e:cf:44:26:8f:a4:d7:68:d7:90:c9:93:99:
         09:29:65:bd:19:5a:ac:2d:ea:e2:55:e6:62:1b:c7:ad:ff:c7:
         7e:66:c9:4f:db:62:1f:44:fd:60:f9:fa:80:e3:20:35:81:99:
         d0:78:31:63:85:f5:a4:51:c8:82:24:0d:e9:39:2d:d3:93:26:
         a8:09:e1:c0:be:57:72:fa:ea:4f:13:3b:0a:f6:15:27:26:cc:
         2e:aa:85:37:50:23:93:51:c0:d3:1e:d4:2d:68:fa:10:63:8d:
         34:f7:d1:e7:0a:76:fe:a0:a2:46:42:83:da:13:ac:d5:37:82:
         1d:18:19:2f:27:31:e7:f7:3b:db:d6:51:b6:59:53:6c:8a:17:
         3a:89:fc:8e:54:26:05:ec:9a:11:e9:fe:7e:cf:73:55:8d:34:
         a8:7a:76:b4:cc:4d:08:95:6c:b8:39:40:d1:58:56:17:dd:9f:
         ea:6c:cd:e8:7f:15:63:d6:3c:fb:0b:99:ea:0c:8a:85:d8:fb:
         e0:b7:15:11:16:24:49:ce:5a:b4:26:b4:52:96:a1:e4:67:85:
         a2:2c:f1:71:53:7b:f2:26:ed:66:e9:a8:8c:97:30:31:50:93:
         b2:e3:e5:ad:dd:66:6a:70:30:75:8e:71:66:26:b5:11:10:7d:
         a7:10:4e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org