Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/ltyZxbfb6-OBLyDhxAyjLT4FyM8.roa
File:                     ltyZxbfb6-OBLyDhxAyjLT4FyM8.roa (raw, json)
Hash identifier:          LZcwiFoom6YtMc+CLXIzygC1771RlxgPzScSnZepd2U=
Subject key identifier:   96:DC:99:C5:B7:DB:EB:E3:81:2F:20:E1:C4:0C:A3:2D:3E:05:C8:CF
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       045D
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ltyZxbfb6-OBLyDhxAyjLT4FyM8.roa
Signing time:             Thu 13 Apr 2023 09:57:54 +0000
ROA not before:           Thu 13 Apr 2023 09:57:54 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        203.95.48.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1117 (0x45d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:57:54 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=96DC99C5B7DBEBE3812F20E1C40CA32D3E05C8CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:17:50:ad:5d:df:c3:ee:19:da:c3:12:54:43:
                    32:64:07:97:a9:b5:37:b1:20:f2:a3:9f:f5:6a:0c:
                    96:4e:04:59:3a:b6:74:98:37:78:ea:0e:bd:e8:39:
                    9e:3a:ed:e7:45:54:7d:5f:a9:fc:16:be:5d:87:65:
                    e5:e2:6f:b1:1f:bb:87:de:f4:e7:4d:10:f2:50:17:
                    88:06:5b:aa:8d:54:80:b6:2f:c6:0e:55:78:9b:23:
                    96:f1:44:27:22:2f:25:86:60:23:af:fe:5e:a3:d8:
                    a9:c8:eb:e2:7d:b1:9e:f5:f2:a8:0c:e9:f7:da:77:
                    ed:b9:7c:f6:f2:b5:fe:70:b8:32:85:29:8f:ad:84:
                    1d:ea:9a:35:8b:8c:7e:f7:11:25:9f:2d:09:13:c1:
                    fa:2f:49:54:3b:26:98:b0:be:bb:3d:4d:1a:5e:54:
                    da:bd:40:7d:55:a8:90:cb:e6:3e:7f:21:29:37:45:
                    84:e0:c6:9d:e2:ce:08:68:62:5f:eb:94:dc:bb:99:
                    27:de:26:ae:bc:68:38:5b:ba:00:1c:99:0b:2a:d7:
                    e6:bd:7e:48:d4:89:9a:af:df:53:6d:35:63:c8:98:
                    3d:8c:a3:56:d9:ae:5e:62:d6:f7:64:b7:bd:b9:6e:
                    62:a4:27:99:c4:f1:9f:88:a2:57:40:be:24:9e:a5:
                    05:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DC:99:C5:B7:DB:EB:E3:81:2F:20:E1:C4:0C:A3:2D:3E:05:C8:CF
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ltyZxbfb6-OBLyDhxAyjLT4FyM8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.95.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:81:bb:6e:49:94:0e:5d:e9:a2:2d:76:44:8c:d7:e5:d2:8a:
         54:c5:b5:3a:e5:c1:35:9c:2c:95:1c:1b:b6:fe:ce:78:a2:91:
         60:49:37:d3:37:09:2d:cd:8a:b2:5a:4b:17:d4:94:2a:5a:ae:
         ad:b9:94:16:49:cc:88:b6:cd:49:df:fd:89:cf:58:1a:40:96:
         5c:68:e3:e6:0d:9a:98:f7:f1:30:d3:ad:a0:54:05:52:e7:79:
         a7:1b:85:f0:f2:50:07:87:d5:c9:2a:21:f6:f8:a5:8f:ed:93:
         32:c7:20:6b:3a:0a:84:12:a3:df:77:95:9e:6c:ec:46:ac:94:
         39:6e:e8:26:63:78:6a:78:12:91:74:f2:6a:b1:e7:0d:ca:25:
         31:7c:be:43:b4:a4:ca:0a:10:81:3b:71:6b:f5:0b:b7:10:27:
         98:0b:22:e0:6a:80:e6:c7:f2:35:3d:ba:7f:cb:ed:56:7d:e2:
         66:71:d9:8f:a3:01:d6:ae:eb:df:78:41:af:39:f8:9e:c8:92:
         42:87:ba:42:37:28:20:ad:b5:b6:e5:de:a1:06:81:02:57:b1:
         e9:cd:7d:64:28:88:57:60:73:76:a4:b3:ed:95:78:d7:c4:7b:
         a0:80:df:98:d9:1c:46:78:63:03:65:ef:9d:f1:10:3e:47:a9:
         2d:29:0d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org