Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/pQ489SMavPURlNKBjYyGLgYWAa4.roa
File:                     pQ489SMavPURlNKBjYyGLgYWAa4.roa (raw, json)
Hash identifier:          HsLTBR3A2OYFl3kSIe2+I2Qx2OXaH4SklJtd4qUGnzA=
Subject key identifier:   A5:0E:3C:F5:23:1A:BC:F5:11:94:D2:81:8D:8C:86:2E:06:16:01:AE
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03C9
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/pQ489SMavPURlNKBjYyGLgYWAa4.roa
Signing time:             Sun 01 May 2022 01:32:57 +0000
ROA not before:           Sun 01 May 2022 01:32:57 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        59.86.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 969 (0x3c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:57 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=A50E3CF5231ABCF51194D2818D8C862E061601AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a0:4b:08:18:45:43:b6:23:94:e1:b2:d0:82:
                    c5:f9:7a:48:09:6b:58:af:63:87:22:39:49:5e:31:
                    bf:25:f9:9e:ef:0b:0b:05:31:eb:59:bc:79:dc:17:
                    ee:31:d2:5e:9c:71:76:1f:98:13:e0:7d:63:1b:36:
                    eb:94:25:25:0d:fc:29:72:63:d7:22:3b:7f:cd:f1:
                    45:ef:f5:f6:4d:c5:b8:1c:39:8c:4d:a3:b8:52:e9:
                    a5:32:ce:b5:61:fc:8c:7c:d5:3b:18:12:93:6a:c7:
                    8f:60:2f:a9:bb:83:71:86:4a:29:4e:e2:3a:d0:e3:
                    18:2d:08:0e:79:23:27:50:99:df:82:0a:b5:c0:41:
                    fb:b7:26:08:8d:01:44:51:9a:bb:f8:47:9e:ea:76:
                    1a:50:81:42:be:44:0b:1f:f7:df:d7:e2:a8:d4:db:
                    93:ff:9d:5f:46:d5:84:9d:94:0a:9a:2b:d9:18:8d:
                    71:35:5c:ae:46:55:33:0e:f0:2f:af:26:90:0e:57:
                    d0:95:3e:62:7b:74:5a:51:31:b7:04:cb:2a:79:ad:
                    bc:76:65:d7:77:34:f8:f2:d7:c8:80:a2:25:c2:de:
                    dd:29:39:f3:ce:24:41:78:5d:7c:be:2e:a9:11:51:
                    16:42:ff:d2:4f:7a:0a:f3:f9:23:bd:f8:18:e1:41:
                    d1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0E:3C:F5:23:1A:BC:F5:11:94:D2:81:8D:8C:86:2E:06:16:01:AE
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/pQ489SMavPURlNKBjYyGLgYWAa4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.86.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6c:cd:d6:31:f4:e6:14:20:38:ad:32:b1:f8:96:f8:4a:16:12:
         2c:e5:d3:0d:f6:5c:9c:d3:f6:7c:22:a1:83:2b:e0:0d:3c:87:
         50:6a:aa:c5:55:10:23:07:57:4c:c5:2c:91:a9:f1:bd:39:ae:
         ff:86:87:64:5d:54:eb:13:19:43:bf:00:96:71:69:b1:b4:e1:
         4e:99:3a:7f:b9:37:9f:25:1f:ef:9e:a8:55:61:35:40:f3:d9:
         79:99:8b:78:2e:36:1f:fa:de:bd:a9:ad:3b:72:ea:48:cb:4a:
         11:22:08:cd:5a:40:a3:4b:0e:dd:0d:94:6f:0a:34:4a:7d:c9:
         0b:70:fd:ef:84:7f:c2:a4:c9:98:43:7e:3a:ec:32:93:2f:cd:
         90:9f:07:3c:5a:87:0d:57:2e:3e:82:28:40:7a:c8:f7:41:34:
         a6:c1:18:63:73:dd:ff:c4:9e:df:7f:43:c2:f9:39:b5:d4:51:
         2c:11:e6:33:cd:b4:59:58:62:f1:c4:1a:ff:3c:31:66:c4:24:
         d4:0e:81:dc:55:c5:98:07:30:62:8e:23:e9:4c:4c:99:6c:a6:
         51:37:cb:59:e8:09:d1:68:ef:25:ce:41:de:b3:f1:32:2a:38:
         cf:b7:24:8f:bf:64:6c:89:fc:ed:83:08:a1:71:c2:dc:00:f6:
         3a:f6:8f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:16 2023 by rpki-client on console-ams.rpki-client.org