Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/vzhzU_z7Jzflsv8kgypq2lYr5a0.roa
File:                     vzhzU_z7Jzflsv8kgypq2lYr5a0.roa (raw, json)
Hash identifier:          J5ir/qMFoNz9aGbJXnEFuvZALAk5z2pWn39VYrNudl8=
Subject key identifier:   BF:38:73:53:FC:FB:27:37:E5:B2:FF:24:83:2A:6A:DA:56:2B:E5:AD
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0469
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/vzhzU_z7Jzflsv8kgypq2lYr5a0.roa
Signing time:             Thu 13 Apr 2023 09:59:45 +0000
ROA not before:           Thu 13 Apr 2023 09:59:45 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        219.124.128.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129 (0x469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:59:45 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=BF387353FCFB2737E5B2FF24832A6ADA562BE5AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:47:21:b4:2e:d0:e4:e2:63:26:d0:0a:da:e4:
                    12:f0:f6:ad:fa:02:ed:2a:8d:2e:87:3c:fb:ee:09:
                    90:fa:dd:51:82:d3:92:e3:48:c4:4e:51:d5:d6:8e:
                    76:c5:aa:ff:2e:66:c1:61:10:90:30:23:20:63:97:
                    35:e0:7b:f4:57:a8:25:14:59:4c:5a:18:cb:d8:ca:
                    da:a6:ac:06:ee:7a:00:cf:59:59:12:10:ef:9d:9c:
                    e9:c9:4f:34:54:ce:37:c4:0f:04:a6:e8:c0:b3:ee:
                    bc:4a:d2:a0:93:98:8c:92:a8:4d:0c:39:9f:0a:5d:
                    3a:70:60:be:5f:a2:1f:74:17:eb:05:f0:26:6e:54:
                    7e:b9:3c:86:ac:bb:d1:21:c1:4c:1a:58:db:fa:83:
                    31:f0:17:be:a8:b4:33:8c:d9:81:23:55:32:23:bd:
                    d3:e1:f7:3e:59:3e:78:3b:f6:a4:06:4c:6f:94:cd:
                    41:7c:09:ae:5a:63:0a:b6:bf:80:7e:78:e7:72:21:
                    a0:17:6c:3b:87:22:06:fd:50:c8:95:a2:fa:6c:ce:
                    22:d6:42:fa:6e:79:d1:45:08:01:19:f5:f3:71:1a:
                    70:e5:35:79:1b:da:e1:97:6c:2a:8c:92:f0:6b:e2:
                    9d:f0:8d:bf:b6:11:fc:83:5e:ee:0b:cd:b1:d2:a2:
                    da:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:38:73:53:FC:FB:27:37:E5:B2:FF:24:83:2A:6A:DA:56:2B:E5:AD
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/vzhzU_z7Jzflsv8kgypq2lYr5a0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.124.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         34:25:de:39:50:e9:0f:d5:05:5e:6f:3d:94:cb:ff:85:65:93:
         55:51:56:0f:92:62:1a:e3:c5:57:19:5e:69:6f:3e:a7:2b:72:
         cf:64:d7:cf:e7:d3:d7:75:14:35:d1:a1:7a:1a:e8:c4:36:a1:
         46:b1:ce:f8:23:f1:7b:8a:d9:aa:22:75:59:01:df:4f:86:2e:
         aa:b7:f3:0c:9c:f6:c2:76:1b:61:c1:85:18:53:de:4c:25:30:
         05:f7:46:23:a3:ae:47:3b:5e:9e:ad:83:a4:3e:a9:a9:c1:18:
         87:57:39:5b:89:38:f2:12:84:02:f1:58:15:1f:7a:17:ec:44:
         e8:d8:46:e0:d8:c9:af:00:c7:0f:4f:46:06:a5:78:b5:ea:fc:
         f7:8e:6b:d1:e3:85:b2:7f:d0:6d:3e:e9:da:f1:22:b4:aa:b0:
         99:d6:32:04:48:82:00:6c:b7:05:ed:65:66:ad:bd:50:ee:14:
         ca:f5:b6:e3:f3:dc:0b:b6:7b:1b:ab:c0:97:41:2a:6d:ba:3f:
         00:1b:d0:bd:ea:79:86:10:01:bb:15:e5:81:56:8c:76:e6:ef:
         5a:e1:3a:68:61:d8:df:81:0f:b7:d6:d7:08:5f:5a:77:34:76:
         d0:ce:65:2e:51:c7:0c:ae:ce:d8:8f:2e:15:38:ff:6c:6c:c8:
         66:e1:7f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org