Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/zHItF854VO_t0uP3wIcLPGFFvqQ.roa
File:                     zHItF854VO_t0uP3wIcLPGFFvqQ.roa (raw, json)
Hash identifier:          aSZDc9mbIhJQU+ksZidm/OjIfCe3XWyGN4q1iI5udLg=
Subject key identifier:   CC:72:2D:17:CE:78:54:EF:ED:D2:E3:F7:C0:87:0B:3C:61:45:BE:A4
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0337
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/zHItF854VO_t0uP3wIcLPGFFvqQ.roa
Signing time:             Tue 25 May 2021 02:42:56 +0000
ROA not before:           Tue 25 May 2021 02:42:56 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        59.86.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 823 (0x337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:56 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=CC722D17CE7854EFEDD2E3F7C0870B3C6145BEA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:db:e3:d7:99:82:8c:93:49:99:74:df:e0:e1:
                    6f:da:6a:9f:62:60:62:ac:6d:51:7d:7f:90:8d:9d:
                    09:d9:d7:af:a4:43:ab:b4:08:d7:7a:42:43:31:e1:
                    23:53:9f:15:c9:88:74:4b:84:d3:bf:cc:ce:5c:4a:
                    a8:cb:e6:b8:66:13:fe:5a:99:52:a6:66:ca:cd:89:
                    bb:7e:9f:e9:5e:d3:76:ee:6c:ca:af:e2:85:4b:02:
                    fd:67:73:80:b4:e6:43:23:45:73:86:9b:c8:c5:ef:
                    c1:bd:21:dd:ac:45:03:d6:24:94:13:84:cf:0e:21:
                    b7:79:b1:0d:e9:e6:d6:ac:cd:eb:c4:44:fa:b8:32:
                    60:d8:69:ce:fc:40:41:a4:2d:29:68:b5:a7:65:eb:
                    b7:ca:8d:c2:92:e4:b4:6b:18:d8:62:1b:42:7f:fb:
                    30:24:d6:04:b1:6a:37:42:f9:f2:47:89:10:2a:1e:
                    2c:4d:21:a5:75:e9:2a:fb:de:76:cf:e3:4c:5a:cb:
                    c6:fb:7c:25:0c:5b:07:09:a3:3b:cd:4c:6f:ce:2d:
                    d8:5b:53:89:8c:52:b7:65:f5:c4:ab:59:8c:4a:ce:
                    5d:96:75:73:69:ff:df:77:d1:9e:e5:d9:8b:12:fe:
                    ad:ae:99:f7:c6:c0:2a:ed:da:70:67:24:a1:c8:ca:
                    ad:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:72:2D:17:CE:78:54:EF:ED:D2:E3:F7:C0:87:0B:3C:61:45:BE:A4
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/zHItF854VO_t0uP3wIcLPGFFvqQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.86.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8e:ac:93:49:0d:75:47:36:08:c5:d5:f9:85:6e:3b:6a:5f:32:
         8d:2d:5e:98:d5:8b:f5:9d:9f:5e:48:d4:f4:57:3c:02:04:21:
         94:12:43:c0:5c:11:9c:2f:77:53:8d:41:b0:61:58:9b:2a:3d:
         ce:5a:4c:cb:47:09:27:c3:17:35:2d:bf:bf:cd:9d:4c:e9:65:
         92:87:6c:f9:6b:c5:48:14:c6:42:62:28:cf:93:10:3a:63:a0:
         7e:49:a1:8a:78:36:14:5b:f2:bd:3e:9a:29:d8:65:8e:f7:46:
         42:01:ad:29:a8:b8:e5:45:6a:24:e5:19:7c:7d:a9:80:f2:28:
         b5:1f:74:17:d1:93:04:f9:33:fe:9f:45:ce:97:5f:bd:06:9a:
         e4:d6:35:75:d0:d0:82:65:e7:54:8a:36:af:eb:c8:ca:c2:b8:
         89:c9:d5:76:ce:cc:8f:a1:eb:ef:f6:25:a2:00:35:44:a4:d8:
         8f:7c:52:42:91:20:83:e0:ea:3f:cb:3f:d5:89:98:6a:98:15:
         50:5f:14:29:58:ee:64:ea:79:2b:17:5c:0c:8e:eb:43:c1:6b:
         d1:2d:bc:82:4a:d8:8c:73:d2:e2:6a:f2:d3:99:70:6b:67:ca:
         5a:cb:95:ed:c4:b5:93:e8:a6:9b:fc:7a:5b:92:e5:73:10:3b:
         93:a6:e3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org