Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/zaTivomx7tCDYP-gcydAcQ8FeqA.roa
File:                     zaTivomx7tCDYP-gcydAcQ8FeqA.roa (raw, json)
Hash identifier:          2o4H/ZcKxEUpLYcb3LGlbIfZBB95us4mXjKQwn6LAGw=
Subject key identifier:   CD:A4:E2:BE:89:B1:EE:D0:83:60:FF:A0:73:27:40:71:0F:05:7A:A0
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       044B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/zaTivomx7tCDYP-gcydAcQ8FeqA.roa
Signing time:             Thu 13 Apr 2023 09:57:45 +0000
ROA not before:           Thu 13 Apr 2023 09:57:45 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        119.83.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1099 (0x44b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:57:45 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=CDA4E2BE89B1EED08360FFA0732740710F057AA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3a:a5:22:d2:82:88:c3:05:1d:8f:36:fc:17:
                    97:d5:46:2f:7f:94:af:a6:1f:dc:95:10:38:a4:e1:
                    ce:a7:8c:3d:7f:38:aa:6d:0c:a1:64:3f:c4:83:de:
                    63:4e:77:08:84:eb:62:be:57:d6:43:7b:e7:ce:ec:
                    8e:17:c1:40:bd:97:22:0a:ba:6f:60:d4:10:51:bf:
                    70:ef:72:aa:cd:ac:49:bc:17:69:d0:d8:f3:47:19:
                    51:c3:5f:7b:62:6e:34:91:6b:0c:45:15:c1:40:87:
                    c5:4c:ca:f8:14:37:fb:0a:1a:2e:af:f6:3d:73:c8:
                    27:56:d9:30:36:37:10:4e:0b:b9:6e:1a:4f:89:3f:
                    ac:ec:c3:2c:0e:37:2d:90:4f:d7:47:1a:e4:34:95:
                    17:41:e1:e8:81:b4:ef:5d:28:00:07:66:9e:9d:d3:
                    6d:c9:90:00:c1:a0:98:9e:e1:a1:6c:f3:af:f1:c2:
                    2c:ee:fb:27:9a:49:22:a0:82:28:4b:6d:80:57:72:
                    3d:48:4d:22:0c:f9:25:61:17:bb:f4:b2:b6:1e:93:
                    53:f7:f1:40:73:1f:6b:6c:f8:b0:e5:2b:70:b5:40:
                    c4:ad:91:8b:48:56:a1:61:cf:a6:d0:39:0d:c0:61:
                    6c:41:e4:6b:c9:b1:db:f7:81:ef:83:2e:60:94:80:
                    51:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A4:E2:BE:89:B1:EE:D0:83:60:FF:A0:73:27:40:71:0F:05:7A:A0
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/zaTivomx7tCDYP-gcydAcQ8FeqA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.83.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         33:50:50:31:bf:9b:f0:9d:5a:cb:67:79:4e:41:80:c3:d4:23:
         c2:06:2d:3d:da:0b:52:29:7a:21:c7:01:f2:75:56:30:15:3f:
         31:29:1f:a2:ab:cc:8f:d0:5d:9b:d0:b1:c4:ad:83:30:a0:57:
         07:a5:d2:9e:26:d3:a5:44:60:d0:bc:d7:7a:37:28:00:1a:52:
         42:3c:d9:dc:71:7d:e3:a7:31:c3:34:f5:c4:a3:74:35:1f:ee:
         ed:f4:49:38:2b:03:99:1f:7b:e4:ef:30:69:ce:8a:5a:8f:ef:
         7a:5c:e8:42:f0:53:a6:ac:38:c6:85:c3:24:df:3e:aa:a4:7c:
         1f:ad:6a:9c:bc:33:89:09:70:78:95:f3:30:93:7b:7b:8e:97:
         dc:34:0d:df:03:a8:12:14:7e:d4:24:b0:0f:18:ba:ee:d4:ae:
         a2:ac:74:46:de:bc:1b:98:b7:76:24:78:d5:10:4e:e7:c9:00:
         e6:97:b0:6c:9d:d6:24:85:e7:e8:09:4c:fa:e7:f2:d0:ee:37:
         61:21:81:24:d6:fe:e7:99:2d:4e:2f:85:02:4b:ff:c0:cc:a0:
         1a:83:fe:d7:d0:dd:48:90:95:ec:f3:81:35:2d:30:af:86:3f:
         1f:99:09:1c:57:45:d1:9e:19:de:b7:89:01:24:e1:69:df:2c:
         27:00:21:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org