Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/9yv8-NiFbNXKvDNpGTBWlx4lVso.roa
File:                     9yv8-NiFbNXKvDNpGTBWlx4lVso.roa (raw, json)
Hash identifier:          1ad8LK8LAA+7QY74PizeuvBW3ctL48/bbFOJiQu+7T0=
Subject key identifier:   F7:2B:FC:F8:D8:85:6C:D5:CA:BC:33:69:19:30:56:97:1E:25:56:CA
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       5D
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/9yv8-NiFbNXKvDNpGTBWlx4lVso.roa
Signing time:             Tue 25 May 2021 02:31:59 +0000
ROA not before:           Tue 25 May 2021 02:31:59 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     18126
IP address blocks:        124.18.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: May 25 02:31:59 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=F72BFCF8D8856CD5CABC3369193056971E2556CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4f:78:69:d2:6c:60:21:c1:3e:72:bc:33:a2:
                    8c:80:d5:ad:ae:47:a7:75:7e:61:71:7c:d9:d4:fb:
                    b2:e1:ae:3a:03:ae:3c:61:f8:94:b1:4b:a4:9d:97:
                    1b:98:9a:ea:79:1c:80:2f:21:ac:f0:d4:dc:72:54:
                    49:2b:4b:8e:73:45:c8:8b:9c:a4:fa:3f:b1:d2:15:
                    3a:24:67:2a:5c:a2:7e:c4:52:fa:83:8c:46:f2:b6:
                    12:ae:45:a8:f4:09:e3:0f:f8:60:83:b4:ae:4d:dd:
                    76:03:32:dd:bd:3c:66:d3:4f:8c:cf:26:0e:5b:c3:
                    45:54:ef:5c:6d:1d:1f:c1:e1:27:ca:4d:1b:12:7e:
                    15:07:28:03:5c:44:6f:02:49:02:b9:ca:63:08:c1:
                    d8:8f:8d:41:f4:47:f5:d1:a1:3a:57:49:27:89:f8:
                    d3:ba:f0:12:f3:34:9c:44:ac:5b:2d:87:0d:c3:e3:
                    67:51:ca:4f:f7:9d:b3:50:3e:15:d5:89:b3:16:e9:
                    02:c3:38:4c:f5:3e:a8:2b:98:e8:21:c6:71:c5:7a:
                    e0:26:a1:a5:b2:7a:4c:72:e8:19:0a:97:ef:67:b9:
                    6d:03:10:37:3b:7f:b2:34:a0:48:a7:37:74:62:f2:
                    ee:cd:c7:89:9c:cc:c3:28:d2:ab:57:42:10:98:b7:
                    c0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2B:FC:F8:D8:85:6C:D5:CA:BC:33:69:19:30:56:97:1E:25:56:CA
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/9yv8-NiFbNXKvDNpGTBWlx4lVso.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.18.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         43:d7:81:e4:0b:82:36:78:d0:9e:57:61:f4:0d:84:1d:23:2b:
         ac:93:1d:25:2c:3d:df:5a:f5:6a:d9:6f:e2:b1:ba:42:6a:22:
         ce:d8:11:cb:c8:6f:02:4b:a9:b7:d6:28:88:c7:e5:74:f9:f1:
         98:03:3b:84:f2:05:a9:04:79:e3:93:4c:67:9c:d7:d4:ca:6c:
         03:6d:e4:3c:c9:6a:63:49:f8:61:76:7c:95:03:5a:a5:b9:b0:
         0d:08:2a:92:47:a3:99:b8:72:3c:6e:32:1c:62:11:78:d5:e7:
         28:41:24:68:d6:ca:5a:0b:47:ad:6a:f9:9a:e0:11:9d:54:5a:
         c8:30:39:64:ff:3a:bf:26:d5:7b:cf:8e:a7:23:57:92:65:f4:
         53:45:c5:c6:ef:13:c9:6b:bc:c7:9b:73:f5:21:e5:fe:49:cd:
         5a:01:96:ef:33:10:d4:6b:6a:14:1e:28:39:a1:64:49:d9:18:
         ea:24:ce:b1:a8:50:78:67:2d:3f:a1:be:dd:28:81:fd:32:9b:
         2f:f3:7f:ef:c5:ad:7f:f9:7f:be:b2:03:9b:cb:67:7e:dc:e4:
         ed:b1:62:bb:2c:54:1e:81:ee:f9:74:54:c7:e0:59:43:3c:47:
         13:53:96:b0:98:08:3f:65:11:6f:7a:1a:d4:91:fa:fb:20:d3:
         b2:4c:2a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org