Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/H7z0HbP8CuvANrJTyRgN7smpHcY.roa
File:                     H7z0HbP8CuvANrJTyRgN7smpHcY.roa (raw, json)
Hash identifier:          2WiMm+MwjiFGa18WBe5Yse+NBwJIAN2F2aOpopqAi48=
Subject key identifier:   1F:BC:F4:1D:B3:FC:0A:EB:C0:36:B2:53:C9:18:0D:EE:C9:A9:1D:C6
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       90
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/H7z0HbP8CuvANrJTyRgN7smpHcY.roa
Signing time:             Thu 13 Apr 2023 09:53:28 +0000
ROA not before:           Thu 13 Apr 2023 09:53:28 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18126
IP address blocks:        124.18.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Apr 13 09:53:28 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=1FBCF41DB3FC0AEBC036B253C9180DEEC9A91DC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:74:b4:a6:bd:6c:ec:e8:97:62:19:8a:52:
                    fc:69:19:c4:1a:fb:2b:ae:b6:87:2c:94:0b:5b:ea:
                    a5:8e:4a:ec:b1:a6:02:09:4f:30:8d:17:a3:a2:39:
                    f6:43:64:ad:96:38:ba:3d:29:c0:3e:57:ac:96:90:
                    ce:97:7e:70:bc:d3:35:d6:b3:ed:a9:e2:5c:a8:0f:
                    cf:c2:99:4e:11:7b:63:e3:47:2a:40:de:30:52:b2:
                    d7:2d:40:83:b2:2d:ed:f5:f9:6c:94:5e:42:10:dd:
                    c7:ed:cf:a9:f6:3e:2e:47:65:d1:db:44:e3:ab:0a:
                    af:ab:ae:00:10:6c:ae:da:29:87:31:71:8f:98:64:
                    af:bf:df:f2:db:c9:35:86:e8:38:81:8e:3f:13:d6:
                    cf:22:46:a7:12:cb:0d:79:69:0c:0e:1e:20:6d:59:
                    a6:7a:10:79:d5:51:9d:da:a8:48:2d:eb:ac:f9:31:
                    b6:40:2a:40:89:4c:e6:1b:54:9a:90:54:da:f1:67:
                    f7:f2:43:a1:81:d9:58:de:9e:fe:6f:0b:68:dc:03:
                    03:8c:91:e8:0e:8f:70:f6:8b:80:5e:be:19:2a:00:
                    0b:52:0b:1e:01:e5:cd:bc:3e:1d:78:46:d0:5d:32:
                    9c:ee:f6:1c:c9:17:81:28:51:d4:c2:c1:ce:95:6d:
                    ee:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BC:F4:1D:B3:FC:0A:EB:C0:36:B2:53:C9:18:0D:EE:C9:A9:1D:C6
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/H7z0HbP8CuvANrJTyRgN7smpHcY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.18.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         95:f6:62:4c:50:42:58:71:35:fa:02:d7:d1:c3:f1:1e:59:a2:
         6b:2b:72:84:8f:c8:e1:f5:13:00:63:85:ba:17:cc:a0:da:ad:
         a6:10:9f:1c:bb:1d:07:75:7f:46:01:d4:f0:50:4c:83:2c:a0:
         3e:99:d5:35:97:c4:39:b2:da:28:2b:c4:bf:61:74:f0:25:d4:
         6d:d3:f6:dc:2b:5f:16:b4:a2:04:1a:77:df:ed:1f:de:94:0c:
         2a:7a:13:74:06:b8:97:88:b1:8d:91:f4:e3:23:94:59:06:d8:
         54:58:68:0a:cf:a2:90:13:c3:a3:9e:f3:a5:72:e8:73:60:1c:
         e6:f9:8f:17:8d:e8:83:d8:da:38:43:08:6d:c1:f2:3c:22:6c:
         df:93:ac:24:bb:3f:39:ba:0a:3d:d4:84:2d:fb:3f:da:87:ad:
         47:45:4d:70:26:0b:37:ec:ba:32:97:9a:96:db:ef:9c:61:25:
         bc:c4:12:3e:4c:b2:40:19:c0:0b:42:2c:10:22:d7:aa:2c:e2:
         b9:e6:a5:6d:b8:de:5b:a1:08:3a:4e:ec:33:7c:2d:88:63:78:
         e4:c3:74:7f:af:23:75:b6:84:20:fa:ca:6f:1c:eb:4d:17:2d:
         25:93:e0:33:bc:93:b5:7b:10:7f:1b:f0:5c:88:b4:23:cd:85:
         be:82:ee:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org