Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/HGW5pOCRE2QCGBAfF9fFF9vJgMs.roa
File:                     HGW5pOCRE2QCGBAfF9fFF9vJgMs.roa (raw, json)
Hash identifier:          ufXlYRVIYb9j/d+i7WSTuQ9sZePVCYuJ2nnVd7sd9bE=
Subject key identifier:   1C:65:B9:A4:E0:91:13:64:02:18:10:1F:17:D7:C5:17:DB:C9:80:CB
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       76
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/HGW5pOCRE2QCGBAfF9fFF9vJgMs.roa
Signing time:             Sun 01 May 2022 01:30:39 +0000
ROA not before:           Sun 01 May 2022 01:30:39 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18126
IP address blocks:        115.36.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: May  1 01:30:39 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=1C65B9A4E09113640218101F17D7C517DBC980CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3d:46:9c:7a:01:41:44:1b:7a:c4:22:5b:be:
                    81:79:69:c6:41:82:07:ef:51:41:50:8f:26:53:f5:
                    66:70:b9:5e:16:a3:36:d3:9f:1a:ab:f1:92:0d:36:
                    ff:dc:13:03:7a:00:28:ac:29:a2:ec:d4:75:5e:d0:
                    fd:43:a2:f6:b0:dc:6b:2d:a7:e7:d7:da:2e:11:e5:
                    c4:39:01:dc:b3:26:5e:ad:6a:13:fc:38:ff:92:74:
                    5d:e8:ec:97:27:f9:13:4f:d9:87:90:49:d4:63:65:
                    65:81:d1:ed:14:57:dc:98:d7:f2:e7:ad:3d:9d:b1:
                    87:0c:be:87:f9:f3:94:d0:27:77:04:b5:7e:28:14:
                    ae:e7:e2:59:20:02:f4:7d:4d:07:79:e1:43:4e:06:
                    b2:f8:f2:4a:89:10:34:31:0a:4d:66:b8:44:94:5a:
                    3b:c1:c6:f8:72:7a:52:2b:df:ad:c9:42:8d:b4:f2:
                    58:33:05:7c:bd:25:e9:87:80:ba:3d:b1:3f:58:b7:
                    c4:2f:c0:be:ca:f4:e6:0d:64:8c:0e:f8:6d:16:73:
                    ca:e0:7f:4e:e8:ff:4d:5a:a2:d3:b2:af:73:0f:a9:
                    64:ba:12:51:76:a6:6f:77:f7:5c:92:e8:c6:68:c8:
                    35:56:73:db:fc:27:f9:e6:fe:c7:8b:7d:ba:67:08:
                    7e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:65:B9:A4:E0:91:13:64:02:18:10:1F:17:D7:C5:17:DB:C9:80:CB
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/HGW5pOCRE2QCGBAfF9fFF9vJgMs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.36.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         5a:a7:fc:43:0d:a5:f6:43:1e:f8:b0:fd:b8:e7:fd:00:76:c6:
         cf:11:61:ee:b5:0c:36:81:d6:2d:e4:65:c5:a7:49:90:87:a1:
         e4:66:05:bb:c0:76:15:d3:1a:2a:bd:da:49:57:5c:ef:08:e0:
         28:f8:8a:ce:59:01:e2:28:e5:7f:3f:a4:ef:a2:50:df:0c:2c:
         34:5f:d2:bf:41:e1:68:42:85:12:22:96:b8:c9:18:3f:db:7b:
         d8:cb:e8:12:97:dc:2a:65:a3:2f:0f:17:62:f5:76:b2:25:7d:
         d0:8a:48:30:21:2f:14:57:f6:b8:be:2a:f2:77:b6:78:50:cd:
         14:c8:67:5a:39:1e:d2:78:e2:b6:0f:91:f1:f7:53:ea:6f:f1:
         38:8c:ab:77:6b:ae:98:81:f1:e8:da:4f:3b:3b:80:a3:cd:ee:
         4d:e1:6d:b3:fe:af:1c:7d:ba:39:aa:b3:cf:e2:c4:47:a4:8e:
         6a:1f:13:2b:48:28:a8:25:99:06:22:b7:59:d2:62:b5:f0:a2:
         70:6e:d2:7b:24:59:af:44:f0:c3:22:a9:a8:55:53:78:26:17:
         e1:2a:1c:a2:30:38:d9:a1:19:31:2e:58:0c:5b:14:28:8d:b9:
         02:17:33:17:8a:0f:34:1e:62:46:b0:95:11:8a:e1:94:ec:dd:
         a9:ba:8a:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org