Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/KOxKAEHBrdOCgHIIVxJ_Ctj8zDg.roa
File:                     KOxKAEHBrdOCgHIIVxJ_Ctj8zDg.roa (raw, json)
Hash identifier:          lbLxJVYZ68cR2x2MOfL19IprXPJxzG1oxfznp1yCZnI=
Subject key identifier:   28:EC:4A:00:41:C1:AD:D3:82:80:72:08:57:12:7F:0A:D8:FC:CC:38
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       75
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/KOxKAEHBrdOCgHIIVxJ_Ctj8zDg.roa
Signing time:             Sun 01 May 2022 01:30:38 +0000
ROA not before:           Sun 01 May 2022 01:30:38 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18126
IP address blocks:        210.173.144.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: May  1 01:30:38 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=28EC4A0041C1ADD38280720857127F0AD8FCCC38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:68:1e:33:ae:f7:eb:e0:02:6b:14:97:f6:52:
                    ec:6c:c6:2e:b6:0c:30:d3:7b:19:92:0f:fb:f9:91:
                    e1:08:da:15:9d:08:aa:1a:af:b4:9a:24:8a:10:eb:
                    16:45:32:92:b4:72:7b:08:cc:47:ca:da:ca:a1:eb:
                    a5:3a:34:92:f7:91:cf:9f:bb:97:06:80:db:e0:51:
                    8b:80:aa:6e:c2:54:af:81:b4:69:92:79:8f:33:d9:
                    e0:0a:bc:56:a8:3b:07:ee:55:2e:b2:83:b8:76:88:
                    cf:86:34:89:c7:6b:df:ab:5a:2c:02:3b:40:b0:40:
                    2b:26:84:88:56:e5:b8:be:70:8c:33:c7:f7:73:9a:
                    1f:1d:5d:fd:d2:e8:39:b6:52:a0:ef:5f:e2:c1:6d:
                    20:57:ed:a5:00:ac:5d:e7:82:bb:b7:ef:3b:10:54:
                    e2:f8:7a:49:6d:7e:32:b1:23:7c:c4:59:6b:14:49:
                    d8:3c:af:49:e8:01:10:1f:d5:65:fb:e0:be:a2:81:
                    46:58:36:a0:37:c2:2b:75:c0:a2:04:59:47:96:04:
                    ff:b8:f7:5a:2d:3b:a5:21:e3:cd:e3:0d:d9:4f:67:
                    78:a6:cb:82:72:f8:4b:a9:09:a8:78:2d:57:f4:f8:
                    3c:3e:05:a4:57:06:99:57:fe:3f:8f:35:ee:28:68:
                    b2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EC:4A:00:41:C1:AD:D3:82:80:72:08:57:12:7F:0A:D8:FC:CC:38
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/KOxKAEHBrdOCgHIIVxJ_Ctj8zDg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:48:3a:c1:aa:3a:d5:bc:ed:6c:c2:cd:66:f5:1f:c0:3c:21:
         28:72:0d:db:b2:f1:57:df:d0:26:6e:eb:df:ff:5f:c2:9f:12:
         68:93:03:33:40:3f:c5:ef:4f:65:94:a7:5a:7c:89:83:3c:8b:
         31:a3:79:c9:65:17:76:71:49:f3:b7:80:1b:ec:04:36:22:ad:
         97:36:18:2c:0b:71:11:14:85:cc:14:54:f3:9b:ff:d5:36:26:
         ef:df:a3:ff:87:92:a2:bc:10:5d:8f:50:e9:10:d2:55:77:08:
         a0:6f:47:bd:66:98:71:5b:73:40:72:d3:be:87:69:55:bc:d0:
         29:b9:9c:26:07:22:f7:11:61:67:9d:a8:aa:14:ef:f3:66:53:
         89:6c:49:fd:b0:94:99:02:ca:9b:99:0e:73:90:03:30:bb:65:
         d4:7e:26:15:1f:5a:72:91:17:b6:88:75:74:2c:ef:66:56:c4:
         11:df:f5:64:e3:d7:fb:04:e6:9e:85:be:1a:47:42:ae:f0:21:
         92:e4:5f:71:9e:a5:e5:20:4c:08:83:a7:19:33:08:34:46:7e:
         21:1c:65:3d:09:3d:1d:f3:9a:20:bc:21:5f:a8:9d:a8:ab:07:
         92:8a:30:09:ea:0d:57:bf:38:6f:69:9f:11:f9:74:85:34:6d:
         f6:61:c8:2d
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBdTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMDFB
OTBFNEU3NEM0MDNBQkU4RTVFMEExRkU4RTQxNTdBQkQyQUU3MB4XDTIyMDUwMTAx
MzAzOFoXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoMjhFQzRBMDA0MUMxQURE
MzgyODA3MjA4NTcxMjdGMEFEOEZDQ0MzODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMFoHjOu9+vgAmsUl/ZS7GzGLrYMMNN7GZIP+/mR4QjaFZ0Iqhqv
tJokihDrFkUykrRyewjMR8rayqHrpTo0kveRz5+7lwaA2+BRi4CqbsJUr4G0aZJ5
jzPZ4Aq8Vqg7B+5VLrKDuHaIz4Y0icdr36taLAI7QLBAKyaEiFbluL5wjDPH93Oa
Hx1d/dLoObZSoO9f4sFtIFftpQCsXeeCu7fvOxBU4vh6SW1+MrEjfMRZaxRJ2Dyv
SegBEB/VZfvgvqKBRlg2oDfCK3XAogRZR5YE/7j3Wi07pSHjzeMN2U9neKbLgnL4
S6kJqHgtV/T4PD4FpFcGmVf+P4817ihosm0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQo7EoAQcGt04KAcghXEn8K2PzMODAfBgNVHSMEGDAWgBQQGpDk50xAOr6OXgof
6OQVer0q5zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTAxNzMvRUJxUTVPZE1RRHEtamw0S0gtamtGWHE5S3VjLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRUJxUTVPZE1RRHEtamw0S0gtamtG
WHE5S3VjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwMTczL0tPeEtBRUhCcmRPQ2dISUlWeEpfQ3RqOHpEZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBATSrZAwDQYJKoZIhvcNAQELBQADggEBADRIOsGqOtW87WzCzWb1H8A8
IShyDduy8Vff0CZu69//X8KfEmiTAzNAP8XvT2WUp1p8iYM8izGjecllF3ZxSfO3
gBvsBDYirZc2GCwLcREUhcwUVPOb/9U2Ju/fo/+HkqK8EF2PUOkQ0lV3CKBvR71m
mHFbc0By076HaVW80Cm5nCYHIvcRYWedqKoU7/NmU4lsSf2wlJkCypuZDnOQAzC7
ZdR+JhUfWnKRF7aIdXQs72ZWxBHf9WTj1/sE5p6FvhpHQq7wIZLkX3GepeUgTAiD
pxkzCDRGfiEcZT0JPR3zmiC8IV+onairB5KKMAnqDVe/OG9pnxH5dIU0bfZhyC0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org