Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/Qln0paNU5-M9uqKyy3wap5rUiOE.roa
File:                     Qln0paNU5-M9uqKyy3wap5rUiOE.roa (raw, json)
Hash identifier:          H267W6uK5Z7sNnUI3cSag05eoAnn9aqRlrY8IVOvPrY=
Subject key identifier:   42:59:F4:A5:A3:54:E7:E3:3D:BA:A2:B2:CB:7C:1A:A7:9A:D4:88:E1
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       5E
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/Qln0paNU5-M9uqKyy3wap5rUiOE.roa
Signing time:             Tue 25 May 2021 02:32:00 +0000
ROA not before:           Tue 25 May 2021 02:32:00 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     18126
IP address blocks:        180.196.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: May 25 02:32:00 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=4259F4A5A354E7E33DBAA2B2CB7C1AA79AD488E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:38:a2:0f:90:b0:67:0c:7a:ac:b5:fa:3e:26:
                    45:67:01:8b:98:8c:25:dc:3c:d9:4f:26:83:ad:0a:
                    a3:83:c5:b3:c7:75:a3:e8:cb:75:19:d5:10:33:bc:
                    2e:93:70:89:cf:2e:70:34:c5:cd:12:43:e7:38:bd:
                    ed:d5:eb:ed:d5:9a:d9:48:d9:6f:43:a9:83:c5:a3:
                    54:6e:25:fe:2b:a1:d7:52:5e:f2:26:54:56:2e:fc:
                    b9:1e:a6:9e:50:6b:7e:b4:f6:ff:50:80:e8:1d:76:
                    9d:4b:93:41:04:2d:0d:de:0f:4e:c2:20:a5:82:b1:
                    28:3a:38:22:26:33:85:18:93:01:1a:c3:38:a0:b8:
                    14:99:af:79:23:dd:b9:01:cc:ca:26:29:6d:46:e6:
                    ec:16:5b:e1:43:fc:cb:38:b3:a2:61:bc:3d:b5:ff:
                    3a:47:85:47:f4:ca:97:93:bd:82:c4:e8:16:8e:45:
                    d8:5e:9d:ca:0a:d3:91:e3:a5:e6:54:50:54:d5:64:
                    05:c1:dd:78:ed:da:30:3d:3e:e0:06:c0:8d:61:5a:
                    9f:ce:cd:da:c8:48:9b:76:06:ef:f1:b4:70:e7:fc:
                    8b:c5:de:3e:5f:2b:5c:e6:c7:da:f6:cb:55:06:13:
                    cc:12:56:41:a1:b5:12:fb:2d:c1:4c:f0:50:5c:de:
                    a6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:59:F4:A5:A3:54:E7:E3:3D:BA:A2:B2:CB:7C:1A:A7:9A:D4:88:E1
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/Qln0paNU5-M9uqKyy3wap5rUiOE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.196.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         b6:da:32:ea:1a:5a:61:9c:ff:ea:e7:45:b1:46:e7:ec:a0:11:
         33:9b:48:db:c8:22:90:8d:e7:ff:c4:0f:ab:2d:8c:a3:b5:be:
         6d:ba:15:fa:2f:d6:a0:07:c4:0a:0a:e7:f2:7f:a6:51:a8:c7:
         58:e0:47:b3:9c:e5:74:2d:5e:11:6b:b0:5f:c0:79:01:4b:88:
         d5:04:35:b6:80:cb:03:8b:d6:e1:82:ff:66:99:97:26:96:5a:
         e5:cf:d2:d8:a6:13:a1:7b:ed:5d:ff:25:91:cb:ae:1f:3d:97:
         b0:08:95:3d:32:73:48:af:af:c4:d1:db:5e:78:c9:f5:07:31:
         cf:89:0d:5c:b9:bc:dc:fd:29:66:af:80:8b:12:d0:ac:a8:1e:
         17:75:89:fa:14:11:be:4d:86:03:2f:69:47:56:71:20:37:f8:
         4f:29:92:e9:7a:32:40:1e:ee:ce:d9:64:e6:d0:5d:8a:52:02:
         e7:b4:4d:f1:fa:23:35:7d:30:4c:ab:d8:f1:04:06:1e:e0:d6:
         06:5e:6f:f8:95:0c:f1:d3:90:e1:47:73:46:bc:91:1d:4d:f4:
         f0:eb:aa:34:80:64:b0:34:ae:5c:8b:da:6d:63:00:8d:83:8d:
         14:8a:39:86:5e:99:3b:7b:4c:e9:70:58:b6:02:72:5c:13:d4:
         d9:4c:6c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org