Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/UPXAoUSEQfY9fb4Srj_8wNNe1e8.roa
File:                     UPXAoUSEQfY9fb4Srj_8wNNe1e8.roa (raw, json)
Hash identifier:          CttDvB0v3nCfaWt/vMPFT5/sQJxZUhUCTI33rDc8W4E=
Subject key identifier:   50:F5:C0:A1:44:84:41:F6:3D:7D:BE:12:AE:3F:FC:C0:D3:5E:D5:EF
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       92
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/UPXAoUSEQfY9fb4Srj_8wNNe1e8.roa
Signing time:             Thu 13 Apr 2023 09:53:29 +0000
ROA not before:           Thu 13 Apr 2023 09:53:29 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18126
IP address blocks:        118.106.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Apr 13 09:53:29 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=50F5C0A1448441F63D7DBE12AE3FFCC0D35ED5EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:11:78:ee:a7:28:59:a3:d6:23:ab:b6:3b:4b:
                    09:13:ef:d9:92:8d:2d:d6:50:49:fe:dd:e7:ef:e4:
                    1a:2e:69:91:f2:6b:22:28:b7:3b:08:b3:48:09:4a:
                    c1:0e:6a:f9:fd:f5:a4:02:b3:d1:b6:16:25:4d:d6:
                    cd:c2:f3:43:0e:a0:b1:ba:3b:b6:cd:64:08:f7:53:
                    b0:b8:ce:05:1d:10:ea:8a:a8:f4:db:e4:3e:07:dd:
                    ed:2c:67:bd:cf:1e:f0:d1:16:46:b1:65:7e:4e:10:
                    22:20:cc:27:a5:74:bd:8a:38:ae:5a:96:a0:33:c7:
                    ab:f4:5e:13:c9:aa:0a:d0:db:11:37:bc:27:16:d0:
                    be:c3:7d:35:dd:75:1a:44:15:f1:c7:b7:d2:25:21:
                    cf:3d:e9:7e:e0:43:69:4e:78:a5:9a:7d:8f:29:11:
                    ff:45:fa:a6:0e:55:18:2a:6f:61:b8:30:54:3d:63:
                    16:82:05:11:ef:4d:c7:0c:00:86:99:6d:db:ae:57:
                    ad:6c:d3:ea:69:1b:22:31:dd:00:68:ce:6b:c4:5e:
                    44:e3:60:41:bb:73:10:02:43:a5:8d:d4:17:0d:ad:
                    4d:ae:22:5f:e8:88:ad:d6:54:f6:be:45:7c:f1:96:
                    d5:5b:25:b0:e8:b8:d5:29:ff:3c:5e:d3:30:1a:6e:
                    bb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F5:C0:A1:44:84:41:F6:3D:7D:BE:12:AE:3F:FC:C0:D3:5E:D5:EF
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/UPXAoUSEQfY9fb4Srj_8wNNe1e8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.106.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         30:71:c9:59:be:65:e5:e2:39:35:00:81:da:c1:59:57:12:36:
         ab:6c:f9:d6:39:c7:e2:d9:36:ae:86:8d:be:8d:ce:db:ac:4a:
         b6:27:cb:94:33:c4:9c:c1:87:01:75:00:d3:6f:75:f6:68:68:
         c6:17:13:9a:8b:b3:93:ef:6f:bf:e1:54:ac:8f:94:2b:20:1a:
         16:fc:3c:1a:d0:19:4c:69:0c:5c:8a:0c:c6:92:06:83:c2:f3:
         1e:ac:27:fb:e8:05:fb:70:01:5c:dd:37:ef:58:45:b9:9d:fa:
         d9:81:5f:1e:99:4d:d5:0e:96:15:d5:5c:1f:01:59:fe:ae:c6:
         2e:78:8a:bd:a4:6c:80:2b:c7:ec:82:78:28:54:08:06:ff:7a:
         70:53:93:57:e7:67:1a:76:88:6b:fe:72:03:e1:0c:03:40:3d:
         66:f3:97:c3:96:81:81:bb:41:1c:0c:c5:0b:a1:9d:97:13:9e:
         52:12:13:aa:a0:4e:32:7b:18:22:17:07:de:df:49:37:b2:02:
         c3:60:94:fc:e4:3a:3b:32:6b:bf:1f:e7:34:e2:f2:ec:16:8b:
         a0:d3:a8:08:f0:22:3a:e3:79:a4:41:a8:4f:62:c7:6c:6e:11:
         8f:b5:09:b9:26:b5:af:37:53:00:87:e4:a4:83:29:61:60:c6:
         f1:ff:9f:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org