Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/ZFnQ-Yq3XesYQwpHOCoAgmltroU.roa
File:                     ZFnQ-Yq3XesYQwpHOCoAgmltroU.roa (raw, json)
Hash identifier:          KYOSTkyHBH4vPodhQTZDXcDy4SksZLqx5Jg4uMdvsjY=
Subject key identifier:   64:59:D0:F9:8A:B7:5D:EB:18:43:0A:47:38:2A:00:82:69:6D:AE:85
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       8B
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/ZFnQ-Yq3XesYQwpHOCoAgmltroU.roa
Signing time:             Thu 13 Apr 2023 09:53:25 +0000
ROA not before:           Thu 13 Apr 2023 09:53:25 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18126
IP address blocks:        123.48.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Apr 13 09:53:25 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=6459D0F98AB75DEB18430A47382A0082696DAE85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2a:fc:26:3d:21:a1:10:48:ee:aa:43:d4:c4:
                    91:a9:5e:fb:47:09:a3:c6:b3:69:c2:75:f2:24:27:
                    1c:00:ec:fc:31:5a:ad:6a:9c:3b:e0:e2:ec:f8:66:
                    8a:e1:f5:ab:d4:c8:51:b0:ef:d2:bd:bc:ae:33:d8:
                    73:53:2c:6c:6d:ef:8c:4c:65:2a:9d:3f:9c:67:d9:
                    fe:63:17:fa:89:e0:48:52:0a:c8:b5:a7:d4:07:68:
                    99:31:cc:33:7f:2f:37:9b:f8:76:6b:19:40:c8:82:
                    9c:27:d2:9b:b8:85:83:97:bb:e5:2c:d2:93:5d:61:
                    a3:18:a3:1e:58:b8:47:72:00:50:6a:b5:6f:44:a1:
                    f3:75:13:4f:79:ed:4e:84:8c:ab:9f:d7:c0:08:ca:
                    38:5a:54:8a:8a:f1:aa:75:2e:d9:0d:4c:7b:78:57:
                    26:43:30:fc:01:b3:95:f6:d7:dc:5d:3e:9a:b0:16:
                    5f:2b:04:ef:81:d9:83:05:94:cf:eb:ac:4b:61:06:
                    c0:54:64:8d:63:50:69:ce:49:f8:18:e4:9e:52:20:
                    5d:a5:b8:e8:b2:41:a1:ac:b3:31:94:65:2e:ae:d2:
                    80:8a:ca:a8:74:eb:24:9c:64:d3:85:61:a0:94:fe:
                    6f:1c:15:ca:76:35:b5:ea:f7:35:a0:3d:b4:a0:ed:
                    3c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:59:D0:F9:8A:B7:5D:EB:18:43:0A:47:38:2A:00:82:69:6D:AE:85
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/ZFnQ-Yq3XesYQwpHOCoAgmltroU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.48.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         50:7c:f8:95:6b:9b:90:01:9a:ae:21:be:41:48:2a:08:f1:ba:
         7e:58:cd:f8:2f:31:27:be:21:23:11:10:fa:73:19:0c:04:a0:
         48:e2:96:91:0c:3f:a2:57:e2:d4:46:5a:aa:69:71:d1:b6:6b:
         68:51:3b:ab:19:16:22:8e:cd:1d:06:eb:ae:bc:84:32:cd:dc:
         ec:95:f9:3b:43:a0:2d:17:46:d5:05:fb:fa:40:52:22:70:ac:
         3c:6d:d5:3a:37:56:30:62:08:60:35:00:46:40:82:0d:97:bb:
         23:37:4e:d5:1a:f9:5b:96:cf:07:6f:46:1d:88:52:45:47:07:
         e2:88:7a:72:aa:e8:1e:cf:91:ae:08:c1:84:10:cf:6b:8a:89:
         07:11:6b:ff:de:13:80:af:e6:05:7e:d8:0c:33:01:25:2d:76:
         3c:68:bf:a6:c8:44:a9:c6:36:17:f6:48:e6:f6:94:a1:8d:9a:
         5d:3d:73:5c:e9:ff:b4:2e:cb:51:a7:60:f3:a3:d8:3c:3b:48:
         3a:0e:f1:a9:6a:29:20:d6:1e:17:83:f8:de:83:61:4f:2c:20:
         09:43:93:ed:26:eb:ae:a3:67:11:75:c7:81:1e:20:81:ab:95:
         d1:cc:c3:4e:e3:6b:e7:81:5b:37:2a:c0:67:30:52:70:16:7b:
         b8:d3:47:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org