Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/_KbLFOLj7jli2dyz40uiWyk5eqM.roa
File:                     _KbLFOLj7jli2dyz40uiWyk5eqM.roa (raw, json)
Hash identifier:          PBElb4YItKMo5KKg4j4kRaiwg1FqxuJlZ4/XAyM6R8E=
Subject key identifier:   FC:A6:CB:14:E2:E3:EE:39:62:D9:DC:B3:E3:4B:A2:5B:29:39:7A:A3
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       8C
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/_KbLFOLj7jli2dyz40uiWyk5eqM.roa
Signing time:             Thu 13 Apr 2023 09:53:26 +0000
ROA not before:           Thu 13 Apr 2023 09:53:26 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18126
IP address blocks:        118.104.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Apr 13 09:53:26 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=FCA6CB14E2E3EE3962D9DCB3E34BA25B29397AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:77:42:fc:f2:0d:06:b6:83:70:54:f3:16:26:
                    08:28:ff:95:88:c3:c2:37:1c:34:51:ee:8d:f9:93:
                    6f:a2:a7:cb:56:58:53:2b:60:ba:b8:98:6b:01:1c:
                    81:45:9e:05:fa:ba:69:94:88:8a:c3:a7:06:ad:ef:
                    a8:97:27:35:cc:9a:94:e8:47:fa:ce:0f:77:a9:bc:
                    c6:df:17:28:28:88:ed:af:b5:d9:8f:88:21:55:b9:
                    70:a9:fd:68:d5:dd:c9:c8:54:15:42:30:87:16:38:
                    af:c7:6f:bf:cd:f2:ea:38:2b:b3:29:ca:b8:f3:30:
                    f3:8b:9c:c4:e3:66:f5:28:79:cd:b0:e1:d1:c9:1e:
                    78:f6:25:81:6f:ae:c5:f2:5b:b9:7e:50:f2:85:e5:
                    33:3e:90:72:87:cb:d9:4d:1c:85:f2:99:81:f1:8f:
                    82:42:7f:e0:f2:47:84:e0:50:bd:05:d3:6d:61:0f:
                    f0:89:45:ae:3f:a0:28:d2:52:0a:ae:3f:09:55:26:
                    bd:5c:7f:81:75:75:7d:7e:77:de:74:40:5d:60:97:
                    4c:18:c4:ed:dc:20:e3:f7:3a:ab:1b:fc:0c:ad:bb:
                    ca:cf:93:42:6d:21:f4:f4:3d:9c:e0:a4:2e:e7:47:
                    6b:ba:21:7d:e2:c6:59:a7:e1:6b:d8:8e:cc:c5:46:
                    ce:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A6:CB:14:E2:E3:EE:39:62:D9:DC:B3:E3:4B:A2:5B:29:39:7A:A3
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/_KbLFOLj7jli2dyz40uiWyk5eqM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.104.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         77:eb:6f:86:66:cc:60:88:01:e1:4a:57:03:6b:da:4b:25:9d:
         c7:73:ee:6a:8b:ec:8e:59:a0:84:aa:b9:50:01:88:10:05:ba:
         78:02:2d:c3:08:01:9c:7c:a3:e4:62:70:b8:54:eb:aa:10:91:
         f9:9c:90:1d:9f:80:aa:65:5a:c5:27:0f:ff:ca:e2:9e:04:83:
         19:20:69:f1:64:a2:80:26:0b:03:32:3c:7a:fd:a0:4e:b5:2a:
         a5:82:55:7a:1e:b5:bf:e6:5a:a3:69:91:33:a9:69:78:53:92:
         15:54:86:8c:4c:d8:05:b2:a6:c6:04:34:c2:71:d2:39:f7:13:
         4a:5f:b0:57:dc:79:00:b2:b5:18:8e:0e:5c:8a:35:0b:a7:20:
         9a:68:7f:c8:61:51:bf:48:34:62:59:6b:9b:5a:f7:8b:c8:bd:
         31:1e:34:78:8c:3b:e5:cb:ab:fa:f2:2a:b6:3e:5b:90:c5:91:
         62:1e:69:5d:7c:44:71:b2:00:da:0a:d7:5c:93:5a:18:83:5a:
         64:9d:67:0a:bc:ff:74:f9:65:0b:cd:8a:e2:d3:2d:a2:dc:fa:
         dd:8c:86:3f:e0:75:0b:99:1f:fa:d5:61:64:40:cc:56:84:05:
         fe:da:ed:fa:2f:d6:f7:fc:26:a9:91:1b:7b:1e:6f:c8:07:d6:
         ba:2c:89:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org