Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/cD8IU2ib2hrvEBdaQ-p6gBSxFZo.roa
File:                     cD8IU2ib2hrvEBdaQ-p6gBSxFZo.roa (raw, json)
Hash identifier:          vcFAzUA30qL41JN5B9s4OG+pH9AUhnmg4z4B8gkkank=
Subject key identifier:   70:3F:08:53:68:9B:DA:1A:EF:10:17:5A:43:EA:7A:80:14:B1:15:9A
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       93
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/cD8IU2ib2hrvEBdaQ-p6gBSxFZo.roa
Signing time:             Thu 13 Apr 2023 09:53:29 +0000
ROA not before:           Thu 13 Apr 2023 09:53:29 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18126
IP address blocks:        14.132.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Apr 13 09:53:29 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=703F0853689BDA1AEF10175A43EA7A8014B1159A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:07:8b:ac:0e:43:05:87:e3:e1:1d:4e:fb:4c:
                    b1:aa:e9:82:c5:97:0d:d5:ca:d9:4a:a6:a7:76:79:
                    2c:ef:de:83:8b:47:f0:6e:bf:c3:e0:d3:66:3b:1d:
                    0c:2b:a9:89:2f:f5:28:64:05:18:c0:2f:cb:37:b3:
                    32:27:fe:40:23:a8:d3:af:84:23:ff:27:8c:0f:d3:
                    ae:e2:d1:35:13:5f:30:31:55:53:60:a6:c7:b4:e6:
                    16:70:8c:22:a8:c8:e2:91:e8:f3:42:af:a1:cb:d0:
                    ee:b2:3b:47:1d:5e:ab:e2:f5:c9:92:63:15:f0:e2:
                    bf:e0:10:f8:ab:ef:7e:69:b5:78:e3:2e:9e:36:6b:
                    6d:59:44:b8:9b:b1:5a:42:6f:26:ec:8f:b8:58:79:
                    46:ac:cb:10:23:28:7e:ea:1c:b1:3d:9d:61:4b:c3:
                    1e:1e:2d:80:0f:84:cd:6d:f9:d8:16:a9:2d:c0:45:
                    75:68:40:f8:30:10:a9:22:35:45:e4:e4:0a:28:38:
                    0b:b2:ce:1b:05:5e:44:b1:58:18:f0:73:62:15:21:
                    9c:6e:c6:b2:aa:ee:5a:77:96:c3:3b:c2:b1:1a:ee:
                    b0:77:05:f0:e4:89:0f:a9:ae:88:1a:2e:1c:f5:44:
                    26:e4:bb:a4:a3:28:9e:45:89:02:42:70:fc:6b:90:
                    61:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3F:08:53:68:9B:DA:1A:EF:10:17:5A:43:EA:7A:80:14:B1:15:9A
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/cD8IU2ib2hrvEBdaQ-p6gBSxFZo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.132.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         3e:30:d9:32:76:c5:62:f9:ad:22:2e:8d:25:08:ad:f5:02:34:
         6a:51:3a:07:1a:6a:44:73:d3:15:2d:fd:c2:94:e6:28:a6:a3:
         6b:72:d8:96:35:72:c9:ab:8f:69:09:12:df:07:f6:6e:29:2f:
         27:64:02:f1:32:2c:65:e8:60:b7:df:ba:6f:5d:68:4e:7a:94:
         a0:3d:18:78:b4:64:eb:70:26:8d:ab:37:bb:2a:0d:a2:bb:7b:
         b3:fd:f0:d3:10:15:d4:26:60:59:a9:fa:b7:38:c4:7d:88:bb:
         22:41:92:f5:0a:1f:c3:3b:ca:33:5c:ce:bb:81:09:3f:06:03:
         45:1b:39:08:73:87:62:a2:e5:6c:e6:db:09:91:e6:8c:0a:f9:
         36:bf:39:a1:e6:31:15:ed:16:46:29:37:58:28:0c:18:15:39:
         54:6b:51:23:7f:ae:3e:52:21:b3:65:07:96:c7:2f:70:82:ad:
         23:79:df:9c:22:60:00:8a:de:dc:57:03:75:66:a7:00:54:06:
         3b:78:1c:17:02:4d:2a:55:fc:6c:ed:49:63:2c:9b:c8:cf:ea:
         60:33:68:be:3a:ab:aa:fa:49:af:d8:05:78:8c:fd:1f:9b:a5:
         f4:a8:9e:4d:ff:b9:5f:5b:59:ee:17:9d:10:22:cd:d7:a6:88:
         d8:e9:d8:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org