Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/fU7K4tOM4coyPgNJrTolPWXYcwE.roa
File:                     fU7K4tOM4coyPgNJrTolPWXYcwE.roa (raw, json)
Hash identifier:          NpBRwLOVgbreXhCWkkrqdRYuhu9MdA+ujgoc7dS7X+8=
Subject key identifier:   7D:4E:CA:E2:D3:8C:E1:CA:32:3E:03:49:AD:3A:25:3D:65:D8:73:01
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       73
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/fU7K4tOM4coyPgNJrTolPWXYcwE.roa
Signing time:             Sun 01 May 2022 01:30:38 +0000
ROA not before:           Sun 01 May 2022 01:30:38 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18126
IP address blocks:        123.48.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: May  1 01:30:38 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=7D4ECAE2D38CE1CA323E0349AD3A253D65D87301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f2:ed:33:a5:cb:98:c9:be:b7:52:76:3e:3d:
                    8c:5d:11:8a:06:d5:bb:b6:b8:99:3d:a6:bf:77:e2:
                    a3:93:f3:2a:ac:a7:75:d8:fe:73:d1:a0:8c:37:8b:
                    41:9b:2b:ad:b6:24:70:eb:2e:04:20:27:f8:fd:ce:
                    3b:1a:56:5c:c7:76:02:a4:7b:40:14:a9:37:c2:b4:
                    4f:90:f1:16:db:61:dc:97:ae:30:5c:a0:ed:a3:d0:
                    e0:ed:f5:1b:ec:25:1b:a0:0f:48:58:9b:05:6c:70:
                    99:52:d0:7b:a1:a1:4e:05:b4:3e:e2:ac:f9:cb:86:
                    4f:ed:8d:3b:6a:75:e7:42:87:3c:6d:92:6b:2e:34:
                    61:82:2c:a6:05:75:49:7b:0a:6f:97:50:54:d3:2a:
                    d4:bd:4f:f2:c6:6a:f4:86:65:bb:24:dd:c6:2c:59:
                    f9:73:6f:1a:02:ff:88:03:47:07:35:73:a7:dd:d9:
                    62:65:2d:ad:50:73:e5:0a:db:10:cd:62:d5:72:f1:
                    42:a3:2c:a9:7a:a7:7e:fd:31:ca:c0:e5:ab:ab:c3:
                    a9:89:eb:fd:ff:0a:50:f0:ad:fe:8c:58:5a:7b:c9:
                    29:97:36:17:28:41:73:f2:a3:f6:fd:2f:ff:86:14:
                    ac:c1:d2:37:5a:64:37:fe:45:45:7d:d4:ce:5d:37:
                    54:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4E:CA:E2:D3:8C:E1:CA:32:3E:03:49:AD:3A:25:3D:65:D8:73:01
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/fU7K4tOM4coyPgNJrTolPWXYcwE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.48.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b3:a4:5d:75:9b:6d:b9:e1:b3:82:ec:b7:0b:ee:04:42:7e:b0:
         b5:f2:91:e8:c0:8a:2a:4d:55:bf:71:28:84:ab:01:9b:38:4f:
         6d:bb:e3:a4:23:c5:a3:b2:e7:9d:45:d6:7f:43:ca:cc:fc:48:
         80:52:61:0a:3a:92:d0:b9:a9:ce:60:64:f4:81:62:40:aa:bf:
         3f:68:ab:e4:39:bf:28:c6:fe:fa:9d:03:bc:8c:e9:00:e7:ba:
         00:6f:e4:11:f6:b9:43:4c:3d:7c:a8:de:d5:f0:1a:5a:a3:4d:
         bc:01:80:41:a6:3c:0d:ed:b8:b4:9f:5e:0b:06:ea:e6:92:a9:
         1b:75:95:2f:ba:7f:7f:47:ef:2b:c4:00:ce:b1:af:a0:51:64:
         da:ea:33:22:18:2e:fa:47:53:59:4a:36:fd:77:f3:8f:d1:e8:
         99:f6:d4:0c:70:80:d3:1e:c0:fc:3e:8b:a1:f0:2b:43:b6:3a:
         9e:87:64:3b:88:5b:b9:f6:63:5a:46:35:6a:39:22:43:09:d5:
         ea:00:71:bc:b5:e1:f3:a1:41:07:de:c7:de:d7:6f:42:4a:93:
         d5:58:fa:66:c0:1d:e4:4a:3a:61:18:83:1b:01:da:39:bd:d7:
         e4:8d:3d:81:3c:24:b2:52:76:5d:8c:2c:ec:27:e3:1a:fa:9b:
         85:b6:06:b0
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIBczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMDFB
OTBFNEU3NEM0MDNBQkU4RTVFMEExRkU4RTQxNTdBQkQyQUU3MB4XDTIyMDUwMTAx
MzAzOFoXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoN0Q0RUNBRTJEMzhDRTFD
QTMyM0UwMzQ5QUQzQTI1M0Q2NUQ4NzMwMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKny7TOly5jJvrdSdj49jF0RigbVu7a4mT2mv3fio5PzKqynddj+
c9GgjDeLQZsrrbYkcOsuBCAn+P3OOxpWXMd2AqR7QBSpN8K0T5DxFtth3JeuMFyg
7aPQ4O31G+wlG6APSFibBWxwmVLQe6GhTgW0PuKs+cuGT+2NO2p150KHPG2Say40
YYIspgV1SXsKb5dQVNMq1L1P8sZq9IZluyTdxixZ+XNvGgL/iANHBzVzp93ZYmUt
rVBz5QrbEM1i1XLxQqMsqXqnfv0xysDlq6vDqYnr/f8KUPCt/oxYWnvJKZc2FyhB
c/Kj9v0v/4YUrMHSN1pkN/5FRX3Uzl03VMMCAwEAAaOCAicwggIjMB0GA1UdDgQW
BBR9Tsri04zhyjI+A0mtOiU9ZdhzATAfBgNVHSMEGDAWgBQQGpDk50xAOr6OXgof
6OQVer0q5zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTAxNzMvRUJxUTVPZE1RRHEtamw0S0gtamtGWHE5S3VjLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRUJxUTVPZE1RRHEtamw0S0gtamtG
WHE5S3VjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwMTczL2ZVN0s0dE9NNGNveVBnTkpyVG9sUFdYWWN3RS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsE
AgABMAUDAwB7MDANBgkqhkiG9w0BAQsFAAOCAQEAs6RddZttueGzguy3C+4EQn6w
tfKR6MCKKk1Vv3EohKsBmzhPbbvjpCPFo7LnnUXWf0PKzPxIgFJhCjqS0LmpzmBk
9IFiQKq/P2ir5Dm/KMb++p0DvIzpAOe6AG/kEfa5Q0w9fKje1fAaWqNNvAGAQaY8
De24tJ9eCwbq5pKpG3WVL7p/f0fvK8QAzrGvoFFk2uozIhgu+kdTWUo2/Xfzj9Ho
mfbUDHCA0x7A/D6LofArQ7Y6nodkO4hbufZjWkY1ajkiQwnV6gBxvLXh86FBB97H
3tdvQkqT1Vj6ZsAd5Eo6YRiDGwHaOb3X5I09gTwkslJ2XYws7CfjGvqbhbYGsA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org