Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/kTuyEx_W7T5VjDyJz64dmpExCTk.roa
File:                     kTuyEx_W7T5VjDyJz64dmpExCTk.roa (raw, json)
Hash identifier:          cfpJYEHtmpKN7QoJrisXamAmf6RmAjA+hKR6dcAFk7E=
Subject key identifier:   91:3B:B2:13:1F:D6:ED:3E:55:8C:3C:89:CF:AE:1D:9A:91:31:09:39
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       70
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/kTuyEx_W7T5VjDyJz64dmpExCTk.roa
Signing time:             Sun 01 May 2022 01:30:36 +0000
ROA not before:           Sun 01 May 2022 01:30:36 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18126
IP address blocks:        202.142.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: May  1 01:30:36 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=913BB2131FD6ED3E558C3C89CFAE1D9A91310939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:63:0b:d3:0e:27:d7:6a:df:bb:80:3a:33:65:
                    f2:7b:f7:86:c3:be:9a:37:41:68:c4:73:e4:fc:c4:
                    54:77:4f:93:ae:dc:8d:c2:9e:f5:c1:d4:d2:47:df:
                    6b:55:c2:4f:e3:2c:85:50:a9:4c:d8:6d:eb:0b:57:
                    74:b1:e4:21:7d:59:2f:c8:52:eb:e2:1d:40:de:ce:
                    84:34:a8:3f:6f:fb:f5:33:20:7f:9b:82:16:1b:d6:
                    c2:3b:76:cf:c1:7c:c6:0a:a5:9b:2d:f6:78:bc:7e:
                    9b:a6:f3:28:7b:77:8e:07:63:00:da:8c:7e:a2:1f:
                    39:b3:2f:f0:f5:dd:60:29:38:84:63:ae:59:e7:21:
                    47:ff:60:ea:61:01:4d:9e:60:26:72:76:b9:ae:9b:
                    4b:84:f4:1a:10:10:30:e2:03:85:9b:7b:7b:55:2c:
                    e3:af:fd:4e:3d:a3:89:af:73:cd:b3:88:e9:0f:b1:
                    74:b6:f1:b8:08:5d:be:f8:78:43:ad:e2:b7:0a:f6:
                    aa:b9:c3:96:07:bf:a8:6b:bb:1f:60:30:5c:e7:19:
                    0b:32:a5:2d:fd:60:b0:c0:b9:1f:f6:3a:5d:b0:5d:
                    df:27:28:5d:3a:0f:da:10:ec:07:60:28:81:3e:b3:
                    94:ed:e5:1f:fe:f4:57:82:a0:d4:c6:10:87:fe:63:
                    06:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3B:B2:13:1F:D6:ED:3E:55:8C:3C:89:CF:AE:1D:9A:91:31:09:39
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/kTuyEx_W7T5VjDyJz64dmpExCTk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.142.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         16:57:42:9b:f6:2e:9a:11:8f:ef:8f:71:18:fc:9e:79:fd:ad:
         1f:21:c9:e4:45:f9:33:24:6f:07:a6:80:da:4c:fc:22:e3:07:
         44:96:72:1d:74:a6:1b:61:99:c0:6e:94:cc:30:46:c3:14:df:
         73:9c:23:2f:bc:6a:f2:4a:c7:28:bc:6b:83:fd:83:95:35:78:
         cb:2a:e7:cb:b9:c4:dd:6a:1f:ed:27:ec:27:b0:ec:1a:7e:78:
         49:80:7f:1e:85:b9:94:1b:af:12:05:dc:7b:40:23:2b:49:f6:
         92:5f:a4:b5:d7:19:04:bd:d8:27:d1:1a:48:a8:c9:06:65:97:
         2e:38:b0:f4:f1:ac:9c:8a:4b:91:f2:67:cb:c8:29:55:20:66:
         a5:af:7e:e5:37:79:8d:e2:a3:da:60:b2:11:b0:0b:52:c2:bf:
         21:50:8d:21:94:3c:cb:cf:ba:a3:f8:7d:10:6c:29:1f:38:0b:
         b6:1d:84:ab:83:8f:4b:73:41:1b:32:10:48:4a:14:3e:72:ee:
         c1:35:9c:0b:33:5c:4a:1e:23:01:ad:4d:c6:b2:e3:d0:7d:5e:
         a9:29:f9:a7:41:f3:83:be:df:41:eb:d7:76:72:e5:59:a0:ec:
         88:a8:d0:05:53:c3:a5:51:60:f2:5d:9b:01:6b:dc:e4:79:d2:
         96:5b:2f:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org