Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/q5qWZQczuWGsTnFwLV2-5KuO-us.roa
File:                     q5qWZQczuWGsTnFwLV2-5KuO-us.roa (raw, json)
Hash identifier:          FckwlFE1Qwgb89OZO6wyFzrFe8TIhru0zgEUu4XHBrc=
Subject key identifier:   AB:9A:96:65:07:33:B9:61:AC:4E:71:70:2D:5D:BE:E4:AB:8E:FA:EB
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       71
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/q5qWZQczuWGsTnFwLV2-5KuO-us.roa
Signing time:             Sun 01 May 2022 01:30:37 +0000
ROA not before:           Sun 01 May 2022 01:30:37 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18126
IP address blocks:        123.1.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: May  1 01:30:37 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=AB9A96650733B961AC4E71702D5DBEE4AB8EFAEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a1:37:8b:bd:ed:0a:03:26:d7:b5:fb:88:b6:
                    e6:42:21:f2:1d:9b:b7:2d:3f:10:70:75:bc:18:5a:
                    e5:68:59:51:86:ca:ac:95:b6:5a:28:6f:76:87:54:
                    ee:61:c2:3b:00:dd:e0:5a:dd:23:d1:3a:08:17:0c:
                    35:53:da:37:21:3a:3d:7b:3b:83:0f:3a:64:b5:5d:
                    f1:75:2b:a5:e8:d5:6d:4b:40:9a:eb:12:8a:ac:65:
                    3d:57:a1:8a:e9:f9:b3:8f:d5:d0:98:33:b2:eb:99:
                    4c:a9:44:cf:39:7d:14:cf:4d:43:7d:c8:f6:9c:48:
                    95:be:97:35:98:11:b0:20:fe:c7:1e:33:b0:d3:18:
                    09:95:01:01:81:ec:ab:0a:ee:8d:78:65:db:df:3a:
                    44:5a:a2:88:90:0b:81:0a:a5:91:21:c1:a8:3c:f8:
                    c4:85:ce:a1:cb:55:5e:b8:be:6b:e9:c8:88:2c:c6:
                    34:b7:66:07:27:75:d0:a9:ff:f1:f1:64:34:31:c9:
                    54:37:ec:0a:f2:b8:51:4f:53:26:58:31:f6:26:f7:
                    88:80:bc:1e:6d:17:39:9f:99:35:b9:7c:f2:08:ea:
                    6b:f5:eb:c7:aa:07:f5:75:10:bc:64:bd:13:3e:96:
                    aa:01:0f:04:2e:d9:a1:6d:97:56:59:78:a9:20:b3:
                    c9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9A:96:65:07:33:B9:61:AC:4E:71:70:2D:5D:BE:E4:AB:8E:FA:EB
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/q5qWZQczuWGsTnFwLV2-5KuO-us.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.1.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ae:43:f6:d8:84:e4:bd:42:2c:1b:b5:22:31:56:d8:95:03:3f:
         b7:d5:39:6a:47:13:1d:20:3e:ba:df:e0:c2:ab:4f:86:1d:d6:
         57:79:37:2c:23:40:41:ac:1b:9f:50:dc:60:04:e9:72:c6:a7:
         17:06:40:63:06:2a:27:10:99:93:d8:15:0c:52:76:2c:d5:39:
         04:a9:12:c4:a4:83:6e:66:0f:4b:e6:4a:1a:38:ec:97:e4:5e:
         00:8b:e2:84:56:9e:19:ab:ac:15:c3:6f:10:a4:7f:01:05:2e:
         b7:0e:47:ac:d5:89:68:44:0d:6f:70:99:e8:73:71:3e:11:c8:
         fc:fd:cb:dc:6e:20:fa:72:48:35:a1:1c:9e:bd:1e:c2:61:20:
         93:e1:c0:06:5a:fe:c8:d1:cb:b5:40:41:79:26:8b:ed:3a:88:
         30:18:8b:20:58:86:f7:62:c6:f0:b3:7e:c4:a0:7c:4e:a8:fc:
         71:3a:a9:17:b7:95:a5:85:33:05:f5:1a:2d:22:9e:67:e0:e3:
         cd:5c:f1:e5:80:7b:76:72:4e:d8:2b:93:7b:fd:af:e1:47:18:
         14:e0:21:f2:16:e3:2d:0c:da:9f:68:34:28:07:65:17:39:5f:
         d8:dc:5d:d8:a2:70:a1:ae:3c:ca:25:9a:83:44:d9:3b:0b:b3:
         9f:63:c6:7c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:07 2023 by rpki-client on console-ams.rpki-client.org