Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/xLmvGNFzCg5nObw0V8TgEVHtCWM.roa
File:                     xLmvGNFzCg5nObw0V8TgEVHtCWM.roa (raw, json)
Hash identifier:          Sb4T5EzUTXQU5HM7d5H0WwlFryla89DVmjMb6CV5hoA=
Subject key identifier:   C4:B9:AF:18:D1:73:0A:0E:67:39:BC:34:57:C4:E0:11:51:ED:09:63
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       78
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/xLmvGNFzCg5nObw0V8TgEVHtCWM.roa
Signing time:             Sun 01 May 2022 01:30:39 +0000
ROA not before:           Sun 01 May 2022 01:30:39 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18126
IP address blocks:        124.18.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: May  1 01:30:39 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=C4B9AF18D1730A0E6739BC3457C4E01151ED0963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e4:d9:98:bb:a4:1f:3b:d4:0c:60:65:6c:a3:
                    a4:d8:7e:af:2c:af:75:68:49:b6:95:bc:bb:77:40:
                    2b:07:77:e4:6a:96:03:fa:02:9b:d2:72:e6:f0:f2:
                    91:8a:18:3d:ea:25:dc:54:30:84:23:4e:5d:1b:52:
                    4b:94:1c:2b:02:7e:56:80:cb:74:bb:62:e6:2b:1a:
                    52:e6:54:3e:89:4f:12:ae:32:3a:54:fe:42:f7:32:
                    b0:08:6b:08:ab:a9:1c:0d:e1:7f:b4:ed:be:c0:f6:
                    78:89:b7:e3:9c:a5:ac:b2:8f:3d:0c:70:38:1f:7f:
                    30:86:5c:cb:18:eb:da:e6:70:bb:aa:16:a2:30:ad:
                    2c:9d:5d:7b:3b:2f:cd:36:42:97:a1:95:a0:60:4e:
                    9c:17:a2:ed:01:15:81:d3:26:6e:1b:97:8c:29:89:
                    4a:74:1a:29:6c:44:71:7d:03:c9:b8:3e:d0:1b:b5:
                    c3:fc:0a:c0:b1:f2:4e:e4:a6:6b:28:60:3c:1d:ed:
                    e3:e3:ca:ce:d5:7e:0f:75:d0:0d:a2:08:a6:19:76:
                    07:26:16:0a:d7:97:c5:34:e2:c6:26:f4:51:86:26:
                    d3:c7:ff:fd:0a:d1:33:b4:49:20:84:cf:eb:23:ff:
                    81:c8:53:48:f2:a6:98:62:b8:67:7b:45:3c:1f:34:
                    ce:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B9:AF:18:D1:73:0A:0E:67:39:BC:34:57:C4:E0:11:51:ED:09:63
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/xLmvGNFzCg5nObw0V8TgEVHtCWM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.18.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         05:bc:f3:5d:92:b7:c8:5f:1d:e3:3c:e0:2d:aa:f1:c9:4c:f2:
         c0:7c:2c:64:e6:75:d1:ae:b0:2c:7e:75:e0:fe:6b:d5:34:e0:
         9e:a5:8f:45:76:c2:99:07:5a:b2:ce:21:5c:42:54:7c:65:1f:
         ee:41:5d:23:f0:78:a5:0a:44:a1:ea:f1:71:cc:1f:58:ac:ae:
         2c:e9:f9:79:ef:56:c5:22:98:f6:7b:19:db:74:b4:77:0a:e8:
         7b:6a:ef:1e:e7:93:24:55:77:55:c0:02:49:dd:c5:7c:19:7c:
         29:16:38:7f:fa:d5:76:ef:34:6b:80:6e:bc:e0:2d:41:0f:7b:
         b4:20:06:6b:93:0c:12:f9:83:09:d9:6d:11:1c:aa:01:11:4e:
         7a:7e:c5:f0:af:04:6f:b4:fa:28:1d:f9:b0:b8:b5:48:79:73:
         5e:ac:d1:9c:07:8a:29:d6:53:30:3a:7d:e5:9d:bc:6e:3f:04:
         69:1c:64:3b:66:1d:06:7e:69:c2:f1:7d:12:c0:95:db:cf:82:
         2a:b1:a8:70:fe:c7:b9:e1:9e:c9:ba:fb:19:e8:09:d3:98:87:
         51:6d:9a:58:4c:1a:cf:75:75:85:6d:6b:20:86:52:a3:4c:cc:
         03:d7:e5:89:90:ff:d5:8c:08:e1:d1:7d:47:9d:d3:08:8b:a0:
         9e:d2:e4:71
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org