Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/zLAvQndOCsPi0ZV3tQHki85l8yE.roa
File:                     zLAvQndOCsPi0ZV3tQHki85l8yE.roa (raw, json)
Hash identifier:          UGBU7MUknXMtPGbGoYj0LJidkIrEDsz5wsvcQb+cDxQ=
Subject key identifier:   CC:B0:2F:42:77:4E:0A:C3:E2:D1:95:77:B5:01:E4:8B:CE:65:F3:21
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       7A
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/zLAvQndOCsPi0ZV3tQHki85l8yE.roa
Signing time:             Sun 01 May 2022 01:30:40 +0000
ROA not before:           Sun 01 May 2022 01:30:40 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18126
IP address blocks:        118.106.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: May  1 01:30:40 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=CCB02F42774E0AC3E2D19577B501E48BCE65F321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:63:ed:8c:65:9e:8f:62:52:90:4e:d0:be:da:
                    6e:97:e2:a2:88:fc:29:95:0a:10:15:e2:fc:e1:5e:
                    20:0a:1d:9d:99:a0:34:09:3c:aa:3b:01:c4:dd:8e:
                    96:c1:7f:2d:69:f6:e7:dd:6e:4b:77:cb:1f:6d:7f:
                    74:cf:d7:0c:5f:8e:ee:24:d5:6f:07:d0:8a:f0:61:
                    ba:79:a0:c4:c5:9f:86:ca:df:dc:48:c5:d1:2d:95:
                    70:af:4a:f1:a5:e9:99:59:c1:f7:98:69:8b:9a:63:
                    b6:f7:6a:6f:8f:4a:2e:72:0c:06:0e:e0:73:60:d9:
                    55:b2:d2:84:b9:09:8d:2b:00:66:3a:9d:f5:dc:89:
                    4d:94:13:87:b5:f0:03:7d:1c:05:28:4b:bf:87:72:
                    1e:5e:cc:be:7f:92:c7:f7:80:d0:e1:04:45:76:ec:
                    87:e6:ed:02:3f:f0:d2:b9:1c:52:f3:c1:f6:79:8f:
                    1f:c3:e7:6a:b5:fb:89:14:9c:7a:2b:e6:fd:a3:71:
                    85:23:17:0f:bb:0d:ef:3a:40:d3:14:2a:db:08:bd:
                    ba:37:3d:1a:76:75:4a:95:26:41:fc:2a:81:08:65:
                    12:de:12:58:65:01:56:5c:09:34:86:91:a1:fb:d3:
                    ef:25:c4:05:1c:15:2a:c5:a3:e2:b0:25:ab:a9:36:
                    5f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B0:2F:42:77:4E:0A:C3:E2:D1:95:77:B5:01:E4:8B:CE:65:F3:21
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/zLAvQndOCsPi0ZV3tQHki85l8yE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.106.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7b:42:40:79:94:59:61:9c:49:29:c0:c4:30:4f:f4:8d:66:6c:
         7c:18:5f:b6:89:83:26:e1:27:39:89:14:0c:e8:0b:1f:65:41:
         a2:46:c6:a1:b3:39:b7:0e:fe:53:32:02:b5:5e:6e:a1:dc:5a:
         0b:0a:3d:94:af:63:18:f0:e2:58:01:93:60:98:19:13:4b:e8:
         69:dc:ab:cc:1e:07:19:97:75:0b:41:8b:7d:2d:64:83:8b:b1:
         b4:8f:e2:22:fa:b4:2a:35:42:3d:8e:ca:be:33:53:8a:26:03:
         5b:c6:fa:74:59:37:33:23:13:b4:42:c7:49:d8:51:b9:2b:d9:
         f5:bf:c5:6f:cc:58:d1:fd:f0:97:96:3f:1c:dc:31:fc:ff:83:
         9f:1c:36:6b:a8:ce:bc:e4:02:30:7b:48:1e:c9:fb:87:16:16:
         71:0a:bc:2c:82:2b:ea:c9:0e:02:77:34:b1:3a:94:11:71:d7:
         91:f8:96:9c:5d:e4:a4:4f:1a:96:7f:8a:c8:27:1e:43:ab:eb:
         df:1e:78:85:c9:75:ec:b1:4a:3b:0a:e1:c4:51:c8:b6:57:7b:
         ec:4d:0a:a5:7c:6c:55:f3:e6:51:7a:d8:1b:c2:2c:ba:46:70:
         0f:38:ee:be:b6:0f:44:9b:62:e0:06:fd:a3:9b:7e:90:72:bb:
         af:63:5c:ca
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org