Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/8s10IqSaEBx-oJiQ27leZ8oRiIY.roa
File:                     8s10IqSaEBx-oJiQ27leZ8oRiIY.roa (raw, json)
Hash identifier:          pwHiZ1PHaUyPZn0dj6NqxN+xuf/nW/zldDWsL3lVLMQ=
Subject key identifier:   F2:CD:74:22:A4:9A:10:1C:7E:A0:98:90:DB:B9:5E:67:CA:11:88:86
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       DC
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/8s10IqSaEBx-oJiQ27leZ8oRiIY.roa
Signing time:             Sun 01 Jan 2023 01:31:02 +0000
ROA not before:           Sun 01 Jan 2023 01:31:02 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        121.101.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jan  1 01:31:02 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=F2CD7422A49A101C7EA09890DBB95E67CA118886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b2:c8:70:25:65:0a:44:a0:15:ad:9d:31:e8:
                    4c:5b:0e:82:d4:ee:32:31:0b:ba:d8:e6:c6:83:5d:
                    82:04:a9:c6:2f:91:b3:ce:52:4c:44:9d:ee:f9:61:
                    f4:53:40:0e:8a:ea:5d:b7:28:72:2c:e5:eb:21:43:
                    2d:a9:90:9a:64:bb:40:98:f7:8b:b9:15:13:74:8f:
                    25:7f:68:14:57:f0:53:f0:a9:de:1d:e0:b2:4d:e6:
                    4d:0b:ac:2b:80:46:76:f6:46:0c:96:97:91:ef:a3:
                    23:40:20:04:be:41:19:a6:5d:d6:03:c8:09:da:0a:
                    08:4f:9b:2b:75:c6:61:25:77:46:89:20:9f:31:24:
                    52:ee:a6:a3:13:bb:88:02:4c:7f:d6:af:e0:2a:59:
                    55:a0:39:24:78:e1:58:02:ed:dc:8a:c4:d0:71:86:
                    a2:03:6d:5f:52:47:3e:ae:13:a1:b5:27:ef:b4:22:
                    be:88:3a:10:44:c9:c2:a7:0c:95:da:96:4c:02:4e:
                    36:df:03:14:2a:c0:83:96:ab:87:00:20:2b:0b:13:
                    92:8e:42:95:ad:ba:ad:12:12:bf:4a:a7:b1:fc:ae:
                    e5:4c:92:a1:5f:1b:de:5b:3e:f4:83:7f:ef:86:a1:
                    7e:81:58:a9:6e:64:1b:75:0b:17:f0:1d:36:97:56:
                    60:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CD:74:22:A4:9A:10:1C:7E:A0:98:90:DB:B9:5E:67:CA:11:88:86
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/8s10IqSaEBx-oJiQ27leZ8oRiIY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.101.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7c:46:d4:55:9b:75:79:80:f4:24:ec:86:0d:fd:f6:cf:f8:24:
         e2:0d:94:b1:06:0c:03:e4:5b:65:ef:ba:35:62:17:4d:48:f1:
         86:64:ae:72:e4:b7:c6:01:c7:19:e6:46:84:ef:d5:aa:18:e7:
         e6:f5:a8:b3:42:8e:63:c8:6f:58:f5:0b:53:ce:2a:a3:8e:d8:
         e7:bd:ac:ef:73:0a:59:d2:e4:ce:0c:89:68:23:62:82:fa:f7:
         b1:2b:67:7b:6d:ec:3d:72:fc:f2:35:34:18:03:da:ba:25:a8:
         00:55:e7:93:9d:b5:03:95:43:7e:c6:b8:45:5e:f5:62:1b:cd:
         01:e0:03:32:d5:62:bd:79:73:c9:68:fd:c3:a6:31:29:14:02:
         d9:18:c1:89:f8:19:7a:98:db:79:8b:e2:6d:32:41:e8:e5:e9:
         4f:0a:04:75:b3:44:5d:f8:7f:57:70:6e:42:fd:91:aa:bb:fe:
         c2:fd:a2:b1:fd:c5:c6:5c:fc:24:ee:f6:2d:2f:28:62:0d:29:
         e4:f0:b3:ca:a3:0b:7b:20:71:12:b5:9a:0f:ce:79:cf:14:23:
         03:38:f8:e8:cd:44:8c:b1:1d:fe:cc:cd:84:f4:d9:ab:a0:1d:
         f6:5c:bf:a2:0f:60:80:60:40:82:7f:60:dc:f6:bf:57:75:1c:
         c8:2b:5c:9b
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICANwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yMzAxMDEw
MTMxMDJaFw0yMzEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEYyQ0Q3NDIyQTQ5QTEw
MUM3RUEwOTg5MERCQjk1RTY3Q0ExMTg4ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDtsshwJWUKRKAVrZ0x6ExbDoLU7jIxC7rY5saDXYIEqcYvkbPO
UkxEne75YfRTQA6K6l23KHIs5eshQy2pkJpku0CY94u5FRN0jyV/aBRX8FPwqd4d
4LJN5k0LrCuARnb2RgyWl5HvoyNAIAS+QRmmXdYDyAnaCghPmyt1xmEld0aJIJ8x
JFLupqMTu4gCTH/Wr+AqWVWgOSR44VgC7dyKxNBxhqIDbV9SRz6uE6G1J++0Ir6I
OhBEycKnDJXalkwCTjbfAxQqwIOWq4cAICsLE5KOQpWtuq0SEr9Kp7H8ruVMkqFf
G95bPvSDf++GoX6BWKluZBt1CxfwHTaXVmANAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQU8s10IqSaEBx+oJiQ27leZ8oRiIYwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My84czEwSXFTYUVCeC1vSmlRMjdsZVo4b1JpSVkucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQGeWVAMA0GCSqGSIb3DQEBCwUAA4IBAQB8RtRVm3V5gPQk7IYN/fbP+CTiDZSx
BgwD5Ftl77o1YhdNSPGGZK5y5LfGAccZ5kaE79WqGOfm9aizQo5jyG9Y9QtTziqj
jtjnvazvcwpZ0uTODIloI2KC+vexK2d7bew9cvzyNTQYA9q6JagAVeeTnbUDlUN+
xrhFXvViG80B4AMy1WK9eXPJaP3DpjEpFALZGMGJ+Bl6mNt5i+JtMkHo5elPCgR1
s0Rd+H9XcG5C/ZGqu/7C/aKx/cXGXPwk7vYtLyhiDSnk8LPKowt7IHEStZoPznnP
FCMDOPjozUSMsR3+zM2E9NmroB32XL+iD2CAYECCf2Dc9r9XdRzIK1yb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org