Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/-0U3CrpzHSO0zDqMfLzaIgX6iu0.roa
File:                     -0U3CrpzHSO0zDqMfLzaIgX6iu0.roa (raw, json)
Hash identifier:          jC05qzW+M30PajinBnKI6YeF/8cMmGmmB4wb7JD2448=
Subject key identifier:   FB:45:37:0A:BA:73:1D:23:B4:CC:3A:8C:7C:BC:DA:22:05:FA:8A:ED
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       A5
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/-0U3CrpzHSO0zDqMfLzaIgX6iu0.roa
Signing time:             Fri 10 Feb 2023 07:45:45 +0000
ROA not before:           Fri 10 Feb 2023 07:45:45 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.95/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:45:45 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=FB45370ABA731D23B4CC3A8C7CBCDA2205FA8AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d4:38:bf:4d:ea:0a:82:bd:39:3d:52:de:63:
                    82:97:79:fb:95:12:34:8b:42:47:e3:c0:48:1b:67:
                    0c:bd:c2:9c:fa:95:20:b1:7f:03:c2:72:9f:42:84:
                    99:31:a3:de:8f:9c:73:74:91:88:be:4f:79:0e:33:
                    f8:87:9c:1a:88:d5:44:35:0a:3a:a7:dd:f2:40:ac:
                    f7:ca:e6:eb:0c:9c:81:17:d8:d4:91:82:16:5b:8f:
                    91:01:cc:33:60:32:2d:5d:e3:b0:c1:27:19:64:43:
                    de:18:3d:12:a2:b4:2e:06:0f:55:2f:33:cb:1b:a2:
                    ea:d8:cd:46:ac:60:80:3f:4e:a6:b1:56:cf:2e:7e:
                    d0:91:88:d8:58:5d:d4:d3:a7:ff:0a:9c:19:4e:0e:
                    59:93:89:18:78:3b:13:da:43:07:3a:b4:f0:a0:a4:
                    a5:22:b6:a5:2b:9b:9c:aa:23:40:88:e7:f7:48:74:
                    11:79:5d:a9:75:aa:ac:1a:22:d8:86:5f:aa:42:f5:
                    1c:37:4f:55:82:2a:3d:5e:52:43:76:15:e8:9c:b3:
                    ef:b3:81:31:32:96:ef:5f:ea:15:ea:53:dc:14:ae:
                    08:68:c7:d3:bd:5e:2a:3a:46:9e:0f:d2:a9:53:22:
                    8e:72:a6:5c:df:6a:c6:86:4a:7e:82:f0:bc:d1:9d:
                    b6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:45:37:0A:BA:73:1D:23:B4:CC:3A:8C:7C:BC:DA:22:05:FA:8A:ED
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/-0U3CrpzHSO0zDqMfLzaIgX6iu0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.95/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:85:44:f2:2e:42:75:ca:4c:b9:fe:77:4b:8b:c0:46:21:c3:
         0e:8b:92:f8:bc:de:e7:84:5c:60:43:ed:61:10:ac:de:a4:04:
         2a:eb:b3:0b:9b:72:8f:8f:3e:27:c1:76:62:db:f3:d5:c1:b6:
         4b:47:65:2f:79:77:f3:c1:d0:9b:12:a2:ac:93:8c:1d:0b:fe:
         79:08:7c:9d:70:ce:dd:b8:cd:00:41:78:ab:98:2e:11:f6:fd:
         4a:34:13:29:c2:eb:88:6e:da:c0:8a:c0:3d:3e:94:66:76:be:
         68:31:87:2d:57:6b:6b:57:5a:c0:88:57:49:50:9f:6a:28:f4:
         06:2a:8e:9a:c9:cb:10:26:f6:27:f0:3e:eb:29:22:5b:93:eb:
         3a:9d:f6:3f:fb:25:dc:d0:61:94:c7:d2:58:b4:ca:cf:ba:d1:
         ef:4c:c9:91:87:89:5a:97:60:f6:eb:7e:e8:42:bd:f0:24:1e:
         8b:79:be:66:cd:fb:fa:7a:13:08:54:54:4c:d9:65:69:95:f3:
         5c:96:21:65:a8:92:03:8c:56:2a:8b:87:56:19:2b:92:16:4e:
         c5:62:eb:cf:c4:07:17:53:a0:c5:ac:d2:11:ed:b1:f7:25:a2:
         ff:d5:3d:34:d9:a5:08:63:32:95:75:a4:04:00:d8:5b:36:df:
         40:15:3e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:45 2024 by rpki-client on console-fra.rpki-client.org