Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/0H27nG9x243cF_D1Qn6ftezNB9w.roa
File:                     0H27nG9x243cF_D1Qn6ftezNB9w.roa (raw, json)
Hash identifier:          1CEl8FcqZPShGB+LGdNRYM8PhRtfuHIJOpgo5ERhfzY=
Subject key identifier:   D0:7D:BB:9C:6F:71:DB:8D:DC:17:F0:F5:42:7E:9F:B5:EC:CD:07:DC
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01BD
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/0H27nG9x243cF_D1Qn6ftezNB9w.roa
Signing time:             Mon 20 Feb 2023 07:53:19 +0000
ROA not before:           Mon 20 Feb 2023 07:53:19 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.37/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:19 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=D07DBB9C6F71DB8DDC17F0F5427E9FB5ECCD07DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:88:30:5f:12:6f:f9:ed:12:84:48:e3:03:
                    ee:b4:31:00:e4:00:f0:83:a7:e2:8e:ab:2a:0d:8e:
                    7f:ad:b8:43:da:05:d2:2b:7a:f0:df:1d:94:f5:04:
                    86:0e:54:47:94:c4:93:b7:d9:66:c5:da:15:d0:33:
                    0e:29:b9:1b:86:1f:f4:0a:6d:34:41:d3:e0:44:d6:
                    1f:a6:59:6e:b9:5c:14:81:33:b0:12:9b:c5:ae:19:
                    9d:97:92:01:5f:84:52:e3:60:3d:39:f0:f5:90:14:
                    1d:9a:b9:90:cd:17:1f:c3:ae:d2:3b:fb:17:47:ca:
                    3c:ff:6b:4c:10:74:87:22:42:36:bb:ce:6a:45:b4:
                    10:22:0f:2a:56:f7:97:ce:16:da:a2:84:26:81:63:
                    65:50:4c:be:12:f1:48:82:12:70:da:5d:54:50:e8:
                    4f:40:41:13:ab:8d:f1:39:c3:fa:4d:b2:82:c4:4d:
                    8c:fa:af:1b:82:d6:28:82:10:61:af:18:c4:0a:69:
                    30:10:7b:68:6d:93:88:5a:3b:ac:87:19:b6:cd:ef:
                    16:49:6d:f6:eb:c9:24:89:41:5e:19:58:07:5c:22:
                    e4:c8:90:4c:e6:74:d3:ae:4b:b6:8c:7e:4c:94:22:
                    aa:fd:71:b3:8e:fb:c9:d6:d2:36:5c:00:17:2b:8e:
                    60:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7D:BB:9C:6F:71:DB:8D:DC:17:F0:F5:42:7E:9F:B5:EC:CD:07:DC
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/0H27nG9x243cF_D1Qn6ftezNB9w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.37/32

    Signature Algorithm: sha256WithRSAEncryption
         80:b2:b9:a2:98:28:03:b8:b7:76:86:30:b9:db:5e:2a:6a:e9:
         89:35:07:20:d4:1d:1e:94:fe:d8:c4:f6:42:9b:7b:31:ba:ca:
         ae:45:40:3c:d6:72:cf:3d:ef:f0:bd:40:e1:91:ec:68:34:aa:
         6b:82:0d:38:ec:aa:24:68:b6:7b:3d:b1:29:20:9c:cf:53:46:
         cd:fa:07:70:79:0f:eb:5f:a9:b2:80:2e:f9:0d:05:7c:14:43:
         13:2d:ef:a1:2c:2c:46:fe:a9:9a:b4:cf:f4:85:f2:eb:6c:1d:
         2a:42:a1:f2:1f:7e:de:8b:81:b1:94:9b:a8:31:15:ca:28:7e:
         ef:31:0a:d5:78:11:2c:3e:66:4e:b0:d6:c6:d4:d2:83:d3:5d:
         66:31:ac:e0:48:5a:ae:81:71:40:9b:38:66:d4:13:16:c6:10:
         7b:cb:fd:35:a3:8c:27:5f:17:ba:c2:4f:cc:1c:63:a8:1d:4b:
         6b:96:17:f7:fb:42:a4:e4:f5:23:dc:6a:c6:6f:98:84:ae:10:
         46:6b:54:d1:c3:97:a0:03:77:80:ba:09:71:70:23:2a:3a:c4:
         3c:2f:d2:99:aa:76:e3:99:7d:d8:85:35:f0:96:a2:e6:89:c7:
         38:cc:7a:16:18:e6:ac:bb:55:d0:60:14:1e:47:c5:cb:1a:65:
         24:5f:17:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org