Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/1DeBGzwgBx4IXJzpjihJdK6DJ_Q.roa
File:                     1DeBGzwgBx4IXJzpjihJdK6DJ_Q.roa (raw, json)
Hash identifier:          lox8rB/b4WZpKdm5s+AzuPEXsGOty8T7LqMrNmCWPoI=
Subject key identifier:   D4:37:81:1B:3C:20:07:1E:08:5C:9C:E9:8E:28:49:74:AE:83:27:F4
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0130
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/1DeBGzwgBx4IXJzpjihJdK6DJ_Q.roa
Signing time:             Wed 15 Feb 2023 02:28:19 +0000
ROA not before:           Wed 15 Feb 2023 02:28:19 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.36/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:28:19 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=D437811B3C20071E085C9CE98E284974AE8327F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:37:5b:85:c4:25:6b:f4:0b:56:b4:1a:d4:
                    a9:54:ea:29:c6:03:18:1b:25:3c:54:a0:cb:1f:ff:
                    6b:36:30:73:a4:7f:54:86:c1:75:74:52:fc:8b:b0:
                    47:70:98:9e:53:2a:0c:31:ff:ae:22:b1:dd:e6:74:
                    9d:1d:29:84:09:76:4d:19:a8:ac:ea:a8:c9:fe:07:
                    ef:64:0b:78:89:42:ad:bd:87:58:31:9f:05:7f:10:
                    d4:9a:6a:af:c9:4e:30:7a:db:14:18:a3:61:84:78:
                    5e:82:4f:fe:70:ab:2c:83:ae:f1:5f:23:56:d2:d9:
                    39:94:05:7f:23:e1:e5:47:81:6c:b2:ba:2d:a0:68:
                    09:0f:7b:c6:21:fd:68:e1:f6:ee:d8:44:3c:d6:f2:
                    32:50:b2:54:3f:14:c7:25:44:d8:93:f4:27:50:2c:
                    23:02:74:47:b4:da:eb:27:9c:3b:44:90:ba:2b:00:
                    cb:65:4a:a2:ff:57:a8:0a:6a:c8:0d:5b:53:9c:2f:
                    b4:96:ff:0c:95:bf:81:ad:ed:5e:02:e2:9d:43:21:
                    a3:17:fd:69:99:f1:02:0c:51:62:ff:db:0b:0d:94:
                    0a:de:3d:02:95:59:bc:04:22:90:e5:ab:73:89:79:
                    ce:9b:1f:ec:bc:72:8a:3d:40:0a:f0:c0:cd:eb:7f:
                    7c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:37:81:1B:3C:20:07:1E:08:5C:9C:E9:8E:28:49:74:AE:83:27:F4
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/1DeBGzwgBx4IXJzpjihJdK6DJ_Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.36/32

    Signature Algorithm: sha256WithRSAEncryption
         84:de:1b:2e:c4:3c:5b:fb:03:b4:f5:b3:b3:b3:9c:f8:f4:fe:
         e6:74:29:15:f9:af:6f:f0:be:68:1f:b3:9d:79:cc:c4:0f:0c:
         04:cb:b7:d8:cb:f6:21:e4:92:b8:f8:81:10:73:97:42:df:11:
         70:a6:07:05:91:ca:43:12:3b:f4:95:f7:69:25:e1:9e:31:ea:
         8b:f4:19:cc:e9:80:54:f5:dc:3e:e7:44:d1:5d:3d:e6:c8:e7:
         7d:76:42:92:90:6e:fb:2d:33:b6:bb:b6:d2:4b:50:7e:c1:27:
         d4:4b:e4:bf:d6:68:e0:a7:ff:5e:cd:fd:15:2e:48:2f:e3:2c:
         a4:07:91:eb:a9:0b:7e:af:8c:9d:03:44:41:12:15:3d:3d:89:
         18:b0:b5:66:8c:87:8a:84:ca:9b:d0:8f:10:6e:18:66:42:e9:
         f3:6c:41:48:7a:b7:27:a3:e0:8b:c3:ec:1c:25:c4:8f:14:38:
         b8:17:de:9f:e5:3a:67:99:ad:95:65:6f:e3:2b:94:ba:2c:ac:
         ec:89:26:62:66:71:6d:a7:9b:d0:37:63:3a:95:c2:c7:00:24:
         bf:40:6e:27:ea:9b:d6:fd:af:73:d5:61:8d:ba:c3:f3:c2:8a:
         28:b8:b5:c0:33:93:cc:6e:a1:83:37:ef:17:64:be:dd:53:51:
         3a:c9:74:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:45 2024 by rpki-client on console-fra.rpki-client.org