Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/1XG7311Z7U_omSHe43-hlBHzAG4.roa
File:                     1XG7311Z7U_omSHe43-hlBHzAG4.roa (raw, json)
Hash identifier:          dRnPtWWI+89UbrWb3o6p3ntByHyiqTW9SIjRy+U9tPA=
Subject key identifier:   D5:71:BB:DF:5D:59:ED:4F:E8:99:21:DE:E3:7F:A1:94:11:F3:00:6E
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       53
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/1XG7311Z7U_omSHe43-hlBHzAG4.roa
Signing time:             Fri 10 Feb 2023 07:41:28 +0000
ROA not before:           Fri 10 Feb 2023 07:41:28 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.143/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:41:28 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=D571BBDF5D59ED4FE89921DEE37FA19411F3006E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cd:19:62:bc:4b:1f:2a:a5:ca:31:86:62:a7:
                    b8:41:68:20:96:d4:71:91:68:1c:da:12:3e:c7:b3:
                    37:a8:1d:ce:c5:51:56:b6:46:20:ff:32:04:44:4c:
                    7f:9e:dd:51:f1:19:7c:07:60:05:7a:ed:89:b8:74:
                    2d:d1:9e:34:22:ff:e4:e7:a2:3b:96:ce:f5:44:4c:
                    95:2f:80:97:6e:51:81:ea:78:91:f0:91:01:ee:35:
                    01:e6:4f:6f:8e:c7:a6:04:bc:80:61:6e:e0:0c:45:
                    3e:44:56:66:11:96:1a:33:76:7c:14:ff:71:19:01:
                    1b:ad:d3:1f:d5:ab:3e:34:d0:dd:9c:c9:b9:6e:d5:
                    3d:45:51:b5:63:af:59:92:0f:45:8c:30:b8:33:db:
                    bd:25:84:31:63:99:fb:9f:ea:cc:12:99:3b:f9:d0:
                    7b:7e:f6:0e:38:b5:4a:fd:09:fa:ab:94:3e:04:9a:
                    8f:4e:d2:01:16:7b:b7:5d:11:dd:09:ce:c7:3b:02:
                    27:91:3b:e4:7b:a7:21:a2:eb:90:c9:19:86:c9:46:
                    e0:0e:9f:f6:58:e6:22:0d:a7:92:b7:a7:09:5d:64:
                    72:41:42:be:1e:1f:f1:89:8e:cc:1a:c6:20:51:c1:
                    a6:df:6b:13:ca:76:e7:f5:57:e2:9b:e5:50:5a:17:
                    3b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:71:BB:DF:5D:59:ED:4F:E8:99:21:DE:E3:7F:A1:94:11:F3:00:6E
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/1XG7311Z7U_omSHe43-hlBHzAG4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.143/32

    Signature Algorithm: sha256WithRSAEncryption
         24:c2:56:97:d9:01:ef:bc:01:5b:9d:37:e7:a4:93:62:5c:a3:
         4c:44:23:dc:43:85:a3:92:08:c8:a0:90:13:b8:04:53:ce:0d:
         2b:82:ea:25:0e:cd:7b:b1:d6:d1:c2:4d:15:77:7a:82:55:6b:
         08:09:6a:10:89:87:fe:54:41:8c:e8:72:2e:e9:85:a4:00:a6:
         6e:d2:94:89:9a:42:a8:ba:92:61:0f:1f:9b:af:24:11:18:8f:
         34:13:7c:b3:c1:ad:96:31:e8:c8:25:03:d9:e3:7e:39:8c:13:
         d1:c4:e0:f3:27:8f:e4:40:38:e5:37:79:9f:74:f5:36:71:3d:
         16:04:0f:7c:37:5b:f0:98:a6:44:6f:01:0a:4a:87:a7:bf:7f:
         2b:8a:f9:99:b1:77:e8:d8:fb:64:8b:4e:07:37:e0:08:a3:08:
         1f:74:fb:3b:21:a3:ad:cb:07:22:50:e5:b0:f5:9e:58:b1:a0:
         60:8c:b1:4e:a3:80:3d:27:f2:cf:3c:55:3d:6a:d6:36:f0:e5:
         b8:33:eb:62:33:be:ee:48:8a:3d:be:bb:b1:4c:ae:71:69:47:
         c0:e3:11:4c:7b:28:6f:89:8c:19:19:42:e0:5d:60:b4:d8:a1:
         5b:b1:e6:ca:4f:ff:2c:44:00:52:8f:61:c8:5b:88:bd:56:60:
         30:d2:02:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:45 2024 by rpki-client on console-fra.rpki-client.org