Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/23prfVlVrh-D7UVswBtmCynI9E4.roa
File:                     23prfVlVrh-D7UVswBtmCynI9E4.roa (raw, json)
Hash identifier:          4WyrSmWbWg587aV16TsQ1L277aOu+OjZ/AszYBqAQ4U=
Subject key identifier:   DB:7A:6B:7D:59:55:AE:1F:83:ED:45:6C:C0:1B:66:0B:29:C8:F4:4E
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02AF
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/23prfVlVrh-D7UVswBtmCynI9E4.roa
Signing time:             Mon 20 Feb 2023 08:05:35 +0000
ROA not before:           Mon 20 Feb 2023 08:05:35 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.14/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 687 (0x2af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:35 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=DB7A6B7D5955AE1F83ED456CC01B660B29C8F44E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:81:42:f8:25:20:0a:b7:40:0b:47:d3:6f:
                    5b:1c:d4:46:d5:3e:a4:e0:aa:e7:32:ed:3c:a0:c3:
                    17:05:83:9e:fa:4f:64:e6:99:d6:ba:15:18:fc:81:
                    40:0f:8b:a8:e1:0f:e6:6d:dc:99:d1:98:cd:a4:22:
                    09:21:fb:b1:bf:e1:d5:66:0e:46:f6:1a:d3:0d:cc:
                    3a:cc:ea:06:c8:97:94:4a:84:db:18:0c:1f:e1:7b:
                    23:75:ac:65:12:ea:92:32:04:5e:d7:f6:fe:48:2d:
                    c6:21:7b:5e:f3:9f:8d:c7:4c:5b:fb:81:40:03:c4:
                    1c:54:18:d8:29:42:83:30:ae:23:ce:12:d6:18:7f:
                    eb:20:b8:79:c7:ef:26:c3:d2:3f:34:4e:b6:d7:23:
                    27:07:a8:7f:6b:3e:ad:62:b4:d2:a4:20:61:e1:46:
                    01:e0:26:a6:7e:9f:60:f4:a5:82:86:f3:c9:8b:f1:
                    7f:7f:94:f0:43:a4:c6:81:da:26:28:7c:70:12:3a:
                    05:0f:82:95:15:a4:7e:85:83:4b:02:ed:e6:0a:18:
                    93:83:34:28:f2:9e:c0:7e:d6:c7:7f:c8:3f:6e:f2:
                    5d:bd:b3:3f:ba:81:1e:97:8f:df:b8:3c:6d:84:3a:
                    67:1f:5a:6d:91:a3:a4:c9:b5:cf:e6:35:7c:5a:ad:
                    ae:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7A:6B:7D:59:55:AE:1F:83:ED:45:6C:C0:1B:66:0B:29:C8:F4:4E
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/23prfVlVrh-D7UVswBtmCynI9E4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.14/32

    Signature Algorithm: sha256WithRSAEncryption
         63:9b:aa:80:20:87:a8:c4:e3:ec:8f:f9:5e:b2:71:f0:b8:ea:
         83:27:ba:0f:f3:f4:2e:93:d4:67:0e:61:84:30:c0:e8:e6:65:
         89:c8:59:ce:91:31:8d:48:5c:af:07:b9:51:f7:4a:53:ec:e9:
         26:d9:d9:21:27:53:8a:c3:97:20:51:41:9d:6e:21:84:1e:9c:
         7f:c6:8f:28:01:a9:63:be:d2:50:03:96:8a:12:fb:35:95:e8:
         f4:c5:b8:17:4d:6b:4c:7c:bb:cb:e1:47:fc:27:c9:a3:d3:ed:
         c3:65:f6:4a:da:d2:63:65:0c:ac:a1:86:4a:73:c8:8b:66:ff:
         0f:1a:a1:fc:5a:5e:dc:f6:2d:91:21:ea:41:94:28:bf:cb:87:
         67:bf:d9:44:05:42:6f:72:be:16:40:d6:ce:57:74:44:4b:26:
         4f:79:07:1b:9c:fa:a0:4b:bc:a4:a9:2d:c4:ac:38:8f:7a:1e:
         22:3b:c1:d7:1d:00:8f:b0:ed:5c:81:39:d9:51:6a:1d:d4:21:
         e7:7c:e0:f4:8b:40:d1:09:c2:80:ba:f2:18:b3:5b:9d:6b:59:
         3f:ed:a6:2d:ba:6e:01:cf:71:5f:e7:31:4f:7d:e3:09:e4:89:
         37:e7:11:5b:f8:aa:cd:8e:a3:9f:dd:a3:06:6f:ec:e5:d3:e7:
         f7:de:7c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:45 2024 by rpki-client on console-fra.rpki-client.org