Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/2NbyhUeKryw0EMJwcCiYEuT5BOM.roa
File:                     2NbyhUeKryw0EMJwcCiYEuT5BOM.roa (raw, json)
Hash identifier:          QuFybrMnu3BD9a3jzCFcbMRsTvcV1oqJjcnTCwMTytY=
Subject key identifier:   D8:D6:F2:85:47:8A:AF:2C:34:10:C2:70:70:28:98:12:E4:F9:04:E3
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       78
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/2NbyhUeKryw0EMJwcCiYEuT5BOM.roa
Signing time:             Fri 10 Feb 2023 07:43:43 +0000
ROA not before:           Fri 10 Feb 2023 07:43:43 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.6/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:43:43 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=D8D6F285478AAF2C3410C27070289812E4F904E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5c:ca:1e:00:2f:15:26:92:8f:8b:e1:67:57:
                    21:6e:00:75:e2:f2:a8:86:c2:8b:a1:1b:ca:b9:61:
                    88:18:42:77:3f:61:84:d6:8b:ec:0f:76:3e:2a:83:
                    fc:07:97:52:b8:17:73:a9:86:1e:b0:f6:58:f4:22:
                    74:6d:4b:dd:9b:fe:4e:ce:f4:f8:5d:22:60:a5:7f:
                    dd:f2:b1:17:91:34:ab:16:c8:32:b7:ec:6e:b1:b2:
                    97:25:aa:06:99:0c:25:a8:da:32:06:90:bf:d3:18:
                    0c:ae:91:21:b5:0a:a0:56:11:57:f7:71:de:7a:8d:
                    90:ab:7f:c3:12:26:9e:ab:75:27:1d:f0:b8:46:c3:
                    dc:d9:b7:d4:0b:e9:96:dc:cc:77:bc:96:52:85:64:
                    51:08:7a:0a:20:b4:2b:de:f5:43:fe:47:b1:dd:54:
                    c2:9a:e9:31:17:d0:8a:ed:c2:a5:64:27:4e:56:55:
                    ec:7b:31:ce:0d:17:de:e0:f4:70:b1:e7:96:c2:12:
                    85:73:e3:1c:a1:a2:ea:bd:1f:2f:83:07:c5:3f:9e:
                    ca:59:94:e8:f9:f5:72:3e:f0:8d:71:5c:22:ef:cb:
                    66:e2:7c:0d:0c:3b:83:5a:c1:f6:1f:63:af:ad:e4:
                    b5:da:00:94:ee:df:bb:1b:40:b9:ce:67:39:24:16:
                    fb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D6:F2:85:47:8A:AF:2C:34:10:C2:70:70:28:98:12:E4:F9:04:E3
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/2NbyhUeKryw0EMJwcCiYEuT5BOM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.6/32

    Signature Algorithm: sha256WithRSAEncryption
         24:c4:5d:59:88:57:8c:64:e1:c0:67:e9:ac:aa:ec:0c:7b:d8:
         50:85:bd:d9:da:e5:fd:69:43:12:05:8f:61:c1:50:11:20:34:
         07:96:37:3c:23:ea:38:64:ce:2a:03:1e:80:5f:8f:71:35:1b:
         e1:1e:78:54:09:79:c6:91:a2:17:0a:52:2e:23:80:16:dc:2b:
         c2:73:0c:bd:04:88:f5:bb:b4:b8:45:ad:0e:e4:a6:7d:28:49:
         d9:df:9e:a7:29:fd:11:c9:56:27:05:a6:1d:3c:3c:79:aa:8f:
         f9:47:7a:e0:f9:9f:df:b7:ec:2f:38:2e:ac:a0:99:54:cd:bd:
         16:a9:1e:2f:d2:98:f0:05:55:45:8c:67:52:96:f3:25:32:a3:
         81:2c:70:06:2a:ab:8e:39:a1:40:f6:2b:f3:38:03:5f:74:a1:
         2a:06:88:7b:4a:c2:d4:23:fd:02:50:4d:58:47:42:52:18:98:
         33:07:9a:5e:78:da:d9:45:d5:02:3e:03:77:38:a1:f4:4b:44:
         66:2a:ca:84:1b:97:ba:91:8a:c4:ce:8e:b6:6a:c0:77:25:15:
         99:5a:e8:45:0a:83:f8:14:c6:7b:cc:3f:97:57:35:35:7c:83:
         c5:2e:47:de:8e:2b:46:9b:a2:dc:db:33:e2:86:5b:f7:01:d3:
         52:78:54:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:45 2024 by rpki-client on console-fra.rpki-client.org