Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/4-xZbrcx1vAAmYa9EckQufgkNIo.roa
File:                     4-xZbrcx1vAAmYa9EckQufgkNIo.roa (raw, json)
Hash identifier:          /4/eVTmOegEND8WLKygmYhVKBJd0f95lr6keI5SGdmw=
Subject key identifier:   E3:EC:59:6E:B7:31:D6:F0:00:99:86:BD:11:C9:10:B9:F8:24:34:8A
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0207
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/4-xZbrcx1vAAmYa9EckQufgkNIo.roa
Signing time:             Mon 20 Feb 2023 07:57:35 +0000
ROA not before:           Mon 20 Feb 2023 07:57:35 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.34/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:35 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=E3EC596EB731D6F0009986BD11C910B9F824348A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:dd:2e:08:72:c2:7e:e4:12:69:11:e8:52:a4:
                    a7:bd:56:bb:b8:40:8e:da:40:da:a8:5a:68:62:1c:
                    a2:e1:d5:a0:8a:1f:f8:66:f3:c7:e2:f0:de:40:df:
                    26:70:fb:d1:b3:ee:60:70:a8:ba:45:cd:ca:8d:cf:
                    e7:11:ee:3a:1c:92:93:e9:6d:07:74:38:99:32:fd:
                    e2:b4:61:b9:7e:73:f7:c4:b0:1f:ae:8f:2d:f4:39:
                    55:08:3f:b9:0f:05:08:26:0e:8c:b0:a5:46:cb:e3:
                    dd:18:96:91:9b:03:ba:bc:1b:2a:dd:c8:24:e4:d7:
                    a7:3b:75:01:2b:27:3e:51:4d:7d:bc:1f:85:2c:e5:
                    78:a6:59:cf:e3:08:ff:f9:94:1e:1d:8c:dc:66:e7:
                    28:e4:5f:2a:cc:1c:93:7e:29:43:19:1a:9f:6b:49:
                    e2:f1:61:6a:e3:f8:45:1f:53:92:a0:7d:6f:e6:e5:
                    9d:43:ff:f2:e0:c0:77:07:ca:eb:dc:fc:dc:df:01:
                    9a:c1:3f:ac:8b:f9:42:ec:bb:12:c1:66:3b:58:5b:
                    58:2f:14:20:4a:3b:9a:2f:e5:3a:fb:a3:f0:75:73:
                    ca:11:02:53:4f:36:9c:e5:f1:96:51:a5:55:e6:93:
                    cf:b7:1a:7a:45:cc:4e:ce:44:d4:db:3a:67:cf:a9:
                    40:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EC:59:6E:B7:31:D6:F0:00:99:86:BD:11:C9:10:B9:F8:24:34:8A
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/4-xZbrcx1vAAmYa9EckQufgkNIo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.34/32

    Signature Algorithm: sha256WithRSAEncryption
         96:91:0d:5e:be:72:1e:cb:67:f0:d3:9b:4d:a6:7c:37:2e:cf:
         fe:a2:26:97:d8:0e:c3:0c:a0:6d:17:c5:85:a5:a4:01:ca:0e:
         e4:fc:a6:39:e0:e0:a7:c6:d7:c4:70:f4:09:80:68:09:c8:e2:
         71:39:5d:35:2c:d1:da:e3:e8:47:bb:e9:fa:89:8e:7f:9c:88:
         8b:14:8d:b5:af:a0:af:7d:3a:2f:55:dd:0d:e3:a6:f9:b7:f0:
         0a:78:a9:69:1d:e1:ae:4a:00:69:ca:bd:68:d0:b6:19:32:f5:
         99:a7:bb:fa:00:87:95:47:5c:a5:3c:4e:96:79:b4:49:1d:21:
         3c:3b:bf:80:20:95:30:c6:46:67:71:6b:c2:7d:bd:db:a1:7b:
         8a:3b:b1:c5:41:68:c3:17:0c:60:65:37:4b:9d:8f:84:7b:b3:
         6c:e3:91:72:6b:32:8c:0e:38:11:73:ec:64:6a:83:81:a4:2b:
         68:64:c4:24:ce:27:0f:4c:f4:36:fe:eb:6b:e8:c9:e9:5d:11:
         ef:45:47:7a:a8:bc:0a:50:32:5e:5a:ba:e5:9f:71:ad:cc:62:
         3c:53:b5:45:74:21:01:94:7b:38:b6:ee:c9:9d:10:ac:a1:7d:
         68:e0:b9:0e:8c:49:bf:03:05:98:05:81:a4:ed:7e:9a:8f:de:
         73:0a:fb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:45 2024 by rpki-client on console-fra.rpki-client.org