Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/59TSMJZ5KDYmDVXIjqw4efSKwKo.roa
File:                     59TSMJZ5KDYmDVXIjqw4efSKwKo.roa (raw, json)
Hash identifier:          f535o9WWmp1l6bhgkI/FjnmN8gMOLhDKs6S1ZPwep8c=
Subject key identifier:   E7:D4:D2:30:96:79:28:36:26:0D:55:C8:8E:AC:38:79:F4:8A:C0:AA
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0241
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/59TSMJZ5KDYmDVXIjqw4efSKwKo.roa
Signing time:             Mon 20 Feb 2023 08:01:23 +0000
ROA not before:           Mon 20 Feb 2023 08:01:23 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.254/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:01:23 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=E7D4D23096792836260D55C88EAC3879F48AC0AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:45:29:32:ae:03:a4:af:9b:24:c4:76:d4:49:
                    5c:31:80:f5:1e:8f:e8:18:40:42:67:f7:19:80:da:
                    84:4d:be:65:b8:d1:6f:f6:7c:bb:83:62:71:72:a9:
                    57:4d:32:58:5e:4d:39:57:3a:f4:00:5e:a5:74:ac:
                    c2:57:db:ba:38:9a:ed:df:3a:f7:74:8a:58:fb:b6:
                    9e:7b:75:c4:8d:04:0f:cb:f8:16:f7:c8:6a:f7:83:
                    cd:2d:09:d2:19:e9:67:9d:12:cf:71:ea:4c:07:1e:
                    13:b6:9a:7a:e6:cb:b7:d2:69:8d:e9:e8:b9:4f:af:
                    e3:42:2b:2a:0d:50:ba:9a:3b:3e:d7:aa:74:4e:6f:
                    c3:e1:36:72:04:d8:75:c6:23:a1:25:b2:02:3c:ac:
                    b6:d1:6c:ae:97:31:1b:6e:56:49:43:e7:04:8f:41:
                    97:06:4d:c0:d0:37:ff:75:66:f2:94:bf:4c:a3:32:
                    69:a9:fc:29:d4:e9:62:05:0e:f4:6f:c0:72:ad:88:
                    25:98:7d:07:87:9c:50:b4:7e:a7:b2:86:18:68:c2:
                    c4:7a:cf:72:26:72:9c:87:21:94:e6:12:92:91:0b:
                    af:9e:21:61:be:d3:5a:43:bb:ac:39:10:43:4c:9e:
                    ba:73:5e:9e:37:31:a6:a9:67:73:19:af:49:49:44:
                    12:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D4:D2:30:96:79:28:36:26:0D:55:C8:8E:AC:38:79:F4:8A:C0:AA
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/59TSMJZ5KDYmDVXIjqw4efSKwKo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.254/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:98:ce:97:dc:55:e4:ea:bb:bc:a2:f7:bb:84:ec:d0:5e:a0:
         2b:19:08:66:2c:52:0f:b9:e1:18:2e:4f:a9:0c:1c:c3:2e:01:
         2f:67:11:64:2a:46:e5:14:fa:b3:e4:7f:d2:a6:ea:5e:c3:b9:
         65:cb:d1:1b:d7:2b:06:fe:82:30:f6:05:3e:59:ec:ba:d5:ed:
         f7:55:0d:cd:80:ee:65:d6:b6:c1:81:7a:c9:f4:28:c7:0c:53:
         2f:fb:01:86:17:af:62:c9:3e:52:be:7a:2a:79:f8:04:43:4c:
         7c:29:8c:77:a8:c9:c4:6f:df:bb:13:6d:60:ec:b8:18:9a:f7:
         29:3a:10:97:e2:87:e9:8d:3f:a9:46:d9:ab:20:34:9d:f5:e1:
         ae:5d:ef:ef:85:e7:4d:66:1c:a0:3a:44:53:d7:99:b1:56:94:
         2b:04:15:3b:0f:52:c3:49:46:a1:40:77:15:74:89:fd:13:d9:
         b1:de:5b:df:91:85:32:d1:72:b1:49:ac:f6:87:94:09:2c:e7:
         4b:24:4a:5d:c5:49:ce:27:3f:97:0f:fc:f2:6e:3d:91:e7:17:
         25:ee:cf:a5:d5:2b:b3:be:35:3d:ca:74:f6:90:9e:cd:b3:d3:
         f8:b4:cd:6a:55:b4:36:e0:76:9a:5a:b0:0e:8b:28:4e:7b:e2:
         d1:6b:20:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org