Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/5Io6ONXCEuywe68CMbKUzO7b8LA.roa
File:                     5Io6ONXCEuywe68CMbKUzO7b8LA.roa (raw, json)
Hash identifier:          631QgIQbHMtV2J6S3TFQGeRbhb4OpDFiv1w/lL03WCo=
Subject key identifier:   E4:8A:3A:38:D5:C2:12:EC:B0:7B:AF:02:31:B2:94:CC:EE:DB:F0:B0
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02A0
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/5Io6ONXCEuywe68CMbKUzO7b8LA.roa
Signing time:             Mon 20 Feb 2023 08:05:29 +0000
ROA not before:           Mon 20 Feb 2023 08:05:29 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.169/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672 (0x2a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:29 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=E48A3A38D5C212ECB07BAF0231B294CCEEDBF0B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0c:f0:9f:ef:2e:8f:d5:b2:f6:f9:61:c9:2c:
                    cd:70:25:5c:92:3d:a3:f3:99:cb:c9:b8:b4:6b:f7:
                    be:4b:d7:2b:99:1a:f3:85:d1:1a:ec:a5:97:95:9c:
                    2f:f1:1c:63:b4:bc:35:c4:1f:59:06:5f:00:24:e2:
                    36:31:d5:0c:3d:71:1a:f6:d5:93:8a:d5:c4:99:fb:
                    bb:91:2d:f6:5b:f1:f4:5b:97:17:89:df:38:ba:f4:
                    16:aa:88:48:e2:7f:43:03:b8:c7:64:41:9e:b0:4d:
                    7a:1d:a6:05:00:ac:f9:83:6b:2a:65:67:d2:e9:ef:
                    85:e8:76:53:0b:68:71:5a:20:d5:e2:ab:5b:fe:81:
                    25:85:f7:05:f2:dc:e2:c9:f4:18:ed:d3:56:36:fa:
                    12:df:f3:b8:66:78:f5:c8:b2:f2:5b:93:85:96:fb:
                    57:10:56:4c:3b:89:6e:e9:12:48:1d:0b:f7:06:38:
                    da:54:73:13:fe:8c:9d:27:27:7b:a7:1f:b8:61:20:
                    29:fe:fb:5b:b0:75:cc:29:b9:0e:bd:25:c3:c0:d2:
                    36:45:c8:61:72:e1:bc:88:b8:b9:c8:6c:4e:47:68:
                    9c:3a:48:c4:85:b1:16:c0:4a:a6:9c:8c:11:0a:7e:
                    52:ab:d3:76:65:e6:a6:d1:7f:5c:80:a4:60:73:2c:
                    58:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8A:3A:38:D5:C2:12:EC:B0:7B:AF:02:31:B2:94:CC:EE:DB:F0:B0
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/5Io6ONXCEuywe68CMbKUzO7b8LA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.169/32

    Signature Algorithm: sha256WithRSAEncryption
         09:51:47:bc:2f:0b:d2:3f:ea:4d:39:4e:62:3d:66:8a:4e:8f:
         a2:43:87:07:88:44:83:3b:3c:9e:fc:06:99:d9:c5:a2:e0:43:
         5c:f3:0a:33:3f:0c:ce:66:7e:bb:a8:c3:ea:9e:56:19:07:87:
         3b:e8:8e:0a:70:63:06:3e:44:f4:e4:79:86:cf:c8:13:ce:d2:
         05:74:4d:ad:ee:25:5b:dc:9a:e3:d1:71:ce:7e:50:09:b4:89:
         3b:8b:81:60:8b:01:2b:b1:ab:59:c9:3a:f9:5d:8c:12:de:bb:
         47:f8:e9:24:e9:df:37:36:be:3d:61:a3:97:66:9f:6f:d2:78:
         2f:0f:52:ff:22:d9:8c:b8:47:e7:22:42:d1:80:37:17:65:62:
         d4:cf:3f:b2:ba:ba:aa:da:df:b7:13:0c:42:bc:a6:4c:f7:58:
         a6:87:0e:32:4f:d9:20:b9:e8:a4:6f:62:c4:ea:28:04:dc:c9:
         6a:1d:11:26:84:e9:aa:9b:fa:c2:e1:11:21:e4:f0:25:7b:06:
         a3:d2:9f:50:eb:c4:d3:29:0c:65:0c:ab:d9:b2:27:a9:2e:86:
         34:32:51:b9:f0:e5:2e:51:39:9d:35:37:ce:60:ad:f8:f2:8d:
         b0:a3:2f:88:56:e3:08:be:de:0a:64:26:35:36:37:8b:4a:9f:
         bc:e0:00:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org