Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/5K2pHgKPB1mEGoPCYOgDG2s1juE.roa
File:                     5K2pHgKPB1mEGoPCYOgDG2s1juE.roa (raw, json)
Hash identifier:          szhSWVkRZ+TZbZOEhnbh2eDYy1LYp51FwgLT+Vx2tGE=
Subject key identifier:   E4:AD:A9:1E:02:8F:07:59:84:1A:83:C2:60:E8:03:1B:6B:35:8E:E1
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0269
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/5K2pHgKPB1mEGoPCYOgDG2s1juE.roa
Signing time:             Mon 20 Feb 2023 08:03:27 +0000
ROA not before:           Mon 20 Feb 2023 08:03:27 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.143/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:03:27 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=E4ADA91E028F0759841A83C260E8031B6B358EE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:54:90:7e:73:ce:94:e4:e3:d2:e5:43:0a:5d:
                    c5:8e:56:f3:a1:dc:7f:f4:66:a0:93:c4:01:38:1f:
                    41:84:2a:9f:c0:75:45:32:df:a6:96:41:81:67:2e:
                    35:3d:af:3b:72:84:e7:f8:0b:ef:02:56:1c:40:89:
                    1e:d5:76:39:8c:30:40:a0:70:49:b7:18:9b:f9:bf:
                    e9:ef:f2:04:21:f6:2d:37:8e:70:d4:f6:dd:e3:ab:
                    57:4c:6a:6c:94:4e:c2:53:7b:06:82:19:45:88:cd:
                    52:5b:cb:f1:25:e0:19:cb:06:fa:74:f9:d6:34:a9:
                    bb:c0:35:60:78:b6:e2:9e:7a:33:3a:9b:c6:79:45:
                    27:cc:3c:b7:ca:2f:3c:8e:08:e8:a4:69:47:e7:a9:
                    1d:bc:4f:bf:6b:1c:0a:75:34:1d:c0:9d:fc:ca:56:
                    07:95:10:88:1c:d1:7b:d5:d0:9c:6a:b4:c4:0b:3a:
                    96:9c:50:e9:30:de:f0:cb:df:6c:50:cd:12:a6:0a:
                    c5:97:93:ab:16:cb:5f:2d:38:cf:55:72:62:2c:ed:
                    6e:89:cd:1d:8a:06:ae:4a:f8:63:91:f0:c3:e1:f7:
                    37:7f:d7:bb:df:6e:87:96:f0:87:25:a5:da:05:2d:
                    e1:4d:c5:e3:89:6e:33:75:13:e0:9a:02:26:71:2d:
                    90:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AD:A9:1E:02:8F:07:59:84:1A:83:C2:60:E8:03:1B:6B:35:8E:E1
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/5K2pHgKPB1mEGoPCYOgDG2s1juE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.143/32

    Signature Algorithm: sha256WithRSAEncryption
         20:a8:76:fa:3c:b1:ca:19:54:b9:90:a7:80:24:a4:e9:d7:53:
         7c:db:32:8e:45:df:9e:01:8b:7c:e3:98:06:27:b2:66:4d:16:
         73:6e:6c:14:37:bb:b8:6e:b1:b6:f7:70:ee:8a:85:dc:b6:db:
         43:9d:d7:8f:45:61:32:b0:ae:23:8b:a3:d9:ff:be:77:e6:91:
         67:b2:b6:85:b3:d3:e8:de:53:1c:53:1d:e5:62:05:42:1d:25:
         0d:00:c2:20:47:d8:7f:a2:90:80:53:7c:39:96:b2:50:39:dd:
         e2:cd:58:c8:6f:94:92:3a:51:69:66:1e:45:73:f6:e4:01:03:
         ec:44:75:f9:10:14:ab:5a:b4:86:8a:9d:19:bf:ad:22:fc:7e:
         18:a0:0e:bb:cf:72:a0:ea:6a:24:b1:71:07:90:49:4a:98:b9:
         b5:97:8d:de:2a:06:1c:7b:ce:42:06:5d:67:12:e1:58:b7:fe:
         40:5a:c8:cf:56:e9:3f:c3:2f:69:fa:2a:92:18:84:f5:18:36:
         fe:78:4e:cc:97:99:6e:82:54:e0:eb:55:29:20:cc:d8:f8:16:
         27:8b:ae:37:ea:87:8b:ef:87:e3:c8:59:63:d8:6c:3e:82:34:
         04:e7:f9:45:08:2a:71:44:b8:87:02:f0:5d:c2:3e:75:b1:24:
         9d:c0:51:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org