Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/6NhN0bpBi1zJmTtFvuWms6p8MSY.roa
File:                     6NhN0bpBi1zJmTtFvuWms6p8MSY.roa (raw, json)
Hash identifier:          CRtP1sWfCRXhdBTdDSm6Ju+T7R3rZh6CXub1eGz7u28=
Subject key identifier:   E8:D8:4D:D1:BA:41:8B:5C:C9:99:3B:45:BE:E5:A6:B3:AA:7C:31:26
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       023D
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/6NhN0bpBi1zJmTtFvuWms6p8MSY.roa
Signing time:             Mon 20 Feb 2023 08:01:22 +0000
ROA not before:           Mon 20 Feb 2023 08:01:22 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.36/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:01:22 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=E8D84DD1BA418B5CC9993B45BEE5A6B3AA7C3126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:0a:a7:db:b0:94:93:f5:5f:c4:ee:cd:de:
                    59:37:0f:4c:f1:26:29:f0:e2:a2:b1:ef:e8:dd:0f:
                    2c:59:2e:ba:f8:1f:d9:b4:88:0b:f4:f0:7d:42:9d:
                    f0:5d:23:03:8c:88:0c:15:dd:37:d6:5d:b8:fa:4d:
                    c8:65:20:5f:fb:61:2b:80:07:7c:db:3b:cf:03:e0:
                    6e:45:63:4a:32:23:6a:79:f5:4c:84:81:cd:b7:ac:
                    2a:55:f3:bc:0f:55:5c:d6:75:e3:62:ae:3a:f8:d4:
                    7a:67:2d:30:b7:3c:e1:e3:e4:8d:54:4b:e3:4e:bc:
                    44:15:7c:73:9d:d0:83:a8:a5:7d:97:2e:cf:98:b3:
                    16:1f:1c:05:d5:54:26:3c:f3:a7:e7:e4:9f:19:5f:
                    5d:6c:a6:83:2a:3f:f8:24:5f:7f:ac:d5:d7:c4:27:
                    b6:ff:6f:a2:c4:a6:1b:4f:08:de:be:7d:6f:58:67:
                    2c:52:f7:12:b8:14:06:0d:ed:3a:be:19:3e:2a:3c:
                    b7:f2:48:6d:b2:97:6f:b1:63:09:85:21:82:ce:6f:
                    61:5e:3e:91:85:4d:93:5b:3b:e3:c7:1f:6f:7c:17:
                    d0:3a:67:5d:a5:b1:21:57:ec:2a:92:f0:b5:dd:35:
                    e1:cb:4d:66:db:69:98:31:f4:49:2a:4f:44:68:e0:
                    53:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D8:4D:D1:BA:41:8B:5C:C9:99:3B:45:BE:E5:A6:B3:AA:7C:31:26
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/6NhN0bpBi1zJmTtFvuWms6p8MSY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.36/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:12:b4:a2:0f:ad:d8:a2:b9:dc:98:3b:12:44:f6:9b:75:c7:
         74:e7:47:80:50:04:aa:1a:6e:05:83:13:ce:d8:7c:2d:54:db:
         c9:71:9c:3c:00:e4:54:8f:e6:83:54:25:de:74:88:2b:33:61:
         4c:a4:1f:f1:2b:bc:38:a4:f7:7e:95:b7:36:8e:50:91:1d:71:
         a9:6d:47:d9:9b:f5:c6:df:c8:00:3e:4d:12:e2:d1:88:cb:60:
         8f:18:61:19:6e:50:a0:03:64:d2:07:16:d3:f9:95:25:5e:8f:
         e4:46:f4:60:cf:b0:ed:8a:dd:36:6b:6a:39:92:cb:03:21:5c:
         36:8d:76:ab:71:f3:88:bf:0c:bd:16:71:c2:af:dd:91:f3:2a:
         39:43:1d:08:e0:58:fa:0d:64:57:b1:10:da:30:a9:67:59:d4:
         ca:ca:d8:89:31:82:a5:d3:56:e9:55:18:64:16:16:e5:05:1b:
         0b:7c:a9:a3:49:b7:26:c2:27:8f:71:36:2b:05:38:6b:4e:d9:
         44:4f:e0:28:22:a0:41:0e:81:0e:1a:dd:11:0f:d7:fc:0d:cd:
         71:6f:2e:30:5a:2c:b2:58:2f:b4:04:6e:fe:bb:50:4d:ec:ad:
         20:6e:e9:e4:76:cb:2f:4e:af:3d:56:32:8b:92:ff:99:4d:cb:
         57:00:b1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org