Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/7vVBfIy9daxNgS6uthmI3y7dyTU.roa
File:                     7vVBfIy9daxNgS6uthmI3y7dyTU.roa (raw, json)
Hash identifier:          SH9FvWiXI0b8ke7/ccM9V7pFEF5dVSaoDGOcCQufs6o=
Subject key identifier:   EE:F5:41:7C:8C:BD:75:AC:4D:81:2E:AE:B6:19:88:DF:2E:DD:C9:35
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0252
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/7vVBfIy9daxNgS6uthmI3y7dyTU.roa
Signing time:             Mon 20 Feb 2023 08:01:30 +0000
ROA not before:           Mon 20 Feb 2023 08:01:30 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.91/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594 (0x252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:01:30 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=EEF5417C8CBD75AC4D812EAEB61988DF2EDDC935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0b:82:83:e6:4a:71:fa:79:0f:22:db:8a:e3:
                    5c:d0:36:09:c1:69:e8:ee:56:da:17:08:c9:4a:bb:
                    96:ad:ac:1c:c1:12:90:55:f9:36:0e:36:81:bc:57:
                    62:c5:33:b0:f7:68:97:e8:3d:9a:14:0b:a8:4d:19:
                    0c:d8:db:c7:54:20:f1:94:27:8c:a5:de:d6:db:79:
                    d4:89:07:15:8d:17:e0:23:44:d5:31:20:0e:77:1b:
                    05:bf:b6:e2:ec:16:0c:83:e6:23:e6:95:8b:9b:0e:
                    16:18:b9:8d:2c:9b:db:3f:3a:7e:81:37:ed:dd:f3:
                    20:9a:cc:d1:84:a9:6a:4e:1d:d8:74:e6:7f:ed:d3:
                    52:bd:5a:60:b8:95:e4:0e:58:55:1d:52:ec:ad:85:
                    37:2f:ea:9a:21:6d:03:98:c8:c4:8e:22:34:ec:3b:
                    5c:88:a7:16:16:89:f5:5b:43:f6:43:4a:bc:de:43:
                    b2:19:6a:46:fe:bf:bf:a3:31:ac:c1:96:ba:77:87:
                    73:3d:b5:91:c8:83:32:01:78:67:23:ce:b8:87:6b:
                    db:56:5d:c0:71:59:a3:ec:64:f3:95:4a:28:54:b3:
                    bd:6a:0e:0a:57:81:0d:63:24:5e:53:7e:44:2e:ff:
                    a8:5c:27:03:d3:65:92:36:ab:ed:28:1f:69:02:7c:
                    17:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F5:41:7C:8C:BD:75:AC:4D:81:2E:AE:B6:19:88:DF:2E:DD:C9:35
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/7vVBfIy9daxNgS6uthmI3y7dyTU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.91/32

    Signature Algorithm: sha256WithRSAEncryption
         99:24:c4:f9:c8:02:4b:69:43:b9:83:6a:1c:64:c0:bf:d5:45:
         e2:81:70:50:3f:f1:02:21:79:de:39:57:e9:6c:1e:c9:7b:83:
         bf:4d:41:56:3b:ee:c2:f5:8f:39:d1:28:a5:16:07:8c:46:a4:
         31:f8:a3:62:35:30:8c:ef:9c:b6:e6:a1:95:62:45:64:4d:82:
         ea:86:3b:63:00:3e:39:6f:6e:97:de:c5:7f:1c:72:21:4b:1b:
         65:4c:76:1e:b9:f4:d4:13:6e:2d:f2:18:1c:f5:d8:53:05:6d:
         99:be:6f:9e:47:f1:f8:80:46:38:4a:71:1c:ce:fe:8f:13:f0:
         3c:4a:c8:53:dd:1b:ed:b4:90:c9:db:6d:95:5f:31:40:f2:6c:
         6b:a0:80:4d:85:61:b9:cc:5b:51:af:93:3b:a0:09:6f:36:7a:
         5e:c7:0c:94:d2:a2:71:fd:e7:8b:a6:04:d0:86:7d:41:1a:45:
         fa:3d:c7:11:fc:ae:92:35:b6:de:7a:57:41:d7:a7:57:c7:d6:
         d3:56:8d:70:ea:62:ec:43:bf:b7:56:67:38:b6:fd:57:ee:fc:
         a8:3f:91:5d:79:ec:22:b8:b4:80:38:cd:59:ed:36:1f:f2:83:
         6b:91:35:aa:17:d4:20:e9:72:57:59:4f:11:06:a1:95:0b:43:
         70:f0:f7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org