Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/97stN-xmcrgAdIoTd0D72UrB3IA.roa
File:                     97stN-xmcrgAdIoTd0D72UrB3IA.roa (raw, json)
Hash identifier:          1nTNAh2qavXkUDgvUp/WvjzK3/u8jYuadZGfl7NePDk=
Subject key identifier:   F7:BB:2D:37:EC:66:72:B8:00:74:8A:13:77:40:FB:D9:4A:C1:DC:80
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0191
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/97stN-xmcrgAdIoTd0D72UrB3IA.roa
Signing time:             Mon 20 Feb 2023 07:50:57 +0000
ROA not before:           Mon 20 Feb 2023 07:50:57 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.44/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:50:57 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=F7BB2D37EC6672B800748A137740FBD94AC1DC80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:9e:83:62:56:95:c2:99:fa:f9:6d:27:d1:
                    2c:e6:8e:27:a2:8a:3a:d7:1b:ce:2a:bc:ae:e9:31:
                    07:8f:1d:d6:e2:df:e3:c0:aa:25:2f:fd:47:64:bf:
                    1a:d4:2a:f1:3c:9d:ee:47:7e:fe:9e:ce:b7:b5:c6:
                    d3:66:0e:7a:8a:4f:1b:11:0a:a3:bf:78:46:30:24:
                    7e:be:74:c9:42:2c:7b:7f:b9:78:b8:51:82:99:1f:
                    7e:db:21:59:fe:65:63:2b:ec:e1:5e:9f:24:8c:70:
                    94:0d:18:ba:d0:42:cb:1e:ba:88:35:6a:68:22:8e:
                    02:37:6d:e8:94:12:94:53:1e:5a:9c:02:fb:1a:1a:
                    e6:89:c0:8e:ca:f7:77:67:13:2e:86:0d:b6:65:a9:
                    be:16:15:65:85:72:45:11:63:23:b5:b2:66:52:64:
                    91:01:7f:64:e2:d4:5a:86:e3:0d:0f:39:7b:02:97:
                    a1:31:1e:c7:6b:66:b2:6b:d7:d4:57:a6:fe:f1:3c:
                    90:d3:4a:25:ae:a7:ce:a1:88:cb:37:eb:b2:cf:75:
                    12:24:28:19:d8:2b:c5:88:0e:2b:ce:f8:6f:89:0a:
                    fa:54:a3:30:46:ad:53:27:bb:69:bb:f5:80:eb:80:
                    e8:20:dc:cf:81:10:28:ca:69:73:54:49:05:c9:23:
                    db:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BB:2D:37:EC:66:72:B8:00:74:8A:13:77:40:FB:D9:4A:C1:DC:80
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/97stN-xmcrgAdIoTd0D72UrB3IA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.44/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:95:7c:ba:9f:be:ec:d8:45:40:b0:48:42:af:7e:6e:07:8b:
         8a:c8:43:66:79:f4:e8:9f:02:bc:1f:0d:f3:ac:6c:5f:61:21:
         69:7b:a6:3f:6d:d7:bd:23:b7:33:34:7f:a9:93:a0:7d:0e:6e:
         5d:e1:f0:e1:2d:26:ec:a8:83:1b:44:ee:fa:0f:b8:6e:91:f5:
         b4:51:dc:15:a7:24:5b:8f:a0:66:ef:23:bf:aa:56:04:39:2e:
         f4:06:b8:5d:9a:e2:5a:82:77:1e:39:3d:79:25:17:58:25:02:
         ab:5f:31:cf:53:5c:88:ff:d5:29:65:60:01:6d:80:5c:3a:30:
         42:5b:7b:b7:aa:e1:15:ec:8b:14:e4:c5:c3:3a:2a:11:c9:07:
         e8:17:73:35:a6:0d:c8:6c:ad:c3:c3:e4:a5:47:c7:f0:19:8c:
         06:93:92:96:fb:54:9d:cc:1b:77:dd:25:c7:47:e4:46:79:b2:
         d4:37:21:7f:65:95:26:65:c3:df:30:cb:76:4c:22:53:13:0e:
         77:4a:b3:de:9e:5d:70:87:a8:ad:ea:6e:90:48:b9:b6:27:52:
         bf:1d:f6:d9:ac:18:d5:a6:a1:31:83:f3:37:09:84:84:e1:bb:
         c0:47:e6:c3:64:f6:a9:7f:86:ab:95:21:43:99:53:09:86:58:
         85:6d:0e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org