Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/9L3fzDbRzmFxEwXbxTbMqBdN55w.roa
File:                     9L3fzDbRzmFxEwXbxTbMqBdN55w.roa (raw, json)
Hash identifier:          ebyvvwnpawMMJgd5Hh0oVH2ZHIPLK8rbmgZOxbQcLQw=
Subject key identifier:   F4:BD:DF:CC:36:D1:CE:61:71:13:05:DB:C5:36:CC:A8:17:4D:E7:9C
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       5F
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/9L3fzDbRzmFxEwXbxTbMqBdN55w.roa
Signing time:             Fri 10 Feb 2023 07:43:32 +0000
ROA not before:           Fri 10 Feb 2023 07:43:32 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.253/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:43:32 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=F4BDDFCC36D1CE61711305DBC536CCA8174DE79C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:f7:f9:f6:36:1a:73:78:b9:46:f9:70:7c:
                    7e:94:4a:6c:34:ea:59:2e:de:d4:5b:d2:ec:64:f7:
                    02:3c:0d:e6:cf:df:88:5b:b0:db:74:05:99:ae:e9:
                    18:c3:ad:f4:f7:61:46:80:6a:f8:15:bb:bc:f8:ef:
                    4f:fe:c1:3a:e4:10:4d:f9:30:cf:2b:6a:d4:7f:b0:
                    55:4a:5a:92:2f:91:2f:f7:de:21:39:13:0d:6a:14:
                    92:62:b1:3c:84:77:a2:6b:c8:4c:78:0c:03:d7:49:
                    ab:89:9e:71:8d:b2:57:33:8d:a7:e9:6b:56:35:fa:
                    2f:0a:11:1d:0c:07:b9:45:c6:06:5e:a1:d7:e9:53:
                    9b:75:4f:62:84:3b:03:51:d3:06:ec:15:1e:42:c5:
                    3f:9a:f9:a9:6f:c7:0d:c7:30:d2:ad:d0:2b:63:25:
                    22:f5:7a:bf:0c:55:27:f4:91:49:b0:a4:cf:ab:00:
                    95:bf:e4:0a:2b:92:df:af:49:a2:2f:c8:b5:95:cd:
                    68:9d:ed:34:02:4f:49:c8:ab:4a:81:3c:dd:93:ba:
                    ba:03:ee:da:65:ef:56:cc:66:54:0f:9a:9e:2b:ec:
                    25:19:8d:8f:b2:bd:2d:05:32:59:65:db:2f:19:1b:
                    fd:12:c7:b3:51:8a:31:cd:d3:38:dc:7c:7b:99:65:
                    78:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BD:DF:CC:36:D1:CE:61:71:13:05:DB:C5:36:CC:A8:17:4D:E7:9C
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/9L3fzDbRzmFxEwXbxTbMqBdN55w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.253/32

    Signature Algorithm: sha256WithRSAEncryption
         51:2f:ac:27:f2:36:8a:88:3f:86:ca:32:b4:75:e3:d3:f2:0f:
         14:5e:a9:de:77:eb:24:22:cf:b1:0d:bc:6f:05:52:8b:50:c3:
         b3:5a:47:b9:02:20:9d:28:71:a2:cd:bf:e5:83:9d:dd:d0:ae:
         00:55:14:2c:87:d3:1f:f9:46:84:1e:44:df:aa:de:f1:44:5f:
         9e:75:4e:d6:05:d7:b1:2a:31:84:c0:f9:7c:be:88:67:3f:09:
         67:8b:0b:5b:a5:a6:a2:3e:88:2e:8b:c8:88:66:59:1e:7e:d7:
         6c:21:41:86:ed:91:ee:b8:3f:55:69:4f:85:ae:c8:29:53:52:
         af:51:89:69:a0:f6:67:e8:89:dd:29:ca:c2:b3:b8:d3:15:34:
         b1:28:f2:3f:2b:1f:3b:c1:ff:69:03:75:ad:1c:c7:98:a4:cc:
         97:db:79:91:af:5f:ce:6f:d8:cc:ad:79:3c:1a:fa:18:25:c4:
         5b:a4:c1:61:55:51:66:09:c1:c7:6a:68:66:11:74:41:df:2e:
         46:95:74:31:17:77:58:fe:79:fe:a0:8e:cd:db:cc:bc:a8:2e:
         b3:69:ab:08:6a:04:20:57:bf:dd:61:e7:d8:cc:8c:2c:24:43:
         6d:aa:62:c3:23:62:fa:8c:5b:18:d5:cf:1a:47:d9:b1:b0:2c:
         41:3b:98:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org