Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/9V0lEKZJejJftnekwR8-xwO59MM.roa
File:                     9V0lEKZJejJftnekwR8-xwO59MM.roa (raw, json)
Hash identifier:          bTVz8MlAdYr106VwqqVc31Cne/vozuaI7N1DEVO+3io=
Subject key identifier:   F5:5D:25:10:A6:49:7A:32:5F:B6:77:A4:C1:1F:3E:C7:03:B9:F4:C3
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01D8
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/9V0lEKZJejJftnekwR8-xwO59MM.roa
Signing time:             Mon 20 Feb 2023 07:55:27 +0000
ROA not before:           Mon 20 Feb 2023 07:55:27 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.79/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:55:27 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=F55D2510A6497A325FB677A4C11F3EC703B9F4C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b1:69:ef:67:d9:a7:41:07:2e:dc:f7:f0:2e:
                    cd:23:af:51:52:53:af:cb:6a:41:51:e0:d6:f5:23:
                    bf:35:ed:c2:28:28:cd:66:f5:7d:62:18:55:ef:7e:
                    25:67:df:65:56:70:e6:ac:31:08:9b:88:8a:40:24:
                    91:25:58:a8:4e:7a:79:7c:8f:d0:d5:f9:a4:6f:0c:
                    13:7c:84:ff:ae:67:33:e4:96:90:23:3d:d0:79:9c:
                    c7:72:f2:30:56:1f:d3:d3:65:ea:1f:70:f0:90:ac:
                    8f:8b:35:98:dd:b0:66:a8:b8:ed:de:65:73:5d:ef:
                    68:92:68:7c:7a:59:e0:0f:08:53:54:74:fa:6d:e5:
                    77:17:23:f2:a2:d0:d3:63:72:0b:ba:0a:27:06:68:
                    fe:6a:45:78:3d:24:15:41:5c:10:8a:e9:0c:3b:6d:
                    83:a5:28:cb:10:05:77:da:a1:84:3b:e3:9b:ba:fa:
                    7e:8c:e1:c9:1b:ea:2f:65:28:4f:ca:38:f1:33:e3:
                    b7:21:5f:ee:0b:e0:f1:0c:72:c8:00:d4:cb:9d:f0:
                    e2:0c:28:56:f4:52:54:fc:d1:de:f2:d0:91:54:0c:
                    13:bd:e1:bf:ef:ed:74:ad:53:c1:f2:c5:a0:62:55:
                    ce:c3:a4:d7:e1:5d:00:eb:98:51:ff:46:fb:c6:f0:
                    87:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5D:25:10:A6:49:7A:32:5F:B6:77:A4:C1:1F:3E:C7:03:B9:F4:C3
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/9V0lEKZJejJftnekwR8-xwO59MM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.79/32

    Signature Algorithm: sha256WithRSAEncryption
         55:1b:a2:cd:fa:54:7c:d8:42:6c:27:b1:41:e0:16:85:8e:ce:
         fa:00:47:8d:43:53:ad:39:df:36:23:ea:72:25:90:d3:dc:68:
         77:72:d3:67:bf:48:50:a9:33:06:53:50:fa:f9:83:a4:28:ac:
         bf:0c:2a:eb:08:c6:fe:24:fe:80:7a:51:23:0c:c3:bf:d2:ad:
         a8:e1:9f:14:20:ea:58:89:85:bf:7d:ff:3c:0c:62:92:fa:e7:
         c3:b4:d1:39:f2:6e:f6:92:0c:23:42:ef:54:8f:56:61:22:43:
         49:5d:3f:4c:3f:bd:30:ce:51:6a:fb:ec:ca:31:bb:5d:11:7d:
         f0:6d:26:0f:93:0f:18:4d:b4:04:01:b5:f8:5f:b6:2b:c6:77:
         c0:6d:f6:c3:e2:db:3d:05:6a:9f:21:11:97:37:b0:e9:1e:82:
         6a:a0:d3:89:f4:b7:53:a2:e1:31:7d:83:91:ba:66:5d:78:e9:
         40:d3:92:c3:51:93:af:1b:34:81:d6:dd:ae:09:03:58:4c:a0:
         84:33:6e:d4:51:a5:64:ed:12:43:be:54:d1:04:06:d8:f1:58:
         00:56:3a:d7:e0:d9:1e:ad:a0:0d:c1:6a:2e:d6:f5:0d:cd:f1:
         6f:76:f2:1c:56:99:19:ca:95:9b:c3:99:ea:b7:a6:00:69:5e:
         97:d3:8a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org