Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/BRJz-rrf97spJaHl-Yyqk4qEljs.roa
File:                     BRJz-rrf97spJaHl-Yyqk4qEljs.roa (raw, json)
Hash identifier:          lcopdQ+XDJ2kCgbClLMz7vyy42cp2BdhPNE/OXGyBJM=
Subject key identifier:   05:12:73:FA:BA:DF:F7:BB:29:25:A1:E5:F9:8C:AA:93:8A:84:96:3B
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       029C
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/BRJz-rrf97spJaHl-Yyqk4qEljs.roa
Signing time:             Mon 20 Feb 2023 08:05:28 +0000
ROA not before:           Mon 20 Feb 2023 08:05:28 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.170/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668 (0x29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:28 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=051273FABADFF7BB2925A1E5F98CAA938A84963B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:11:e3:fa:17:c5:cf:61:01:01:0d:2e:e7:60:
                    37:c3:4c:73:10:a7:7e:95:dc:cb:bf:90:b6:1b:5a:
                    e5:98:aa:dc:7d:e5:a3:d7:2a:6b:6a:c9:2c:29:d7:
                    2d:51:ce:25:be:dc:ff:d6:21:21:04:d5:04:e0:88:
                    54:24:2a:dd:0e:f7:2d:c2:33:51:76:a0:fc:4c:d7:
                    a4:cf:4a:49:59:2e:0d:92:c2:39:f3:64:36:dc:e5:
                    c9:84:dd:e5:60:2b:2b:03:6e:fd:b8:0a:82:14:8c:
                    36:9d:c7:ba:9a:e2:cb:d3:84:b8:93:83:ca:30:43:
                    bf:8b:47:b8:6a:95:8c:8f:51:f8:3a:7e:d3:6e:01:
                    80:21:15:3b:3a:b5:4a:92:02:d5:94:1b:f8:71:f3:
                    57:64:68:94:53:2e:b8:a4:2d:26:cc:09:61:d0:d3:
                    99:51:c1:98:c5:16:77:69:72:5a:65:12:37:7c:f7:
                    14:52:88:94:65:9b:d5:6e:0b:84:ab:3e:c5:a1:f5:
                    f6:71:f4:d4:03:f5:e0:7a:5d:33:1a:a7:fd:a8:36:
                    a1:fe:ae:d2:a8:77:10:f7:c2:db:40:b9:a1:6f:b3:
                    44:45:be:d0:e9:f9:0e:c3:96:a8:68:cf:31:80:48:
                    d5:0f:19:bf:83:1a:c2:cb:7c:9a:ce:d8:58:35:6a:
                    b4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:12:73:FA:BA:DF:F7:BB:29:25:A1:E5:F9:8C:AA:93:8A:84:96:3B
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/BRJz-rrf97spJaHl-Yyqk4qEljs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.170/32

    Signature Algorithm: sha256WithRSAEncryption
         89:3e:f0:d2:f7:33:fc:25:7e:b7:c7:28:14:4e:3a:75:56:3f:
         0f:1e:89:3b:72:ed:c2:5f:26:73:e4:24:59:b4:11:ff:35:61:
         73:8f:ae:c3:75:0a:0b:45:81:92:9a:c5:f2:0b:fa:61:f0:16:
         16:65:c8:5b:d7:d2:fc:9e:10:fb:53:71:5b:ac:f3:c4:4b:f2:
         4f:2a:1a:2d:4f:9e:50:87:3a:0b:6f:9e:63:2d:eb:04:cb:18:
         32:c4:78:d2:58:30:b5:c6:49:b2:32:bc:3f:b0:a3:58:a7:8f:
         d1:22:d3:ab:fa:8b:1e:bc:2b:01:c9:e3:9d:8d:75:4d:5e:be:
         d8:20:ca:1a:ec:5f:d4:6c:b3:d8:ba:7c:25:24:3b:15:17:cd:
         99:3d:1b:33:14:3b:28:bd:1d:01:6c:98:6c:98:c5:d0:25:44:
         f9:0d:f6:d2:72:27:a7:30:69:d5:97:19:d0:95:58:36:d9:38:
         88:61:30:54:d2:8b:f1:59:a1:f7:07:14:89:46:c8:4f:7f:7e:
         52:96:0b:65:90:a5:08:08:2e:85:cf:8c:f4:a2:af:98:e9:d5:
         56:fd:05:d2:0f:cc:88:31:0c:5c:83:0b:bf:be:9f:20:9e:9d:
         64:95:c8:7d:9f:b7:1e:d0:c5:c9:86:fb:b1:fb:3b:6c:02:c3:
         6b:bc:ce:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org