Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/BRLO2tERPLVG-DxLxaKjFyeebDg.roa
File:                     BRLO2tERPLVG-DxLxaKjFyeebDg.roa (raw, json)
Hash identifier:          jItsfj93kFSfqb8stQwNE11mPzZHrSP/pX45qmc7SrU=
Subject key identifier:   05:12:CE:DA:D1:11:3C:B5:46:F8:3C:4B:C5:A2:A3:17:27:9E:6C:38
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01FC
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/BRLO2tERPLVG-DxLxaKjFyeebDg.roa
Signing time:             Mon 20 Feb 2023 07:57:31 +0000
ROA not before:           Mon 20 Feb 2023 07:57:31 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.222/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:31 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=0512CEDAD1113CB546F83C4BC5A2A317279E6C38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:63:e5:5d:bf:41:96:ec:0b:3c:d7:46:60:13:
                    d8:3e:28:b9:57:42:9d:67:18:0d:51:30:eb:f3:09:
                    9a:47:03:40:e9:6b:19:ca:81:aa:ff:8b:59:01:e7:
                    58:e2:10:fb:bf:77:6d:03:26:6f:43:b5:34:bf:b3:
                    4f:b3:55:9d:b7:12:b4:ef:7a:55:8b:bd:26:9a:b8:
                    65:15:d6:9f:fd:45:c4:a3:e8:1b:55:dc:cc:fe:75:
                    34:b2:9b:9f:b4:93:14:43:25:73:7a:5d:46:fa:7d:
                    f2:fb:ce:bc:37:c1:b2:14:2b:8d:74:b7:f1:9a:72:
                    76:64:63:08:ba:ee:03:49:63:b2:8b:65:a7:0e:f8:
                    12:1f:55:66:61:f3:97:89:f8:89:f4:0a:8c:cd:f1:
                    cd:01:ba:88:1e:0b:9d:eb:24:06:f0:ed:1e:ef:c3:
                    fb:e3:12:78:ce:48:12:3a:18:32:5f:e1:fe:c6:81:
                    e8:91:16:29:8b:e2:03:04:12:97:04:8c:d1:39:74:
                    ba:90:28:0a:88:dd:b0:2b:f5:88:ac:32:ad:45:2e:
                    50:ef:04:f2:9f:a8:8c:a6:33:a4:d6:c8:eb:cb:4e:
                    3b:60:96:68:50:e9:b6:69:a7:6a:b6:7a:ff:9e:f9:
                    b4:25:87:6c:05:1f:96:a0:16:c8:8e:a5:04:07:64:
                    18:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:12:CE:DA:D1:11:3C:B5:46:F8:3C:4B:C5:A2:A3:17:27:9E:6C:38
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/BRLO2tERPLVG-DxLxaKjFyeebDg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.222/32

    Signature Algorithm: sha256WithRSAEncryption
         88:82:31:6c:cf:3d:c3:ca:5b:47:8b:84:d1:23:c8:67:46:cb:
         7a:69:c3:89:48:5e:44:3e:11:e9:48:6a:33:d1:21:f3:1f:a4:
         f6:1b:90:ce:96:52:1d:44:95:4b:03:be:9c:c8:be:3c:66:0a:
         4a:a1:18:dc:2b:98:f8:41:93:d8:a0:c1:1d:79:58:0b:e1:64:
         a4:ed:a6:a3:d8:10:24:c5:cc:5b:c2:7c:20:3c:ad:22:41:47:
         97:b9:8b:14:9f:c0:0c:98:09:51:d2:47:9b:7b:eb:f8:c1:54:
         dd:d5:ca:98:08:91:f5:cc:fb:67:d6:f9:0c:f6:a2:68:80:c8:
         1b:a8:58:70:ad:06:ed:69:ad:a3:f0:8d:46:d8:a8:23:a5:df:
         f0:0c:f3:f8:b0:f8:9e:88:36:0c:fb:4f:25:6b:c2:b5:69:99:
         5a:57:da:18:e6:b2:d4:7c:bd:a7:5e:96:72:26:6d:1f:3c:7d:
         46:81:06:b7:e1:22:b3:0a:19:f1:f9:c7:f8:58:fb:82:6f:cc:
         0c:53:29:87:9e:cf:f4:dd:45:ff:bb:ff:16:df:f5:40:c9:53:
         35:ff:cf:e3:2e:14:62:09:8f:4b:07:d4:0a:21:33:ab:e4:36:
         f7:61:a0:47:91:02:01:3f:ac:75:62:9f:ac:a5:c7:73:e8:3d:
         4e:d7:fd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org