Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/BwasYX--FnSdpA-nUT4QQXOBGKo.roa
File:                     BwasYX--FnSdpA-nUT4QQXOBGKo.roa (raw, json)
Hash identifier:          PGGaOhJOI5JCVcPGiMzIIP+n9fBzr/2zJDX5umM3D4U=
Subject key identifier:   07:06:AC:61:7F:BE:16:74:9D:A4:0F:A7:51:3E:10:41:73:81:18:AA
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0193
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/BwasYX--FnSdpA-nUT4QQXOBGKo.roa
Signing time:             Mon 20 Feb 2023 07:50:57 +0000
ROA not before:           Mon 20 Feb 2023 07:50:57 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.100/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:50:57 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=0706AC617FBE16749DA40FA7513E1041738118AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:79:8d:d3:f5:74:22:a3:82:8f:61:92:90:56:
                    4a:93:ce:40:95:4f:a9:23:bc:51:8c:a5:f9:44:3e:
                    69:fb:67:4d:04:39:12:35:e7:80:b9:5f:75:0b:fa:
                    48:50:25:4e:04:a4:b4:ab:8e:0e:11:35:85:f2:f0:
                    a3:c3:c2:d9:ac:7d:a4:f2:73:3c:40:23:0a:a5:d4:
                    d6:03:be:7e:c4:fa:86:fa:9b:04:04:2b:8e:5b:e0:
                    62:ad:ea:3d:4f:f0:0e:8a:73:2e:e3:6d:a1:55:e0:
                    6e:0e:0f:11:af:f7:0a:21:6e:b8:6e:5d:e1:aa:a6:
                    ef:e9:d3:c4:04:1d:25:78:54:0e:8f:fa:57:93:80:
                    40:0b:26:31:ca:9a:2b:ae:04:41:ea:c3:62:39:c3:
                    b0:ad:dd:6d:a2:99:40:8a:14:d0:1d:98:9a:94:a9:
                    b3:2a:25:aa:7f:6b:39:16:8a:f0:8b:fe:63:8e:2f:
                    17:1c:1f:c1:f7:0d:6f:8e:94:ec:4b:74:53:c6:23:
                    00:6e:48:d5:54:8d:15:1f:79:71:0c:88:fb:e0:b7:
                    31:4a:f2:63:6e:12:d1:3a:a2:ed:2c:4c:8e:b1:fe:
                    9a:e4:7b:c5:b5:e2:0a:45:39:c0:db:85:8a:08:eb:
                    15:29:7b:df:f1:c0:8c:32:79:bf:f2:fa:57:ba:4c:
                    a8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:06:AC:61:7F:BE:16:74:9D:A4:0F:A7:51:3E:10:41:73:81:18:AA
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/BwasYX--FnSdpA-nUT4QQXOBGKo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.100/32

    Signature Algorithm: sha256WithRSAEncryption
         67:3f:18:ed:a1:6e:6d:9f:bc:ed:2b:c6:b8:54:ef:61:e3:c1:
         b4:4e:03:ae:9c:0a:eb:a1:59:1b:ed:3e:14:ff:f1:3c:29:64:
         19:8f:24:7b:2f:c2:15:85:29:6c:27:91:de:f4:fd:39:78:ba:
         97:38:2c:29:8e:0c:d3:96:89:17:57:26:35:f4:72:a7:32:e0:
         e2:24:7a:ed:fa:d8:35:c0:ac:f0:1f:35:69:92:8f:ef:29:ac:
         dc:c2:eb:b8:84:e9:88:34:15:bb:8b:3f:a4:fe:62:2e:19:11:
         7d:3c:8b:3e:34:23:03:be:63:07:c3:1c:e3:30:ba:1b:95:46:
         41:fa:ad:6d:23:4a:b8:f0:a6:33:59:94:47:d1:c1:de:65:81:
         d4:d4:c7:67:cd:aa:3c:a6:8d:21:2f:39:48:02:52:09:17:1d:
         52:f0:b3:d8:d7:07:79:76:3d:f4:33:65:fa:b1:2e:19:51:5f:
         70:0a:9d:61:f3:ad:2f:c3:dc:26:46:79:28:9a:ea:db:d4:8a:
         2c:2f:43:76:3c:2c:b9:df:f5:04:89:2e:20:02:ed:27:b2:55:
         ab:bd:1f:0c:37:b2:cf:09:86:a9:56:7a:8b:31:48:cd:3c:42:
         e4:38:50:d3:8f:75:db:3f:0e:6e:e1:09:71:34:7f:0c:33:b4:
         61:fc:fe:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org