Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/COOmeA0aNP7c9f0zV-9k4WV9j_A.roa
File:                     COOmeA0aNP7c9f0zV-9k4WV9j_A.roa (raw, json)
Hash identifier:          gw7Cr5rjRBxfYgnxsOZPSsGMbmmoFMqFcekMs5Sol48=
Subject key identifier:   08:E3:A6:78:0D:1A:34:FE:DC:F5:FD:33:57:EF:64:E1:65:7D:8F:F0
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01A5
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/COOmeA0aNP7c9f0zV-9k4WV9j_A.roa
Signing time:             Mon 20 Feb 2023 07:53:11 +0000
ROA not before:           Mon 20 Feb 2023 07:53:11 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.91/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:11 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=08E3A6780D1A34FEDCF5FD3357EF64E1657D8FF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1a:af:9b:69:0e:80:17:16:58:76:12:9f:04:
                    55:d3:a0:b9:53:66:a8:7a:1b:2c:f2:44:04:c5:4d:
                    30:e8:e9:30:75:98:4b:a4:3c:c0:a3:a9:52:30:3f:
                    fc:ff:ec:c2:70:dc:3a:21:ab:c0:40:44:8b:62:6c:
                    21:da:19:3d:d6:51:51:53:00:a5:56:d6:0a:34:f0:
                    10:6c:c8:f0:63:de:8c:1c:14:3b:50:15:e4:a3:bf:
                    ee:a0:d2:43:86:8c:8e:76:6b:47:38:b0:aa:e4:9b:
                    9d:03:d5:90:a6:ea:f2:7a:15:e9:9e:6b:4a:15:61:
                    dd:ef:ed:a9:f8:55:06:1f:77:80:41:56:f9:4d:3c:
                    5f:65:97:c4:6b:24:52:46:7c:2d:7c:96:ae:4a:b9:
                    4b:8d:19:13:82:8b:f8:72:b4:cc:d2:33:20:d3:46:
                    ed:8c:58:99:f6:bb:36:53:f6:12:3b:67:a2:a2:79:
                    89:7c:e1:e7:fb:f9:bd:f8:77:b6:fd:d7:e4:61:2e:
                    50:c3:84:22:8b:b5:22:24:a8:ef:39:00:87:14:4b:
                    38:81:70:08:1c:f1:2b:b1:cc:a5:17:03:45:6e:ff:
                    ca:33:10:b0:f4:02:ae:3f:28:b7:7f:52:02:66:a5:
                    e9:77:4c:f6:50:a7:20:b0:6f:c2:19:8f:fd:3e:14:
                    b7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E3:A6:78:0D:1A:34:FE:DC:F5:FD:33:57:EF:64:E1:65:7D:8F:F0
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/COOmeA0aNP7c9f0zV-9k4WV9j_A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.91/32

    Signature Algorithm: sha256WithRSAEncryption
         59:fd:c0:c2:e9:f2:4d:14:55:78:08:55:fa:97:6b:8d:f4:16:
         d7:06:c3:42:ea:00:84:d4:11:ec:e0:b3:3d:1d:08:e4:72:41:
         a1:44:4d:ca:14:06:df:da:ba:e2:b1:43:99:37:9d:73:0f:04:
         8c:78:3c:cd:32:1e:30:6b:96:68:9d:5d:3a:8b:71:f9:39:9d:
         a1:22:b5:d9:ba:9d:f1:bf:53:40:7b:9b:60:a4:76:43:a3:f2:
         a7:b7:91:20:53:e1:2b:fc:b2:26:77:68:48:c0:90:19:bb:b4:
         fd:e5:43:2e:b1:94:43:d1:7b:90:b4:c8:d0:6e:8c:e0:5e:bf:
         11:1e:a5:e8:56:9c:ed:64:e3:1d:27:96:e8:88:25:ce:37:81:
         be:37:0f:b9:95:78:7f:7a:46:ea:88:13:54:f5:d7:5f:5e:f0:
         6f:c9:a5:78:8e:ae:5c:c8:d2:60:7a:d9:c5:b8:7b:f6:d6:17:
         5b:d8:51:d6:aa:96:f6:f9:6a:16:3a:3e:e9:42:67:25:0a:85:
         72:4d:34:0e:96:53:32:1e:da:67:f3:3d:6e:3a:61:16:40:e5:
         ee:81:47:73:bb:24:7e:b7:e8:d2:a1:22:46:1d:d5:b8:8d:0b:
         f2:77:cf:40:06:70:b9:da:b0:a4:36:e5:3b:fa:fb:1e:92:1a:
         4e:11:7d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org