Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/DJUr0U9_PgXWVlBgWncHorz2tZM.roa
File:                     DJUr0U9_PgXWVlBgWncHorz2tZM.roa (raw, json)
Hash identifier:          Y0/fRlMvjt+sgPdGDpBNdXkOdHGks1xpluhBm/zzqjs=
Subject key identifier:   0C:95:2B:D1:4F:7F:3E:05:D6:56:50:60:5A:77:07:A2:BC:F6:B5:93
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01C3
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/DJUr0U9_PgXWVlBgWncHorz2tZM.roa
Signing time:             Mon 20 Feb 2023 07:55:18 +0000
ROA not before:           Mon 20 Feb 2023 07:55:18 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.195/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:55:18 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=0C952BD14F7F3E05D65650605A7707A2BCF6B593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:44:c6:62:44:96:25:52:ff:b7:24:a1:dd:
                    64:f6:70:10:8d:ec:03:d3:60:0a:15:cb:54:26:91:
                    ef:07:9b:42:d3:1c:bf:55:d8:68:63:8a:bc:d5:63:
                    71:1a:4c:44:ab:61:88:ef:5a:56:47:a0:30:bb:59:
                    10:bc:9e:f6:6b:1e:a9:ce:55:17:c1:35:27:02:9c:
                    d4:76:18:c7:17:0e:b2:fe:34:12:33:1c:6a:18:d9:
                    d4:7a:3e:73:42:4e:0f:99:52:d4:fe:b9:2f:38:10:
                    98:60:a9:92:58:30:51:aa:e4:df:6d:76:ce:af:a4:
                    22:63:3b:1a:ae:05:f7:2d:63:46:37:ba:d5:a2:16:
                    3d:75:df:dc:b6:01:95:6a:c8:68:50:5d:8d:ca:10:
                    6b:4b:95:4c:ce:c5:94:94:1a:48:d6:30:fd:55:06:
                    17:e5:56:06:e4:45:71:33:b5:b2:01:9a:37:57:bf:
                    71:ff:d2:8c:50:bd:aa:fb:54:48:07:ad:e4:08:d4:
                    a5:8f:b1:44:29:cb:dd:a4:86:f5:66:7d:75:f2:13:
                    94:33:63:57:d1:54:87:a6:8c:58:e7:dd:39:41:67:
                    01:af:70:84:de:60:bf:1e:7f:d5:62:21:33:a9:b3:
                    55:dc:ec:69:da:d6:83:2b:f0:4d:22:0c:ac:96:00:
                    5d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:95:2B:D1:4F:7F:3E:05:D6:56:50:60:5A:77:07:A2:BC:F6:B5:93
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/DJUr0U9_PgXWVlBgWncHorz2tZM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.195/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:01:bf:3c:6b:bd:32:38:be:54:df:a6:ef:6c:12:ac:c7:ce:
         c3:ab:49:79:ef:35:91:9b:84:b7:3e:86:a0:8a:70:98:eb:a3:
         1e:d1:0f:ba:57:db:ed:ac:98:4a:c2:cc:2c:e2:aa:38:fb:7b:
         a7:48:7a:7d:c5:2f:de:d2:0b:94:9c:0b:46:1d:dc:9b:fa:d4:
         6a:2e:ab:42:70:35:10:c9:86:33:0b:67:96:e0:39:a3:c9:76:
         85:a4:6b:2e:2e:6f:bf:04:a4:14:65:fe:8f:56:7d:a6:f7:d0:
         d2:a1:95:e8:b7:3d:07:3f:be:ed:7f:83:8d:8d:5d:44:11:25:
         2e:de:e2:a0:09:97:64:c1:47:3b:1d:1c:03:93:4e:09:bf:03:
         ce:22:53:d0:22:46:8a:cd:b7:da:1b:af:b0:70:f8:fa:d9:e9:
         ee:bd:7f:ce:44:ff:62:9e:f9:76:ed:a4:10:3d:13:72:aa:d1:
         b6:7e:94:2e:a0:79:4a:7c:0b:a2:c8:6c:c0:ea:40:c7:44:80:
         f0:e3:2e:f7:e0:db:6d:87:59:c8:fb:bc:08:3b:4c:78:dc:89:
         e2:c7:a2:31:b6:29:ac:f0:d9:11:aa:55:39:18:6e:99:36:b4:
         6e:15:55:be:52:4f:e6:f8:b6:23:6c:16:1a:da:ea:9b:39:05:
         ab:e0:01:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org