Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/DprgRstv2N5X0qSYvm0cjAlz-Tc.roa
File:                     DprgRstv2N5X0qSYvm0cjAlz-Tc.roa (raw, json)
Hash identifier:          lo8K4KJO5dw8tzgnbqABfSAVmmT/LrnfRudWfGmKD4g=
Subject key identifier:   0E:9A:E0:46:CB:6F:D8:DE:57:D2:A4:98:BE:6D:1C:8C:09:73:F9:37
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       024A
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/DprgRstv2N5X0qSYvm0cjAlz-Tc.roa
Signing time:             Mon 20 Feb 2023 08:01:27 +0000
ROA not before:           Mon 20 Feb 2023 08:01:27 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.134/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:01:27 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=0E9AE046CB6FD8DE57D2A498BE6D1C8C0973F937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:96:c9:d1:2f:55:49:9a:13:47:c6:a6:9a:
                    a4:7f:1b:a0:ae:09:24:2d:55:c6:12:ce:6c:ac:1c:
                    eb:8b:7a:41:68:60:6c:8c:0e:9d:59:0c:6e:c6:67:
                    53:d8:e1:e0:f5:2e:3b:c2:77:47:5c:8d:06:c5:5b:
                    76:e0:ec:12:97:8c:c5:dc:d6:92:4b:0d:6b:06:e1:
                    56:3d:1e:aa:a1:0f:34:44:14:5d:88:f2:30:4d:55:
                    26:80:90:f1:90:6b:d3:41:6e:23:c8:07:d5:e7:7d:
                    30:8d:16:31:76:fb:2f:89:8a:4d:4c:00:1f:0c:2b:
                    c9:65:54:a2:04:f6:12:89:ef:90:16:a9:4f:c0:8c:
                    5a:40:a3:ee:37:75:22:f6:e2:d7:f9:13:15:f6:53:
                    4e:3d:13:bd:86:ca:f2:3e:99:aa:e4:a3:f2:c1:81:
                    10:45:23:5f:48:75:22:65:fa:38:46:fe:27:1c:74:
                    bd:08:e5:4e:6b:b6:93:03:2c:46:83:f9:d7:70:e2:
                    ae:7b:d9:69:11:66:75:cf:93:1d:e9:f2:f1:a7:14:
                    b5:0b:7b:4c:d3:2d:f6:92:d9:58:d2:39:01:21:97:
                    c4:9e:e7:3a:85:bc:42:12:5d:12:77:7f:24:b2:2c:
                    b3:31:19:ed:20:7a:1c:86:e2:35:88:e3:fb:84:2b:
                    ae:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9A:E0:46:CB:6F:D8:DE:57:D2:A4:98:BE:6D:1C:8C:09:73:F9:37
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/DprgRstv2N5X0qSYvm0cjAlz-Tc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.134/32

    Signature Algorithm: sha256WithRSAEncryption
         23:5a:df:87:53:42:55:da:8f:5a:5c:59:f3:f9:aa:df:4d:85:
         51:3c:45:09:20:53:49:1c:66:44:dc:72:84:ec:43:4d:f3:8c:
         88:d8:ee:fb:a8:f2:d2:8b:18:fc:77:03:9c:60:44:77:05:22:
         7f:20:ee:7f:88:2e:12:ab:1f:98:96:cc:b5:42:ad:45:cc:34:
         b0:75:e1:00:8b:af:08:89:b5:dc:68:9f:c9:d5:4c:5b:cc:59:
         11:54:ec:bf:c7:46:67:bf:52:ed:04:07:db:84:21:ff:74:04:
         94:30:dd:6d:07:78:4e:8a:e8:6c:68:fd:c2:a6:d4:4b:f9:d0:
         8e:ad:04:88:13:dc:ab:1e:9c:d4:a0:ab:2b:3a:b4:8a:a1:c2:
         46:57:7c:3d:ad:4e:e6:ae:c2:8d:75:62:e8:30:22:84:25:b7:
         6e:80:e8:e2:01:b9:1c:19:6e:68:99:d3:07:fd:4c:94:d8:5b:
         56:02:ab:bd:c1:e2:a0:63:87:96:e6:21:82:c3:ae:f9:6c:01:
         f0:45:78:39:29:7f:16:47:60:bc:c2:a9:bd:fe:e7:fa:07:ae:
         6a:3c:73:0a:8c:f5:7c:37:17:14:f8:69:4c:08:ed:76:3a:b6:
         bc:ec:37:52:78:18:10:fe:93:0f:a8:d4:17:a4:d2:77:4b:de:
         bd:eb:d4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org