Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/DtmSfclecX6UKUDawbhgqoSe2QI.roa
File:                     DtmSfclecX6UKUDawbhgqoSe2QI.roa (raw, json)
Hash identifier:          5laI7hALDgZ9jA+ybLNzXOVR0UsJc8eLeLB3USHnjCw=
Subject key identifier:   0E:D9:92:7D:C9:5E:71:7E:94:29:40:DA:C1:B8:60:AA:84:9E:D9:02
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01A0
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/DtmSfclecX6UKUDawbhgqoSe2QI.roa
Signing time:             Mon 20 Feb 2023 07:53:08 +0000
ROA not before:           Mon 20 Feb 2023 07:53:08 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.227/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:08 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=0ED9927DC95E717E942940DAC1B860AA849ED902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b1:6e:e1:06:8c:95:84:bf:73:29:06:d2:4c:
                    8f:24:e6:71:d8:8e:43:61:e8:8c:2f:03:2d:b3:c7:
                    20:9b:8d:40:b5:bd:f0:01:7b:2e:93:bb:c3:66:30:
                    06:8e:f6:5b:9b:28:99:66:d1:f0:0c:af:39:e8:a7:
                    de:eb:cb:6b:a4:9b:ad:94:02:96:d3:e7:9d:c4:72:
                    e6:57:51:6c:5b:89:88:cb:16:f6:19:60:ae:4c:bc:
                    74:50:8d:17:f4:86:aa:98:e0:d9:22:21:3a:84:d1:
                    55:6f:e9:07:4b:9b:ee:9f:fb:b1:15:cb:32:8f:82:
                    02:82:ab:43:e5:b1:30:a1:63:77:d0:f0:94:ed:eb:
                    3b:bc:1a:d6:58:62:f6:e5:2b:cb:e3:65:89:fd:58:
                    01:d8:85:34:8b:44:96:52:fb:b9:15:c8:50:38:4e:
                    95:84:e3:cd:bb:19:2a:2c:ec:01:cb:3c:71:ca:92:
                    c9:cd:d6:b2:8f:fb:6f:74:30:b1:21:70:52:53:50:
                    1f:ab:3b:93:f2:6c:c7:48:66:b4:7b:ba:0e:e8:4c:
                    b0:bb:74:bc:35:80:2c:73:ad:d6:ee:65:80:dc:65:
                    de:e3:a5:2c:37:89:8d:59:a8:ee:30:6e:21:f9:15:
                    f6:58:a2:7e:ba:81:bc:1c:44:81:b8:35:ac:07:97:
                    bc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D9:92:7D:C9:5E:71:7E:94:29:40:DA:C1:B8:60:AA:84:9E:D9:02
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/DtmSfclecX6UKUDawbhgqoSe2QI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.227/32

    Signature Algorithm: sha256WithRSAEncryption
         21:7f:ef:b1:fa:83:7d:39:7e:6a:07:26:e5:99:f2:7d:48:49:
         bc:ee:64:e5:a5:fb:53:42:5b:67:17:c2:fe:07:7a:d1:52:2c:
         ca:69:70:f4:d8:c2:3e:db:40:31:6c:92:8f:60:8c:81:44:67:
         cd:ee:64:d7:9d:42:82:a0:c4:a5:cc:c3:f5:43:8e:32:5a:01:
         9e:d3:01:9b:c3:ee:cb:a8:f5:a9:d4:7b:94:04:6f:59:a8:a6:
         41:43:3d:de:c5:19:78:34:12:6d:23:55:9a:03:3c:a1:8c:8d:
         5d:ef:bc:96:9e:35:43:7e:7b:c4:fe:0c:a9:26:2b:4c:1c:47:
         66:62:06:b9:4e:2b:98:3c:a0:5a:75:05:ec:8a:54:81:37:0b:
         59:09:04:d2:91:c2:89:59:a2:ef:10:ee:12:3a:9a:c6:05:f2:
         6d:a9:f7:b6:fd:19:58:72:ae:c1:64:ae:01:27:1b:07:95:0e:
         13:ad:93:d6:81:7a:fc:e9:af:2d:c7:57:36:9c:0a:38:d1:f8:
         32:1f:58:5d:4f:57:9f:62:5b:27:ac:a8:90:4d:ea:b8:af:cb:
         13:2e:11:78:70:c5:18:7e:47:46:a5:06:46:1c:37:0a:da:94:
         ca:0b:e4:de:2e:16:0b:de:86:05:66:3c:b4:69:83:98:7e:1b:
         18:97:c1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org