Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/E7kwt-oRT4jo2vmGg9AB-Mp0IAI.roa
File:                     E7kwt-oRT4jo2vmGg9AB-Mp0IAI.roa (raw, json)
Hash identifier:          F4vPWq2LntCmsy1BySXhryVykLV+d9gVPiS/kYWVxr8=
Subject key identifier:   13:B9:30:B7:EA:11:4F:88:E8:DA:F9:86:83:D0:01:F8:CA:74:20:02
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       018F
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/E7kwt-oRT4jo2vmGg9AB-Mp0IAI.roa
Signing time:             Mon 20 Feb 2023 07:50:56 +0000
ROA not before:           Mon 20 Feb 2023 07:50:56 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.179/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:50:56 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=13B930B7EA114F88E8DAF98683D001F8CA742002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b9:ea:79:a5:58:c6:8a:ac:4b:50:b5:ef:7c:
                    a8:44:07:7f:36:ac:43:c8:f7:3c:e2:99:8f:1d:b1:
                    a6:fc:23:16:3e:e5:f3:5c:16:d8:c4:56:40:00:f7:
                    cb:2b:5c:c2:0f:f1:20:86:2f:54:0f:85:50:f8:e1:
                    c1:e6:fe:d3:e1:e1:77:4e:15:f6:bf:38:0a:6a:79:
                    90:bc:31:ac:4a:d7:0d:38:70:d6:8c:c0:cd:61:43:
                    37:81:60:df:c0:b8:28:1f:49:9b:3d:62:64:2f:92:
                    1d:96:5f:fc:e3:8e:26:4b:13:2b:81:2c:fd:1f:f2:
                    c7:ed:45:9f:04:0c:dd:99:c7:9b:49:22:ab:8c:d5:
                    5f:89:51:7e:0f:b9:c8:2e:11:97:6a:58:c5:3a:c7:
                    3d:6e:b2:4a:58:0e:47:51:34:56:d3:a7:bd:ef:17:
                    89:11:a7:ef:9b:ca:89:c2:3f:47:93:53:05:43:1b:
                    4b:fc:f3:36:0f:a7:62:b1:5c:e0:d2:6c:fe:ad:48:
                    1d:e4:93:f7:6d:e0:ec:e6:02:59:8b:a6:62:5b:7a:
                    1b:cf:d2:43:c6:ef:97:0d:28:95:3c:68:fe:52:06:
                    f6:29:24:74:da:66:29:87:57:8e:8e:52:6c:06:37:
                    4b:32:ad:5c:4c:0e:c7:32:b4:78:ff:7a:ee:7f:6a:
                    4b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B9:30:B7:EA:11:4F:88:E8:DA:F9:86:83:D0:01:F8:CA:74:20:02
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/E7kwt-oRT4jo2vmGg9AB-Mp0IAI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.179/32

    Signature Algorithm: sha256WithRSAEncryption
         02:42:1a:b4:b4:de:12:58:f5:94:3e:4a:ca:a6:2c:70:4c:de:
         8d:f7:6b:52:2d:5e:83:4a:d9:68:23:a9:f1:87:94:a4:04:c0:
         7f:47:ba:57:95:1f:8e:e3:db:51:18:cb:f3:1f:ef:b6:b6:ed:
         52:f9:e8:42:99:b3:cb:e3:28:68:45:ac:3e:01:cd:3a:f2:f4:
         4f:10:95:5b:1c:c8:8a:ed:77:9d:0d:29:f5:3d:ba:40:52:68:
         0e:8f:fc:2a:d8:77:d4:6c:04:24:a7:1f:a0:2c:23:7d:95:50:
         b8:f7:32:b3:67:7b:72:98:f0:a5:e3:28:5e:f2:99:dc:84:9b:
         eb:91:90:da:c0:c3:56:97:ec:53:d3:60:e4:6b:9d:69:09:a2:
         02:98:ec:db:ed:19:e5:c5:62:c5:f3:81:60:31:60:11:fd:04:
         3f:a4:7d:9a:ab:51:f4:92:5f:ac:f5:1e:76:9d:e1:88:59:db:
         3c:ec:19:05:6e:da:eb:d1:21:68:1c:08:6e:c7:8a:f5:a7:7d:
         46:b1:49:e6:3f:2d:b8:05:d9:67:d2:9b:60:da:1e:3a:06:bd:
         8f:28:bd:2d:1e:8e:86:6e:c5:e4:77:d4:d0:ef:23:78:12:10:
         4b:42:c1:3a:37:93:87:98:d2:11:4f:5b:ee:67:f9:5d:f6:3d:
         d1:5a:eb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org