Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/EElMuXEsvUMqRA4hkuQKylep_1A.roa
File:                     EElMuXEsvUMqRA4hkuQKylep_1A.roa (raw, json)
Hash identifier:          WVXol/ShCxSLCigHgWDig+N1tUbm6PVJKLhn+UGlzw8=
Subject key identifier:   10:49:4C:B9:71:2C:BD:43:2A:44:0E:21:92:E4:0A:CA:57:A9:FF:50
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01A7
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/EElMuXEsvUMqRA4hkuQKylep_1A.roa
Signing time:             Mon 20 Feb 2023 07:53:11 +0000
ROA not before:           Mon 20 Feb 2023 07:53:11 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.224/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:11 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=10494CB9712CBD432A440E2192E40ACA57A9FF50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4e:83:ee:99:9c:93:f6:08:0e:04:98:97:cb:
                    2c:f2:65:e7:6d:a7:13:4b:63:5e:7a:8f:22:0f:a7:
                    f9:6c:3d:7f:fc:96:84:51:49:3d:cd:15:44:e7:e1:
                    58:7a:47:a5:93:99:b2:ce:2c:39:ed:1a:9b:cc:9b:
                    40:b1:17:7c:9e:98:0a:95:b9:94:68:89:3b:9d:76:
                    63:35:71:c3:30:b8:bb:79:2d:3c:a6:de:14:bd:2f:
                    e5:54:f0:ab:f4:7f:0a:c8:25:a5:68:6e:13:f3:4d:
                    59:6a:d3:d9:ac:13:c6:3a:3c:18:14:47:af:22:cb:
                    d0:1e:5c:d0:8c:17:b0:5a:ab:b7:46:09:81:46:08:
                    9a:51:44:85:24:0b:1c:0d:5c:7e:6f:b2:ab:c3:4c:
                    98:42:b1:ea:22:4f:c3:70:83:35:69:ac:c9:80:68:
                    4b:0a:1f:3d:f0:a4:e9:7d:cd:1d:15:3d:18:da:1c:
                    63:7c:d5:63:08:d1:2a:0c:2d:99:5a:a1:b3:f2:f4:
                    a7:75:36:2a:e5:b6:84:88:ff:94:8b:18:d4:05:f0:
                    3c:b0:8d:74:50:8a:b9:27:d1:6f:3e:34:b2:4e:94:
                    eb:a9:37:df:f4:a1:5f:3a:bc:1a:e9:0c:bd:72:d6:
                    5f:57:63:26:e4:98:d1:ca:3d:3b:6d:df:e5:93:60:
                    e0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:49:4C:B9:71:2C:BD:43:2A:44:0E:21:92:E4:0A:CA:57:A9:FF:50
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/EElMuXEsvUMqRA4hkuQKylep_1A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.224/32

    Signature Algorithm: sha256WithRSAEncryption
         71:34:f6:8e:e0:eb:89:fa:4b:8d:3a:b3:7d:e0:55:4a:ad:b4:
         86:16:d9:ca:cd:5c:fa:a7:e1:02:b9:3a:5d:b5:83:1e:24:af:
         0b:ba:b1:ad:34:44:fb:ad:ff:d1:36:d7:5e:5b:23:93:b0:d3:
         9b:4d:b0:b2:ca:a2:53:90:58:6a:ac:19:ef:98:92:81:b8:99:
         05:56:93:d6:16:82:d8:c4:a3:c8:97:76:cb:35:f4:8c:f0:ce:
         ee:ba:79:9d:18:ea:e6:eb:3b:f0:ca:76:62:c8:42:f7:77:5e:
         8b:4d:3a:59:30:8b:60:ee:10:9e:28:e1:7f:d1:34:c3:97:51:
         fe:a9:2e:fc:da:1e:16:c0:07:d3:2d:b8:de:dc:53:35:bf:75:
         41:6d:5d:42:bc:3e:ce:dd:83:1f:a2:9d:ee:be:1c:c4:e5:63:
         a6:7f:67:d0:9f:34:8e:08:5e:56:56:d3:d9:f1:b0:20:0e:4c:
         2e:56:ca:61:79:4f:29:dd:39:16:5d:c1:51:80:c7:76:92:17:
         39:12:a5:bf:9c:79:b4:30:c7:90:2c:26:d3:b8:2a:06:64:c4:
         d1:d4:e2:e9:37:d9:b6:6d:4e:98:cb:ba:61:37:93:ae:38:31:
         91:15:cb:77:34:94:eb:da:dc:e7:a3:46:58:d2:af:8a:f5:48:
         2a:6c:2a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org