Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Eg9lil8C_omqbqaGKoxewr3Tvww.roa
File:                     Eg9lil8C_omqbqaGKoxewr3Tvww.roa (raw, json)
Hash identifier:          T+NAs2iuTeafUyPjRo5YJRpT54GE0aj3tWcaE6TH/Is=
Subject key identifier:   12:0F:65:8A:5F:02:FE:89:AA:6E:A6:86:2A:8C:5E:C2:BD:D3:BF:0C
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02A9
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Eg9lil8C_omqbqaGKoxewr3Tvww.roa
Signing time:             Mon 20 Feb 2023 08:05:33 +0000
ROA not before:           Mon 20 Feb 2023 08:05:33 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.213/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681 (0x2a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:33 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=120F658A5F02FE89AA6EA6862A8C5EC2BDD3BF0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:aa:1a:01:5a:58:25:b8:fe:e1:c1:68:39:63:
                    00:84:4c:57:09:b0:49:9d:35:9a:d0:ed:29:d6:4c:
                    76:a9:29:cc:55:90:ff:2e:6f:16:fb:4f:d6:e3:1e:
                    b5:40:95:43:7d:87:8f:a4:40:6a:04:7a:11:fd:65:
                    1d:be:24:4a:83:1c:bf:13:56:c5:a7:ff:59:77:12:
                    89:c4:4c:81:0f:09:9a:f8:3d:a8:37:87:1b:9b:86:
                    8f:e7:77:36:a0:ff:32:64:14:47:c7:35:cc:12:db:
                    be:f0:62:66:b0:84:ec:eb:10:53:a5:71:0f:99:89:
                    19:bc:b3:d9:07:91:09:60:3f:b8:a7:e9:b3:7d:99:
                    b1:fe:5c:10:86:0f:c1:89:45:6e:e8:8e:97:86:d9:
                    97:0a:9c:2b:68:ad:17:fb:4d:0d:e2:d0:11:0f:34:
                    23:f0:3f:80:c8:81:e5:9e:76:70:3a:42:c9:81:8a:
                    6a:8d:f9:1b:ff:04:b9:42:2e:1b:4d:31:43:aa:4c:
                    2f:3d:17:7a:f4:8f:63:e2:60:14:73:d5:5d:64:5b:
                    2f:bb:b9:ad:24:4e:90:67:ca:92:3b:cd:ce:04:0e:
                    9a:5a:e6:ca:18:8e:a4:13:2d:13:ae:eb:78:e8:3b:
                    65:90:6b:70:f6:e8:af:5c:91:1a:fa:a7:cc:20:7c:
                    16:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0F:65:8A:5F:02:FE:89:AA:6E:A6:86:2A:8C:5E:C2:BD:D3:BF:0C
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Eg9lil8C_omqbqaGKoxewr3Tvww.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.213/32

    Signature Algorithm: sha256WithRSAEncryption
         31:cd:42:3b:a3:bc:99:28:09:b9:5d:df:1a:06:b7:70:db:7e:
         a1:ec:3b:a5:c7:18:00:f0:bb:d9:dd:a9:06:73:c0:0c:b9:1f:
         be:28:8a:28:ba:87:1d:b1:c8:3a:1d:e4:b5:12:97:2d:11:01:
         64:ca:c1:6e:ce:40:94:62:fb:10:8c:c8:57:61:00:76:03:2b:
         7c:fe:92:fd:f1:94:27:62:55:2c:b4:48:f4:4b:20:77:22:84:
         06:54:d1:5c:ef:bb:2b:97:65:07:6c:82:e9:77:f9:fd:14:38:
         58:42:38:63:3f:3a:7b:ed:77:9f:31:58:ac:b6:df:2c:5f:c3:
         78:69:2c:8d:32:ec:54:a5:71:f5:fd:42:c9:7f:a3:e6:e1:11:
         b3:68:67:55:55:24:cc:5e:a2:18:c1:4a:71:1a:b8:98:6f:59:
         7e:e1:56:1f:3e:dc:13:aa:c8:83:12:e9:8f:62:d5:72:f7:a8:
         a6:db:3c:8e:a4:06:df:b7:81:b7:7a:14:5e:65:db:8f:61:48:
         00:c0:cf:3f:4c:2e:df:a9:d7:9d:31:ba:3d:90:00:a7:7a:e8:
         f4:81:54:7f:bf:1c:6a:ee:a9:fa:60:53:b2:2a:12:48:99:d5:
         e4:fc:af:2f:2e:11:69:81:ee:34:c6:23:ea:7d:0f:f1:aa:8c:
         f5:e2:b2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org