Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/EhPJ4UkgH5H81xKooj5ED9LRcdo.roa
File:                     EhPJ4UkgH5H81xKooj5ED9LRcdo.roa (raw, json)
Hash identifier:          b6JHiOKX1mSyxjDotF5vxSrQwUV6xTK1SOkElscqm0U=
Subject key identifier:   12:13:C9:E1:49:20:1F:91:FC:D7:12:A8:A2:3E:44:0F:D2:D1:71:DA
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0281
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/EhPJ4UkgH5H81xKooj5ED9LRcdo.roa
Signing time:             Mon 20 Feb 2023 08:03:35 +0000
ROA not before:           Mon 20 Feb 2023 08:03:35 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.71/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641 (0x281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:03:35 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=1213C9E149201F91FCD712A8A23E440FD2D171DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bc:f8:5b:b2:d2:47:b6:c1:34:04:74:0b:cc:
                    45:19:c8:d3:cf:56:be:e4:42:8d:7a:f9:71:b9:70:
                    03:78:c2:09:95:a3:09:be:94:fc:8a:57:ed:5c:bc:
                    d3:16:a8:df:49:91:54:0a:79:c2:3d:70:fc:d4:72:
                    17:68:00:49:e0:ab:aa:77:84:75:ac:05:91:1f:81:
                    3d:78:d5:83:4b:f1:80:c6:e8:ba:29:53:3b:6c:31:
                    86:cb:8b:b9:7f:2a:03:dc:2b:8e:4c:bf:42:6a:8b:
                    23:9d:59:89:ba:d6:ed:9d:2c:b2:fd:91:9f:c6:50:
                    5a:29:da:6f:4c:c7:0e:3c:c1:1f:79:fc:33:32:aa:
                    cf:9a:f6:61:15:e5:23:82:e9:23:0b:02:09:f0:b5:
                    4c:4f:a2:73:df:1d:1c:ca:1c:e4:58:71:0c:e1:36:
                    d4:5a:19:83:35:1d:ef:30:b6:b3:72:5c:22:f8:4e:
                    31:e3:e8:91:a2:ca:88:11:38:3d:96:98:46:00:63:
                    81:83:10:93:3a:39:6d:90:97:09:ff:a1:b7:a7:f8:
                    4a:7f:a2:cd:78:3a:6d:54:09:fb:33:1f:76:86:40:
                    84:3e:35:43:57:f9:2e:34:2f:6a:b8:2d:a0:a1:ce:
                    52:79:46:5d:ae:09:da:8f:bb:39:74:8b:13:ed:4d:
                    0c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:13:C9:E1:49:20:1F:91:FC:D7:12:A8:A2:3E:44:0F:D2:D1:71:DA
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/EhPJ4UkgH5H81xKooj5ED9LRcdo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.71/32

    Signature Algorithm: sha256WithRSAEncryption
         59:db:bd:88:5c:7e:97:20:e3:2f:6f:9a:59:4e:b8:fe:26:32:
         fd:95:24:ce:b9:2e:e8:1e:45:79:48:13:b7:97:2b:82:ca:6a:
         14:7a:eb:00:ce:44:6e:53:45:4f:4f:dc:bb:50:06:12:db:01:
         3c:31:1e:2b:15:6f:05:69:ae:b4:ad:6f:a4:80:62:4d:25:cd:
         7e:44:13:13:1a:f1:df:dd:94:39:14:ee:6c:01:b3:3d:55:61:
         a0:57:89:2c:3b:99:f9:77:2a:56:57:0b:08:cc:be:85:ca:ce:
         08:6f:77:c3:81:b4:5f:bd:6e:99:0e:68:58:2b:f0:85:03:df:
         54:3d:f6:f3:23:3d:81:41:67:0a:25:c2:e7:9e:af:a0:c4:be:
         a9:59:b1:fd:4c:dc:59:ff:3f:4a:57:f4:fb:4d:fb:fc:78:e7:
         de:37:9d:ac:21:54:f4:48:29:1e:13:7b:97:41:e3:4e:43:aa:
         19:d1:58:58:2e:32:af:f3:a6:91:66:01:94:68:21:5d:b3:8c:
         0e:72:34:75:ac:f7:8c:ac:d0:74:35:72:73:96:26:3d:92:3b:
         16:01:0d:4a:70:24:52:18:4c:5f:59:2d:1e:41:d0:de:5b:ea:
         52:2c:0a:c0:05:a1:ea:31:7b:36:d8:82:c5:72:85:58:24:df:
         ca:a4:18:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org