Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Ejrj51Zktv26MTsRVNAbiKlrHz4.roa
File:                     Ejrj51Zktv26MTsRVNAbiKlrHz4.roa (raw, json)
Hash identifier:          QtVDVtqqysQQeSdEeDHUss85UqjXnJhrO+33wn496NY=
Subject key identifier:   12:3A:E3:E7:56:64:B6:FD:BA:31:3B:11:54:D0:1B:88:A9:6B:1F:3E
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0236
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Ejrj51Zktv26MTsRVNAbiKlrHz4.roa
Signing time:             Mon 20 Feb 2023 07:59:31 +0000
ROA not before:           Mon 20 Feb 2023 07:59:31 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.73/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:59:31 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=123AE3E75664B6FDBA313B1154D01B88A96B1F3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f6:62:a3:91:ee:1d:a9:e8:d1:b5:a3:e7:92:
                    fc:45:9d:f4:63:8a:3c:30:47:51:9b:6d:74:47:b5:
                    d8:a3:ec:a5:9d:9d:62:5e:29:a6:c0:61:e3:f3:17:
                    7b:b2:3f:5e:fd:40:cc:68:07:75:7e:a7:74:a9:13:
                    a3:c4:79:4c:ac:67:a3:96:8d:fc:ad:5e:09:37:74:
                    4c:39:02:83:84:a0:81:a2:a9:f1:a2:ea:ae:ac:86:
                    cd:32:e9:e8:7c:c8:63:ca:ec:aa:1e:23:b1:0b:b9:
                    73:90:4b:35:3f:74:ef:b0:42:9e:07:de:75:c3:0f:
                    0f:2a:16:52:0f:a3:7d:e9:6d:ca:40:39:84:73:4d:
                    0b:06:6e:9e:75:63:45:61:5f:e6:e2:17:b5:9c:e6:
                    31:00:a2:a1:ba:f7:69:48:53:f1:d8:df:e9:04:eb:
                    a5:b6:75:25:13:2e:19:19:7c:92:99:aa:cf:b2:93:
                    80:bb:cb:0f:2a:a3:1d:fd:23:54:e9:ae:3f:4b:3f:
                    4d:ef:e6:5a:b8:30:cf:85:fe:54:17:d3:92:2c:71:
                    97:dc:3b:fa:31:28:b4:9c:a7:0b:9e:e5:a8:27:46:
                    69:1a:ae:15:b5:41:a6:03:c4:71:2a:15:e0:03:99:
                    4f:2f:54:f1:f6:e7:af:b0:67:9a:b6:03:a8:57:7c:
                    31:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3A:E3:E7:56:64:B6:FD:BA:31:3B:11:54:D0:1B:88:A9:6B:1F:3E
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Ejrj51Zktv26MTsRVNAbiKlrHz4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.73/32

    Signature Algorithm: sha256WithRSAEncryption
         88:04:bd:0f:b3:b6:3f:64:01:7b:af:c3:a7:51:7e:78:d6:9f:
         8a:79:3e:fd:a6:93:08:c9:a7:31:36:2b:83:65:21:5a:53:80:
         ac:05:89:15:f8:b5:45:a3:8a:b4:81:3b:ec:66:df:eb:21:5e:
         a6:a6:f7:7e:5f:d3:f3:ff:26:41:fe:73:a9:ea:28:a4:19:d4:
         12:7a:a7:3f:d2:11:d1:e7:5d:94:ed:c2:66:20:24:9c:69:c5:
         02:4a:fd:7b:5d:dc:29:2b:ff:13:82:af:b1:16:9b:b1:5a:ee:
         90:e2:fa:83:f9:72:7d:20:ef:a8:d9:6b:bd:0e:5f:b6:2f:53:
         3d:b8:41:86:f5:e0:2f:fe:0c:43:dc:dd:7f:91:95:70:d1:f0:
         97:a2:00:2b:d4:b7:67:7e:c1:58:35:a4:3f:07:0a:4c:87:bb:
         ab:6b:70:90:5c:60:a2:3a:44:5b:71:d6:ef:e2:a5:de:d1:bc:
         cd:e7:e6:62:06:b4:ce:b2:cf:b7:6f:b3:8e:5c:28:9d:5e:bb:
         6a:84:ab:0a:96:0b:8b:e8:fc:96:4a:24:0b:a1:26:9c:91:43:
         36:69:0d:22:4d:fd:59:92:a0:0e:1c:02:b6:a2:65:97:76:68:
         a9:ea:07:d0:4d:c4:31:74:ca:dd:f0:a0:34:a1:62:24:a4:f5:
         34:90:11:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org