Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/F7jpCQbatzxKUnrgN5oKeIstmHU.roa
File:                     F7jpCQbatzxKUnrgN5oKeIstmHU.roa (raw, json)
Hash identifier:          YD3HhCAadG7XAZdeXNr9N6Om75ag/EaGrD+6NALwT/E=
Subject key identifier:   17:B8:E9:09:06:DA:B7:3C:4A:52:7A:E0:37:9A:0A:78:8B:2D:98:75
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01C8
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/F7jpCQbatzxKUnrgN5oKeIstmHU.roa
Signing time:             Mon 20 Feb 2023 07:55:20 +0000
ROA not before:           Mon 20 Feb 2023 07:55:20 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.135/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:55:20 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=17B8E90906DAB73C4A527AE0379A0A788B2D9875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:67:1b:b0:14:4f:09:1c:db:4e:21:ac:e2:
                    ae:24:cb:9e:49:b6:ec:41:7c:35:86:11:75:44:3b:
                    ec:1b:f0:4c:eb:77:54:0d:58:15:92:75:03:6e:6e:
                    15:75:32:2b:53:41:8f:a5:76:91:df:df:b5:14:5f:
                    da:48:cd:86:80:64:08:8e:c1:65:02:49:87:c4:e4:
                    7c:83:6e:05:a8:7f:63:9c:0d:9c:f3:42:0d:f9:e8:
                    84:34:6e:74:0d:26:a0:b6:ac:d3:c4:e9:d3:9e:d6:
                    16:64:af:1e:76:35:93:73:71:b1:2a:57:d5:98:fe:
                    ba:3a:31:81:89:5f:a3:69:c9:55:17:35:8a:2a:90:
                    c4:e9:43:4a:8c:0e:70:c1:ba:ba:2b:18:8f:cc:ca:
                    72:7b:8e:ef:b3:3d:65:97:95:88:28:65:b2:d1:f0:
                    fa:07:d9:2b:cf:cd:2b:e6:24:74:7a:17:68:fb:88:
                    cf:a9:5d:69:97:33:c1:df:61:39:1e:59:46:21:93:
                    70:c7:59:36:bb:d3:f1:a1:04:48:aa:cb:68:bd:73:
                    30:04:27:6e:21:33:ab:9c:ee:74:15:ae:05:60:90:
                    77:f2:df:17:e8:32:99:6f:ae:cc:53:33:40:f8:8b:
                    1d:53:b2:60:d4:ff:a1:b6:52:92:b1:70:9c:4e:09:
                    c7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B8:E9:09:06:DA:B7:3C:4A:52:7A:E0:37:9A:0A:78:8B:2D:98:75
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/F7jpCQbatzxKUnrgN5oKeIstmHU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.135/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:b0:43:fe:cf:83:a3:b4:7e:c8:b0:cd:e7:65:a7:53:99:dd:
         ea:76:4d:82:a3:f8:bb:13:97:00:11:f4:2c:66:f0:f3:62:a9:
         f9:2d:13:83:90:37:f4:96:2e:9f:4b:9a:f9:a6:72:da:66:43:
         8f:01:01:a8:5a:97:d6:79:df:7c:11:15:c3:bb:a7:e2:07:fd:
         8e:d8:9e:5a:50:66:68:93:ce:4e:70:dd:16:73:dd:db:4a:d0:
         f5:87:29:0a:ab:96:ad:b9:ea:8b:56:e8:d0:99:93:f6:5c:d6:
         62:9e:f1:c6:46:79:5f:bc:28:ff:0a:d5:cc:cf:00:9b:ee:2a:
         01:6f:5e:31:ec:b5:79:d1:9c:32:70:25:6f:17:ac:36:69:ba:
         fc:11:f1:be:9f:3b:a1:cd:26:42:d4:2f:49:95:86:5f:75:c4:
         e2:3c:90:ea:e6:b6:b0:3a:70:f2:cd:16:02:88:77:9e:d9:a0:
         81:08:96:29:10:0d:5f:6f:24:61:42:91:25:c7:4c:3d:28:b0:
         4e:a8:bd:d3:d3:71:c3:df:93:71:e6:d2:5d:56:b8:39:e6:16:
         a9:ec:f7:3c:15:e4:7d:30:28:9c:f8:13:0d:1c:9c:46:cc:6f:
         99:51:9b:42:ba:99:5e:c7:6b:2c:67:1e:b5:d0:44:ef:9c:4e:
         9b:35:3e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org