Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/FRZUrgZokoM5alPADRrHKxAAlWU.roa
File:                     FRZUrgZokoM5alPADRrHKxAAlWU.roa (raw, json)
Hash identifier:          FZLlfJnTkHHgFaJRVF4IntHoI9adqSS6/Aht5g79iVs=
Subject key identifier:   15:16:54:AE:06:68:92:83:39:6A:53:C0:0D:1A:C7:2B:10:00:95:65
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       020B
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/FRZUrgZokoM5alPADRrHKxAAlWU.roa
Signing time:             Mon 20 Feb 2023 07:57:36 +0000
ROA not before:           Mon 20 Feb 2023 07:57:36 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.173/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:36 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=151654AE06689283396A53C00D1AC72B10009565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2d:54:4e:ba:db:94:2f:d4:e0:42:62:79:05:
                    3b:73:28:bf:4b:f4:4f:67:24:8f:fe:f5:e7:e6:41:
                    62:dc:eb:50:56:1b:e2:f0:55:78:13:c2:47:de:70:
                    7f:d6:ce:38:fc:33:87:d5:5a:27:46:89:7d:85:4d:
                    c0:eb:d0:17:7b:82:da:cf:37:af:6a:a4:af:2c:2b:
                    1c:98:d0:4e:4c:0a:fa:cf:af:7c:18:1d:d2:66:ab:
                    52:f8:9d:49:a7:80:ec:19:22:92:8c:84:04:60:eb:
                    5c:72:55:29:ef:89:30:74:f2:ed:27:60:dd:8e:c4:
                    e1:e8:25:4d:3b:3d:b5:37:97:11:7b:fc:6c:ef:f2:
                    76:41:66:34:98:a7:9d:df:1f:ef:a6:9c:24:9c:f6:
                    75:df:85:66:6f:99:51:fc:cc:6e:2d:45:10:7a:f6:
                    18:ca:3b:b0:25:15:3b:fd:53:e1:b3:41:17:21:75:
                    dc:d9:90:6d:21:82:6b:a0:83:70:0d:7f:db:ed:d9:
                    2d:10:19:26:eb:a6:3b:94:4a:62:26:e6:50:95:6c:
                    74:63:72:37:42:6a:c0:f2:6a:04:b6:9e:5e:ae:11:
                    3e:39:2f:b1:97:1f:f3:23:9f:f4:2d:cb:b2:fc:8f:
                    5c:6e:b6:84:96:4c:09:23:74:03:e2:cf:0c:33:33:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:16:54:AE:06:68:92:83:39:6A:53:C0:0D:1A:C7:2B:10:00:95:65
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/FRZUrgZokoM5alPADRrHKxAAlWU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.173/32

    Signature Algorithm: sha256WithRSAEncryption
         34:0d:9a:47:29:80:fe:1c:5d:d7:e3:dc:0b:7d:c3:c5:cc:e8:
         7e:0f:03:71:a5:14:12:11:25:f7:44:ab:94:8e:3e:df:cb:b0:
         17:6e:84:3f:b0:e1:86:8c:0a:5d:6c:73:cf:b8:89:15:af:80:
         a5:aa:9b:29:d5:9e:21:df:f7:a1:d5:c3:e6:69:e3:b3:e0:7c:
         22:51:f6:16:44:11:6f:94:aa:27:bf:76:a4:1e:55:7f:4c:21:
         0f:65:c7:d6:92:d4:10:e4:a7:c1:25:ef:30:a7:b7:77:46:ad:
         3b:64:08:79:7c:85:9f:0a:eb:81:a7:e1:e6:97:3b:9a:d7:c6:
         01:04:ca:18:63:eb:b0:35:81:2a:c4:e2:cb:5a:c9:34:8c:19:
         4a:35:2f:ff:07:2e:2f:b1:56:b3:7a:23:f1:9f:d7:9b:9b:13:
         7c:6a:73:a0:10:d7:20:3c:77:0c:0d:ae:8e:89:7c:03:a7:20:
         01:1f:a8:06:42:cc:5d:30:a2:af:f0:7b:26:4c:d1:91:4b:fe:
         95:4a:9c:06:32:a6:d9:bc:f4:53:d4:48:8c:1b:a9:30:80:e6:
         bb:a2:58:49:e1:31:32:f6:22:74:26:1c:92:e3:23:84:62:fb:
         42:d0:73:d6:7b:41:79:e3:f5:57:99:01:ff:17:3c:ac:6b:e4:
         9a:52:56:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org