Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/FxY6gVaLLaGGQgpzqZE4ewLwSW4.roa
File:                     FxY6gVaLLaGGQgpzqZE4ewLwSW4.roa (raw, json)
Hash identifier:          zIjKKxwQKhDzWKYoni3sWlQfg8LKeJ6CVX3R1j+LuFY=
Subject key identifier:   17:16:3A:81:56:8B:2D:A1:86:42:0A:73:A9:91:38:7B:02:F0:49:6E
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0185
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/FxY6gVaLLaGGQgpzqZE4ewLwSW4.roa
Signing time:             Mon 20 Feb 2023 07:50:52 +0000
ROA not before:           Mon 20 Feb 2023 07:50:52 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.241/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:50:52 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=17163A81568B2DA186420A73A991387B02F0496E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:5e:bd:a8:b6:e8:86:87:2a:11:6e:3b:23:
                    2e:3f:9c:8b:fa:70:1a:0a:60:39:4e:e1:50:bc:f9:
                    a3:be:4b:2b:8a:84:0c:95:e5:a6:cc:d0:e4:46:64:
                    96:41:24:54:f2:73:ec:11:ec:1f:4f:cb:97:2e:34:
                    19:3d:9c:87:7d:87:03:89:98:66:3d:bb:5c:30:ec:
                    d8:99:c8:42:33:66:7a:61:80:08:79:da:dd:05:7a:
                    fc:56:80:2a:a1:1a:32:19:a5:9a:6c:36:1a:25:92:
                    66:41:9c:b3:0c:d5:9e:68:5a:e1:e5:c9:fb:71:d6:
                    48:b6:67:ee:8c:8b:86:81:ac:a1:a0:c0:f9:32:b6:
                    28:9f:90:86:0e:35:89:7b:04:d8:ca:b1:45:4c:68:
                    6e:24:17:a0:b1:f2:d8:80:d1:79:68:eb:59:2a:ba:
                    e8:78:85:88:71:71:59:3f:fc:9f:f6:e2:fb:7f:11:
                    d9:0c:ec:b6:36:8d:32:ff:70:1e:b5:c0:46:ed:bd:
                    7a:37:7d:f5:85:8e:23:37:1c:85:85:05:b8:d1:4f:
                    9b:be:ad:c1:83:bf:b1:54:86:7f:bb:82:b1:a1:ec:
                    7b:a6:49:f4:71:37:96:2e:ff:a2:ca:51:8d:65:50:
                    d1:b7:eb:1e:2c:6c:54:99:ea:1e:fc:35:f7:16:e9:
                    b3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:16:3A:81:56:8B:2D:A1:86:42:0A:73:A9:91:38:7B:02:F0:49:6E
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/FxY6gVaLLaGGQgpzqZE4ewLwSW4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.241/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:60:33:61:a9:31:64:c5:69:55:ad:61:3a:9f:01:0e:9c:b5:
         33:be:58:f3:68:0a:2c:ea:61:54:ba:03:14:5c:3b:4e:fd:5e:
         95:91:0f:91:64:ff:c1:dc:3b:7d:c5:62:7a:b6:79:21:00:25:
         03:25:63:bf:b7:ea:dc:5a:96:20:74:04:26:c7:35:fb:04:1c:
         25:3c:24:a3:ac:05:db:6c:17:46:89:0c:b8:98:bb:a4:a8:35:
         0b:e8:c8:bb:c4:43:6f:60:c8:ec:b0:37:df:04:c7:62:66:50:
         1e:c2:40:8b:8b:7d:37:f7:86:d6:7a:00:83:4f:31:b7:59:04:
         81:7a:d3:7c:ee:6b:5d:29:75:4f:bd:7a:3c:2a:8c:6a:b4:71:
         0a:5c:14:4e:50:80:2a:10:91:96:30:26:f1:29:f2:b0:ec:ff:
         21:f6:dc:79:0d:21:85:b7:84:05:ea:21:08:74:c0:49:2e:14:
         1a:b3:7c:0b:f7:3e:c5:be:76:ef:9b:5e:60:b2:88:df:fd:33:
         ac:93:fe:aa:7e:2e:d4:a3:48:c6:22:f3:43:0b:8b:b0:e5:d9:
         3d:cf:36:9f:3c:99:e0:a7:9a:2d:e4:14:7a:da:a5:e6:f8:3d:
         6f:de:16:1a:8c:12:14:0d:9e:40:5a:c3:34:f7:12:e5:5f:d4:
         c4:3f:31:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org