Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/GGqTDfTFivdnd4dmHvtDRdY5KIA.roa
File:                     GGqTDfTFivdnd4dmHvtDRdY5KIA.roa (raw, json)
Hash identifier:          +di/d6o/MEHtvYT+z1ccdWcGylVGYXwHBjkV9UgZZhg=
Subject key identifier:   18:6A:93:0D:F4:C5:8A:F7:67:77:87:66:1E:FB:43:45:D6:39:28:80
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0259
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/GGqTDfTFivdnd4dmHvtDRdY5KIA.roa
Signing time:             Mon 20 Feb 2023 08:01:34 +0000
ROA not before:           Mon 20 Feb 2023 08:01:34 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.5/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:01:34 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=186A930DF4C58AF7677787661EFB4345D6392880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2b:89:bf:86:6e:1d:df:02:bb:17:bf:a6:00:
                    ce:36:61:64:f5:85:63:ac:88:48:23:48:bd:1b:e0:
                    03:53:2c:85:46:74:08:ed:95:59:18:0f:f1:36:c5:
                    23:1d:0b:f2:57:d9:ac:54:9d:ba:00:24:d1:c2:51:
                    42:99:97:10:3b:a5:04:3b:dd:04:33:68:6a:86:d8:
                    1c:9e:ef:21:ed:29:a3:9b:1b:a8:4d:d8:66:a5:41:
                    bf:9a:e8:75:30:65:f8:f2:a5:03:e2:f3:15:ad:64:
                    11:38:b5:1a:f5:27:42:99:99:ae:d8:b6:d3:85:8c:
                    13:7e:6b:83:69:68:44:52:7c:cd:18:71:f2:a6:47:
                    8f:12:a3:3f:fb:f9:2c:27:05:e2:86:5e:3c:45:44:
                    f9:43:ed:bb:d6:6c:14:d6:97:47:bf:63:e5:12:ab:
                    21:5e:57:19:e7:bd:64:f9:84:bd:66:05:d5:56:b2:
                    5f:1d:24:1d:02:aa:6d:6f:83:e8:e0:78:b4:1e:73:
                    46:92:c9:57:9a:33:08:73:3f:73:8c:15:30:c2:29:
                    1e:78:3d:41:47:e3:4a:58:8e:85:bb:55:d8:e1:ef:
                    0b:66:c0:9c:62:e3:0a:dc:be:92:a6:72:e8:b5:b0:
                    e1:f7:51:6e:bd:a4:b1:3c:bc:17:67:78:52:f5:33:
                    52:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6A:93:0D:F4:C5:8A:F7:67:77:87:66:1E:FB:43:45:D6:39:28:80
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/GGqTDfTFivdnd4dmHvtDRdY5KIA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.5/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:00:c0:f6:a4:93:c6:e3:e1:a0:b1:5a:66:89:41:06:91:23:
         a0:44:59:68:8a:a9:f0:d7:4b:3e:3f:23:6c:b2:46:f4:b8:e8:
         2b:df:f6:f7:b6:da:28:a3:62:8a:75:9b:7a:19:d2:11:2d:4e:
         88:f1:2d:47:22:9c:2a:9c:8f:d6:75:4d:33:0a:17:79:5e:86:
         5c:e8:48:86:fd:80:58:a9:08:9f:8e:d3:d1:b2:ea:15:a1:6d:
         73:d7:15:fb:b3:1a:b1:4a:ca:73:5a:b5:1c:f6:6b:15:f5:5f:
         50:22:50:cf:fd:35:c2:51:56:07:3c:94:35:1d:d7:5d:16:f4:
         2c:44:d2:60:28:a8:72:f0:82:35:59:d0:e0:e1:ca:35:77:c0:
         4b:a2:b8:4c:ee:fb:48:60:44:90:4d:ef:56:2d:72:d6:30:fc:
         d0:36:30:89:3c:b6:69:d9:cc:f5:5d:3e:64:b8:63:fa:fa:98:
         43:64:80:c7:8c:42:e9:de:8b:6a:58:a7:f7:d3:96:c4:5c:de:
         c9:18:18:7b:3c:57:0c:5d:95:e5:32:7f:6e:c5:d6:d6:7e:12:
         c8:e1:a9:eb:13:13:9c:e8:43:b8:7d:6e:b0:b1:e8:c0:23:23:
         61:e2:a4:39:6f:30:f5:da:58:a6:9a:3c:65:9a:93:b8:24:74:
         28:43:38:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org