Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/GcgiTy08pmb40_H7p7nz4HiVnjI.roa
File:                     GcgiTy08pmb40_H7p7nz4HiVnjI.roa (raw, json)
Hash identifier:          CHWGg4tAJsykZ2fjA3n4TAeHEKVQ3mpfYgPQpXIUDkc=
Subject key identifier:   19:C8:22:4F:2D:3C:A6:66:F8:D3:F1:FB:A7:B9:F3:E0:78:95:9E:32
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01A9
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/GcgiTy08pmb40_H7p7nz4HiVnjI.roa
Signing time:             Mon 20 Feb 2023 07:53:12 +0000
ROA not before:           Mon 20 Feb 2023 07:53:12 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.208/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:12 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=19C8224F2D3CA666F8D3F1FBA7B9F3E078959E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:79:eb:96:b5:20:1e:bc:34:33:17:b8:4a:85:
                    fd:f9:c6:7b:1c:1f:2c:97:b2:04:ac:d5:82:73:23:
                    3b:83:8d:6c:9e:6c:52:38:fe:39:e0:ff:de:ec:ee:
                    8e:28:48:a5:53:36:61:37:85:7b:95:29:93:ab:3f:
                    82:53:f9:f5:99:9c:c9:24:4b:c2:f0:a0:20:17:9b:
                    83:67:50:c5:96:cd:34:d7:ab:d1:53:b8:e7:d7:a9:
                    81:f4:f7:ce:c6:b1:cc:25:5f:6b:d0:7f:78:a6:10:
                    e9:a2:ca:2b:88:a2:fc:aa:cb:ed:1b:22:83:95:62:
                    c1:a1:66:21:7b:e0:86:2f:05:01:aa:4a:d7:ef:6d:
                    2e:60:05:2d:4f:05:4f:22:35:6e:6d:d1:d6:74:af:
                    fa:ca:09:a7:82:49:03:d2:b4:be:cd:26:04:93:e1:
                    c0:a2:80:76:e9:b1:71:4d:67:b3:6a:2d:c6:d0:71:
                    93:21:8d:a5:dc:8c:60:d3:ce:bf:4f:1d:25:1c:79:
                    47:e6:a4:37:70:5e:ed:dc:21:21:f0:e8:b0:c4:52:
                    5d:a2:aa:8d:14:51:57:6c:3a:4e:a9:d4:df:79:e2:
                    b7:37:56:18:49:6a:1d:93:1f:32:1c:c8:95:e1:74:
                    8f:bb:eb:e3:17:13:63:52:70:0d:30:cb:ee:b4:51:
                    c8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C8:22:4F:2D:3C:A6:66:F8:D3:F1:FB:A7:B9:F3:E0:78:95:9E:32
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/GcgiTy08pmb40_H7p7nz4HiVnjI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.208/32

    Signature Algorithm: sha256WithRSAEncryption
         82:a1:dc:a4:7c:33:5f:d7:6c:e4:14:82:0c:1e:34:69:57:c2:
         34:50:7b:65:5c:95:be:b2:b6:7f:03:13:75:58:87:41:88:9b:
         b8:61:70:3b:df:ac:b4:57:30:9a:9a:91:1c:46:ad:6b:92:c9:
         8a:80:7c:17:b0:05:77:96:9e:dd:ac:49:33:23:3f:e1:c9:36:
         2c:9c:ea:50:98:27:de:e4:7e:19:8e:4a:79:2c:ae:7f:99:06:
         ff:09:3f:b6:ab:f4:a4:eb:ac:7b:de:7e:fb:f1:ff:3c:0e:4e:
         70:cf:b5:a4:f8:33:5b:35:1d:14:af:9a:c5:cf:b6:6a:45:28:
         ff:14:d7:3e:67:01:9b:79:23:0b:8b:ae:47:9e:95:95:0e:e7:
         f9:d8:46:db:d4:87:53:6a:1c:36:c7:61:5f:37:53:ba:44:75:
         b5:05:f8:6e:7a:f7:c8:2f:92:a5:46:85:60:c6:3e:81:71:7c:
         92:33:07:93:6c:a1:07:2d:2a:57:5b:c7:ca:00:49:ee:d9:8a:
         60:cd:4f:69:72:54:8b:14:91:df:be:68:28:83:0e:a4:6e:5b:
         cb:a2:4b:5a:26:2f:84:5c:6c:58:26:23:7d:27:31:38:aa:8e:
         7b:41:5e:81:c5:a6:f3:99:81:25:7a:1b:f9:6e:fb:b1:8d:cb:
         1c:e4:db:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org