Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/H05KQBsHQ_ibdVZdleFUu2hWSWs.roa
File:                     H05KQBsHQ_ibdVZdleFUu2hWSWs.roa (raw, json)
Hash identifier:          +pQVHdwfl35Uqw13cDFoCkcz/WjLV7b+P9AdoAIJL38=
Subject key identifier:   1F:4E:4A:40:1B:07:43:F8:9B:75:56:5D:95:E1:54:BB:68:56:49:6B
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       60
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/H05KQBsHQ_ibdVZdleFUu2hWSWs.roa
Signing time:             Fri 10 Feb 2023 07:43:32 +0000
ROA not before:           Fri 10 Feb 2023 07:43:32 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.75/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:43:32 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=1F4E4A401B0743F89B75565D95E154BB6856496B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c4:15:a1:3f:ff:a1:a8:af:9c:d9:a3:05:80:
                    17:0c:4e:c5:19:03:f7:93:71:bb:75:23:6d:7c:4c:
                    4d:69:03:df:12:eb:0f:c3:b7:ea:93:eb:a5:0f:c9:
                    b4:b0:0a:88:ec:fa:5c:6a:3f:59:95:01:6e:4f:5e:
                    88:8a:ea:0e:9f:e9:09:98:fe:4c:b6:c9:25:a2:c0:
                    0c:24:f2:e8:ff:9d:c9:5a:84:ab:a5:37:d3:cf:6c:
                    ec:8f:bd:c1:f3:ef:a8:05:c0:09:1b:c2:19:46:e1:
                    7f:3d:59:58:73:24:43:b8:36:22:81:40:07:b3:77:
                    2f:8e:ba:cd:dd:74:fe:02:be:e2:67:f6:58:ad:6c:
                    0d:da:63:43:c3:a4:97:76:ec:bf:6e:11:77:a5:4f:
                    fd:4a:32:b2:eb:0b:db:d0:a8:4d:20:70:76:78:54:
                    0f:25:2e:58:08:8d:c7:11:1b:d7:2c:bc:00:93:01:
                    1d:a0:ab:e4:52:69:7b:bb:38:44:c7:3c:9f:0f:d3:
                    7a:83:2b:94:f5:9f:de:b4:23:25:65:68:fd:4e:57:
                    79:6d:fc:ae:4e:31:d4:ed:1d:41:8a:2d:0b:d8:86:
                    ae:2e:5d:85:71:43:1c:99:77:8b:c4:ef:b9:88:23:
                    bd:0d:9d:c2:51:ac:41:36:93:47:e3:0c:b3:b7:a7:
                    9d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4E:4A:40:1B:07:43:F8:9B:75:56:5D:95:E1:54:BB:68:56:49:6B
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/H05KQBsHQ_ibdVZdleFUu2hWSWs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.75/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:8f:17:69:d5:53:a1:fe:28:39:9f:f6:32:41:db:5e:e8:8c:
         79:0d:65:49:56:c7:6b:ab:dd:da:40:e4:13:55:3e:a2:bb:df:
         b3:63:bc:b0:47:c6:2a:9a:32:9b:12:e1:ad:89:fb:f7:4b:b9:
         48:18:f1:ab:71:68:5f:d2:42:c3:70:dd:30:92:33:b9:52:14:
         4b:d5:70:3b:1e:30:9a:5a:77:d1:05:d9:42:d1:c8:4f:03:6c:
         f8:77:91:34:9e:40:85:f3:eb:a6:63:53:8d:3e:60:7e:f1:5b:
         16:45:41:72:61:d9:28:ba:5f:b3:75:1e:65:90:f7:86:d8:35:
         78:82:b1:ab:53:01:3c:ec:96:fd:23:ce:18:43:4e:fb:38:9e:
         26:fb:c3:af:5e:85:c1:b5:dc:dc:bf:85:57:6d:23:8c:fb:3b:
         50:e1:27:8c:82:b3:63:7a:9e:90:53:f7:69:41:7e:65:87:a3:
         2e:02:b1:8a:4f:c1:42:64:85:d5:25:b1:d8:45:d1:92:13:78:
         2a:76:c0:22:21:10:16:ac:d5:50:24:d0:ab:ea:f6:66:04:4a:
         b3:ec:0d:7b:9e:8c:ed:99:e0:f9:f6:40:dd:94:9b:ba:27:2b:
         59:aa:c5:8f:77:9a:7a:ed:72:0d:36:c8:ec:c6:7f:f9:9d:88:
         5a:8d:92:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org