Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/HFhCZJu2U2rYd0be0A4He7jciaU.roa
File:                     HFhCZJu2U2rYd0be0A4He7jciaU.roa (raw, json)
Hash identifier:          bP3rr+ch5iC8ZlxDxKoNI04Hwbt3zVkPDjYOGnnd0MA=
Subject key identifier:   1C:58:42:64:9B:B6:53:6A:D8:77:46:DE:D0:0E:07:7B:B8:DC:89:A5
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01A2
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/HFhCZJu2U2rYd0be0A4He7jciaU.roa
Signing time:             Mon 20 Feb 2023 07:53:09 +0000
ROA not before:           Mon 20 Feb 2023 07:53:09 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.206/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:09 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=1C5842649BB6536AD87746DED00E077BB8DC89A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:1f:9a:9f:3e:2d:4a:a1:60:9e:42:01:33:
                    03:fa:d5:4f:96:4a:27:dc:24:a0:35:04:4e:4c:ac:
                    7a:29:c0:7c:22:77:ad:ab:56:39:64:94:79:8f:28:
                    2b:52:3d:05:3d:f4:c6:cb:c4:5d:74:d0:ec:be:1f:
                    d1:a8:d7:93:8a:0a:0d:31:0c:94:60:8e:f2:fe:67:
                    ce:76:d3:a3:27:ab:a7:07:97:40:53:6c:d3:04:d0:
                    35:d6:2c:86:f1:08:d6:6a:c4:5e:5e:3a:9c:a5:85:
                    9b:1e:66:87:42:7c:e9:b3:bf:90:58:e6:e1:15:bc:
                    b4:c9:a3:f0:6a:5e:a5:e9:8e:db:84:8f:aa:1b:7a:
                    20:c0:63:9d:16:f6:09:14:b7:08:3f:cc:87:43:0c:
                    58:ed:a4:cc:1b:d1:6d:fc:67:a8:f6:6f:25:f0:07:
                    38:a1:f8:77:4c:7d:65:ab:52:7c:ba:15:3c:8b:62:
                    cc:82:7a:22:38:a6:81:60:da:8c:0e:f5:05:74:cb:
                    2d:0f:9f:cb:df:b1:bc:b3:f4:e4:3f:d0:6c:5b:82:
                    20:d3:79:80:da:62:87:af:77:e0:c4:e2:57:99:1e:
                    1d:4d:d8:57:86:01:c7:3f:ff:5a:66:76:bf:45:b8:
                    cc:63:d4:b6:ab:e7:9f:4d:25:52:a6:34:a0:51:01:
                    47:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:58:42:64:9B:B6:53:6A:D8:77:46:DE:D0:0E:07:7B:B8:DC:89:A5
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/HFhCZJu2U2rYd0be0A4He7jciaU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.206/32

    Signature Algorithm: sha256WithRSAEncryption
         57:aa:3d:36:0c:b7:ca:60:c4:d8:f3:84:67:0c:91:a4:e9:a9:
         82:37:19:72:70:1f:b4:a2:bb:ae:c0:68:21:d2:44:b9:58:96:
         93:ef:0b:2f:bf:8a:40:b2:dc:e3:fc:16:71:17:64:d2:8d:cb:
         e5:96:98:e8:38:97:b6:78:cf:37:a5:82:f6:8f:8d:0e:a5:fd:
         b8:34:f5:e5:c4:be:da:f4:12:0b:3d:a3:39:9b:1e:3b:3c:78:
         45:05:cb:6e:49:80:fb:bf:39:2e:bc:93:80:8a:0b:4f:47:1e:
         90:b3:db:ad:84:62:02:82:64:82:78:8c:2d:5a:91:05:b6:72:
         81:67:cc:1c:1c:66:d5:9d:ce:f2:7a:ce:70:e3:da:37:0e:1e:
         ba:81:b4:57:83:28:24:d9:2a:1f:b4:51:ac:02:d6:68:1f:c5:
         3b:85:3f:09:85:82:09:73:27:89:da:e0:be:80:37:a6:39:54:
         c4:f2:b2:86:92:a0:9a:82:93:f6:2a:11:33:a1:10:bb:a4:97:
         4f:6e:b9:18:3c:bd:5e:b6:d7:8a:df:4a:04:e4:e0:fa:2b:18:
         3a:e3:0a:e2:c7:a8:27:f6:26:06:24:94:2e:2f:5e:52:13:2e:
         33:59:76:7f:0e:da:2d:e4:05:ca:06:6c:dc:1c:1a:52:73:78:
         db:5a:b9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org