Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/HUisSYAdEpJX29ye4dso_GCEx80.roa
File:                     HUisSYAdEpJX29ye4dso_GCEx80.roa (raw, json)
Hash identifier:          H7VZ4/d+pGe8H0xUbezT+ZK0KYYK3a6hYCImRnTbBMw=
Subject key identifier:   1D:48:AC:49:80:1D:12:92:57:DB:DC:9E:E1:DB:28:FC:60:84:C7:CD
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01E3
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/HUisSYAdEpJX29ye4dso_GCEx80.roa
Signing time:             Mon 20 Feb 2023 07:55:31 +0000
ROA not before:           Mon 20 Feb 2023 07:55:31 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.107/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:55:31 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=1D48AC49801D129257DBDC9EE1DB28FC6084C7CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b2:73:8e:71:d2:4d:76:de:98:3a:8e:73:d0:
                    46:63:f5:cd:bc:58:12:d9:23:a2:fa:a6:e9:61:02:
                    14:ac:b2:96:96:d2:7e:e6:5c:f8:fb:b7:ab:6f:eb:
                    b3:fa:45:a9:16:b6:85:97:cb:42:40:3e:73:3d:9f:
                    08:c8:aa:32:1d:56:a0:a3:24:89:e7:91:00:03:21:
                    2f:ea:02:d8:27:50:73:40:37:77:c0:ac:4a:c9:23:
                    a1:54:1d:50:4d:08:75:c3:8a:8f:52:75:84:89:23:
                    52:8f:fb:0e:e3:ea:ec:18:45:a5:2d:1f:0a:79:f7:
                    41:fe:f3:e3:8c:3b:7c:60:f5:d3:cf:2c:78:0b:17:
                    02:21:59:93:97:8c:0c:74:7d:54:8c:87:1d:e0:f8:
                    b8:16:fe:eb:3c:9b:1e:99:b9:93:c4:1f:82:a2:7b:
                    d6:74:f6:df:8c:7d:a1:a2:98:50:85:40:c1:f3:8d:
                    8a:33:55:4d:52:e9:ff:d6:2a:43:6e:77:94:5e:98:
                    3c:7f:b3:fe:ff:26:64:67:82:df:f0:b9:dd:16:a5:
                    2f:8a:b0:81:07:d1:41:07:e3:2c:a8:5d:16:cd:cb:
                    5d:6b:dd:97:f7:5d:50:39:70:ef:7a:c0:52:fc:f8:
                    7b:b2:b2:33:82:f5:c3:db:be:ba:9d:13:3a:45:56:
                    b7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:48:AC:49:80:1D:12:92:57:DB:DC:9E:E1:DB:28:FC:60:84:C7:CD
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/HUisSYAdEpJX29ye4dso_GCEx80.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.107/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:51:b9:ad:80:89:6a:44:45:63:79:46:88:9a:b0:6f:02:7d:
         ec:7d:70:0e:39:a8:61:d6:c7:9e:59:af:f2:1a:f9:8d:c1:a6:
         e5:df:e2:1c:3f:e4:6f:b1:ef:22:7f:ea:72:ea:f4:af:3e:3c:
         2f:8f:c7:bd:5b:21:07:e4:55:84:d9:5c:06:79:d4:b5:67:0d:
         1a:f2:f5:72:59:b0:72:62:cb:35:11:82:d2:c3:c8:66:7d:13:
         ac:1c:47:ad:1a:91:03:7a:26:ca:45:18:77:11:ec:65:23:84:
         bc:e1:74:4f:58:38:0d:3a:be:03:0e:d2:20:23:07:c8:8e:ad:
         fe:7e:f7:c7:50:a2:94:cf:81:be:2e:d1:61:e0:07:62:98:36:
         8e:1a:18:cd:2d:53:ff:46:8e:88:47:d1:4d:29:04:b8:65:88:
         9a:fc:5f:7f:34:c9:6b:f3:cb:51:59:bb:dd:8f:ac:76:48:cb:
         93:5e:ce:8f:e8:0b:00:5c:d9:9d:b5:a0:56:22:c1:04:11:3a:
         5f:73:c4:7c:c2:aa:6d:25:eb:95:49:9f:c0:da:bf:2f:d1:fa:
         5c:98:8f:f3:43:dc:83:c7:ca:6e:b0:a0:dc:8f:e6:39:62:87:
         70:ea:63:c9:29:bf:08:cc:79:2c:6d:2f:76:f8:4b:54:db:ac:
         38:bb:6a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org