Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/IIctUUWJfmfYmiuqAWI9GceXUGI.roa
File:                     IIctUUWJfmfYmiuqAWI9GceXUGI.roa (raw, json)
Hash identifier:          9SbBQ1Ad+s0RRABvkzcgdk3w3a3jYD3IV+wzAVi+sGg=
Subject key identifier:   20:87:2D:51:45:89:7E:67:D8:9A:2B:AA:01:62:3D:19:C7:97:50:62
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01AA
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/IIctUUWJfmfYmiuqAWI9GceXUGI.roa
Signing time:             Mon 20 Feb 2023 07:53:12 +0000
ROA not before:           Mon 20 Feb 2023 07:53:12 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.40/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:12 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=20872D5145897E67D89A2BAA01623D19C7975062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ed:e3:b0:2c:31:2d:18:3c:57:1f:b2:84:9b:
                    2f:cf:e0:45:e7:e2:5f:ec:33:76:4f:6d:ea:2a:e1:
                    c1:ff:72:5d:fd:5f:84:77:67:3d:1e:ba:fb:ec:be:
                    12:26:6c:28:d8:ff:0d:37:07:29:76:75:ef:b4:22:
                    81:7e:18:9c:e2:5a:e9:f4:91:c1:5a:f1:18:15:fd:
                    1b:2a:32:ea:a5:fa:2d:32:4c:8d:15:a6:49:45:a0:
                    9f:3f:42:18:8c:3e:72:d4:4c:8b:91:de:e9:7a:3a:
                    ac:56:e2:05:06:f7:67:e3:7b:e6:a0:6b:2f:cd:8b:
                    54:13:d0:06:7a:58:e4:51:74:85:83:4f:42:76:0d:
                    89:f3:cb:5d:e9:29:c7:90:9a:81:75:b3:d2:39:ef:
                    1e:30:f9:29:47:6e:ca:06:2f:20:66:5a:23:49:86:
                    37:fc:d2:ed:8a:6e:c9:1f:ab:3c:2f:c6:56:a6:8d:
                    03:c2:22:5b:52:d2:5f:f3:53:b0:79:e9:29:4c:ec:
                    24:46:cb:e3:1c:9e:aa:95:e9:8e:35:dc:a9:2f:56:
                    80:35:86:4e:da:ba:fe:46:c6:da:5a:15:e1:a7:d1:
                    92:29:de:a0:33:ba:a7:8d:59:a6:7b:e7:15:38:5d:
                    65:e6:39:55:b8:6f:8f:6f:96:4e:f7:af:7a:e0:3c:
                    07:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:87:2D:51:45:89:7E:67:D8:9A:2B:AA:01:62:3D:19:C7:97:50:62
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/IIctUUWJfmfYmiuqAWI9GceXUGI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.40/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:20:52:07:8d:95:1f:73:e2:aa:a1:a5:60:f9:fe:5f:8e:a5:
         00:cd:b0:0c:5e:9f:86:f5:f4:18:ee:02:14:cf:01:7b:33:0b:
         91:95:5b:e1:45:b2:73:d6:6b:e6:07:bb:09:a0:7e:c1:e2:ff:
         55:96:06:42:58:3c:64:52:98:a0:f9:51:0d:e4:f6:82:95:65:
         de:8f:5a:b3:1e:6f:e8:2b:f3:0e:b7:0c:99:5a:de:fd:49:19:
         35:0a:14:3c:44:1a:e8:ad:72:8e:4f:fa:73:b0:1a:19:0b:47:
         69:2f:bf:98:e0:5c:6d:29:86:19:88:5b:12:e5:d8:1f:46:b0:
         f7:dc:9f:b9:ab:9d:11:a1:20:91:8f:14:a2:96:61:95:ec:a2:
         13:7d:af:5c:f4:ee:63:4e:e7:1a:98:99:bf:db:bf:8a:95:46:
         6d:d9:1e:43:56:d0:34:a4:14:a9:9e:6a:31:61:12:89:32:90:
         de:6a:e4:f7:04:c0:e3:ae:cb:dc:3f:59:0a:8e:ab:5b:e1:b1:
         e7:e6:a1:4d:c9:a4:5c:d1:81:7e:18:bc:66:f3:54:53:bd:89:
         84:0e:fb:ee:60:d4:ce:d7:a6:38:a2:37:58:da:f4:59:fe:f0:
         43:0f:dd:2b:fe:82:4b:98:0c:38:ff:5d:77:f5:fb:59:e2:36:
         5a:de:e9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org