Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ILe3bFTxOakFMDCTEMCe88rUEj8.roa
File:                     ILe3bFTxOakFMDCTEMCe88rUEj8.roa (raw, json)
Hash identifier:          AHJ+NsljlJs3sG7JkVS15TGoIROwUnQ/2kCJC9hMqgI=
Subject key identifier:   20:B7:B7:6C:54:F1:39:A9:05:30:30:93:10:C0:9E:F3:CA:D4:12:3F
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01BC
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ILe3bFTxOakFMDCTEMCe88rUEj8.roa
Signing time:             Mon 20 Feb 2023 07:53:18 +0000
ROA not before:           Mon 20 Feb 2023 07:53:18 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.36/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:18 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=20B7B76C54F139A90530309310C09EF3CAD4123F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:c4:c6:c4:77:92:0d:16:92:92:d6:99:6e:
                    06:4a:ea:16:c7:42:0a:3c:f3:0f:1e:c7:a7:3b:45:
                    94:2b:95:10:63:68:34:f4:ab:ce:cb:23:a2:b0:4d:
                    75:26:c2:95:d6:89:e4:e2:4b:f8:0f:76:61:6f:40:
                    0e:5a:f3:92:38:5d:22:2d:e9:bd:f4:b0:a7:ec:c9:
                    84:0c:5a:f0:e1:8e:8d:1f:b4:cd:84:e6:e7:2f:1c:
                    9c:c5:aa:d5:65:05:1e:ad:b7:75:24:5a:2e:af:cb:
                    cf:a6:5c:bb:b9:50:5b:6e:9e:b3:09:d5:ad:3f:1e:
                    e4:4f:b4:2c:93:e6:80:29:bd:ae:67:a6:dc:93:c9:
                    c4:85:9c:a5:6f:81:38:4a:15:c8:d6:e8:4e:58:cd:
                    49:7c:e3:4a:1f:a2:71:9d:fa:53:62:b0:b6:57:25:
                    55:2d:44:c9:98:34:1b:72:6e:be:29:63:b9:3a:a0:
                    a3:c2:f2:c6:82:b5:8b:9a:b3:04:3e:f6:e8:87:f9:
                    ec:10:3c:ea:a3:d8:1c:77:73:70:b4:dd:0c:e3:6e:
                    48:5e:d4:43:59:78:fd:a8:9e:a8:2e:fd:a7:b6:e9:
                    53:5b:d5:84:0b:1b:6b:33:26:8e:50:ac:e3:3e:3e:
                    a3:29:b8:7d:74:1b:40:be:7c:a8:76:5d:f0:c3:1c:
                    f9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B7:B7:6C:54:F1:39:A9:05:30:30:93:10:C0:9E:F3:CA:D4:12:3F
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ILe3bFTxOakFMDCTEMCe88rUEj8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.36/32

    Signature Algorithm: sha256WithRSAEncryption
         33:8b:42:59:5f:48:17:a9:15:a4:b4:93:86:3b:60:4d:b2:6c:
         c4:e0:ce:b4:58:47:da:94:8f:85:ea:94:61:ef:ad:aa:72:e4:
         b7:28:09:c3:8e:cb:3a:a7:d2:de:24:d6:71:e3:8d:98:a0:14:
         8a:30:15:f4:34:9d:54:b8:00:1a:25:7d:91:d4:8f:a9:ba:d3:
         f9:b4:96:e3:ab:b7:96:46:d5:f2:e8:b5:b9:c9:0a:65:72:5c:
         5a:c2:7a:fa:89:4d:18:6d:cf:1f:c8:f6:37:70:4f:91:45:70:
         13:ea:91:30:1f:bb:3a:b1:58:92:12:09:97:fe:4c:26:d2:ca:
         2a:5d:e5:01:ae:87:f4:40:53:bd:90:02:b3:a3:b0:27:db:98:
         63:c2:1c:16:05:8d:ec:b4:dd:ec:0c:d2:a8:e8:08:67:54:62:
         8b:8d:5d:4e:c5:a5:6b:2a:39:6b:98:19:47:d0:fe:67:2c:ba:
         95:92:99:77:07:88:91:44:69:57:ab:ea:1f:ae:d4:f7:f3:de:
         bc:0a:fa:39:be:1d:23:66:96:e5:ea:58:5c:00:3a:37:05:81:
         21:c0:eb:28:3e:6d:1d:ad:fe:82:e1:96:8a:7c:ab:fc:cf:3e:
         86:80:64:9b:9f:50:65:99:29:27:7a:da:26:91:9f:1e:4a:16:
         e0:7b:82:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org