Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/K4ys12F8aCmtacOErZL-8QjdPss.roa
File:                     K4ys12F8aCmtacOErZL-8QjdPss.roa (raw, json)
Hash identifier:          0LYRfqrO1DAVVqvG1G+aV0860/P7KMp7XXnOLmnTnLQ=
Subject key identifier:   2B:8C:AC:D7:61:7C:68:29:AD:69:C3:84:AD:92:FE:F1:08:DD:3E:CB
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       020C
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/K4ys12F8aCmtacOErZL-8QjdPss.roa
Signing time:             Mon 20 Feb 2023 07:57:36 +0000
ROA not before:           Mon 20 Feb 2023 07:57:36 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.103/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:36 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=2B8CACD7617C6829AD69C384AD92FEF108DD3ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:b1:b3:93:45:39:53:14:a4:eb:c9:7e:5f:
                    c1:e4:c0:a6:09:83:d9:99:2b:15:47:34:3c:f7:ff:
                    2a:c0:3a:bf:d6:06:b2:92:2b:d3:28:4d:e5:11:c0:
                    d4:da:4a:b2:14:7d:a8:c7:a3:91:78:73:b9:38:b8:
                    3b:29:38:0e:54:18:69:61:20:56:02:bf:35:a1:60:
                    1e:a0:14:57:cb:dd:4a:23:68:f0:77:29:a4:e5:16:
                    8a:b7:55:b9:97:8c:8e:ec:c1:a7:e9:25:fa:ec:2f:
                    0c:79:b5:66:7f:5f:aa:79:35:5f:0f:8b:e9:a1:5f:
                    c9:ed:51:8a:69:25:5c:47:bd:72:1c:32:0f:db:e9:
                    46:b4:5d:98:a4:83:35:1e:48:d7:a9:c0:f1:20:96:
                    dc:d7:e4:a0:03:e8:a7:e3:04:5c:03:19:de:81:be:
                    2e:81:ef:0e:f9:df:9c:b8:07:29:2b:17:f0:5c:22:
                    c3:f9:83:4d:06:74:5d:43:b4:c8:b2:e9:ca:e9:00:
                    3d:ba:b7:02:8c:78:81:45:e0:4c:54:66:fc:db:3e:
                    e1:cf:11:ba:61:11:fb:85:98:1e:64:11:6f:9a:46:
                    44:b2:d6:2b:f6:c0:3b:a2:e9:02:2c:3f:37:f5:83:
                    f3:fa:bd:63:d7:2a:bf:7d:b4:04:74:60:aa:a7:a9:
                    a7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8C:AC:D7:61:7C:68:29:AD:69:C3:84:AD:92:FE:F1:08:DD:3E:CB
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/K4ys12F8aCmtacOErZL-8QjdPss.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.103/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:6f:b9:b8:bc:93:5d:e1:50:7f:18:2d:b7:40:5f:a1:2a:99:
         b0:57:0d:86:db:26:9a:cc:57:c1:2f:ee:35:24:c3:f6:9d:78:
         d2:b8:71:cc:03:d2:90:39:23:d3:b6:38:a2:13:a3:dd:c4:be:
         63:76:7d:b5:9b:a2:01:66:85:96:12:44:1d:a6:e1:57:87:61:
         46:db:36:e5:98:38:0a:01:8d:c5:17:a7:79:4b:ee:25:df:73:
         f8:e3:23:e2:a2:c1:b8:6e:ea:25:9b:2f:b3:75:7c:5f:c2:bd:
         72:d1:5c:0f:24:60:cc:85:8b:8b:a8:be:60:90:18:f5:8c:e4:
         d5:08:a6:1d:a5:0e:c6:5d:7a:13:83:c1:52:58:c0:91:f6:47:
         ab:79:7f:d2:1b:d1:c5:61:4a:06:13:41:6d:9b:3e:26:d4:66:
         3c:74:75:aa:93:ca:52:8a:7a:71:59:e3:2a:81:42:e6:5f:2c:
         54:ce:f9:f2:d6:02:5e:30:6f:9c:97:15:0f:22:21:8a:b1:25:
         8d:da:2e:06:53:80:be:b0:67:e1:6a:67:cf:c1:8b:12:9c:a9:
         8c:3b:b9:82:1d:86:ba:68:92:fd:e5:49:09:23:37:1f:b4:5c:
         56:a0:ce:61:ba:41:a3:8e:d3:16:12:85:9e:33:77:ef:01:43:
         70:41:9f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org