Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KWybGQRquKrXkBQ-nItqO4LKSK8.roa
File:                     KWybGQRquKrXkBQ-nItqO4LKSK8.roa (raw, json)
Hash identifier:          PRm1nOPUnajOnavHv395JMdAkUKsvJQ41bfFhgzTgFg=
Subject key identifier:   29:6C:9B:19:04:6A:B8:AA:D7:90:14:3E:9C:8B:6A:3B:82:CA:48:AF
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02D0
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KWybGQRquKrXkBQ-nItqO4LKSK8.roa
Signing time:             Mon 20 Feb 2023 08:07:29 +0000
ROA not before:           Mon 20 Feb 2023 08:07:29 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.154/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720 (0x2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:07:29 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=296C9B19046AB8AAD790143E9C8B6A3B82CA48AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:16:c6:fc:b9:e2:4b:70:38:ba:ac:68:2e:
                    71:7f:62:16:45:76:3a:1b:b0:49:07:44:8c:b2:51:
                    96:f1:93:7a:65:12:f0:62:5d:b3:62:2d:0a:99:35:
                    67:04:68:6f:b5:fb:c0:29:76:2e:d3:99:a9:9e:7b:
                    3f:57:1f:7c:f8:92:2c:54:b3:fc:88:72:6e:45:75:
                    77:7e:fb:de:a2:96:3e:97:4b:e9:1c:0e:b4:e7:75:
                    d4:8a:6d:51:70:7f:ae:0f:bf:51:b9:e0:4a:a5:71:
                    7c:0b:c6:47:25:db:34:a1:95:d9:e7:de:79:08:cb:
                    81:53:b2:75:35:a4:68:2e:ef:e5:7f:e8:9c:a0:b1:
                    65:bf:a4:68:bd:97:d4:18:8c:67:3c:9d:ee:87:51:
                    12:96:d5:cf:9c:90:a2:c9:58:8a:23:5e:69:6b:51:
                    73:3b:7a:d7:ac:0f:05:23:fc:08:b1:55:d3:c8:d9:
                    b0:fe:e7:0e:85:f3:7e:40:47:97:b1:ee:48:41:78:
                    0e:1d:7d:ff:57:28:6c:28:23:7f:83:b0:78:65:da:
                    06:d4:d8:25:61:cc:6c:63:cc:be:9f:d9:97:0d:09:
                    6e:56:20:1b:d4:0c:85:3f:3e:4e:ee:d7:2f:50:9c:
                    a5:ef:f3:cd:a7:b9:29:23:46:5c:17:8f:b0:9e:14:
                    db:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6C:9B:19:04:6A:B8:AA:D7:90:14:3E:9C:8B:6A:3B:82:CA:48:AF
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KWybGQRquKrXkBQ-nItqO4LKSK8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.154/32

    Signature Algorithm: sha256WithRSAEncryption
         86:d0:af:a8:7c:af:48:75:30:58:14:ad:58:f1:01:39:f8:dd:
         13:76:9d:a6:64:b2:20:2c:cb:12:5f:9d:a6:47:8b:2f:f6:cd:
         29:ae:42:69:7c:81:a8:0b:d3:74:0c:66:f5:63:5e:09:df:b5:
         92:12:ec:07:09:4a:c4:39:8b:36:48:c7:d3:b4:a3:a8:0d:8a:
         e2:1a:9b:bc:02:68:46:26:8e:71:cf:e8:c7:7d:7e:64:58:50:
         ee:e1:f1:f6:8d:7b:07:8a:5f:f5:b3:75:4c:73:b4:4e:e6:c0:
         1b:14:39:5b:f1:f6:a8:b4:59:d9:96:ea:a2:d7:cc:40:e6:13:
         d3:97:6f:46:d5:3f:42:fc:0c:15:26:ae:3a:ec:1f:f6:57:89:
         20:ba:0f:79:20:df:66:99:8f:21:36:28:64:65:a3:a6:d7:3d:
         a5:fa:a9:7c:99:42:47:7a:c6:27:62:2d:e8:93:5d:e7:2b:8e:
         25:79:c6:c6:7e:0c:28:40:21:92:98:eb:2a:ce:73:83:26:cf:
         a6:4b:66:76:25:65:a6:cf:26:0a:e3:1b:5c:ec:b8:56:2b:14:
         5a:1e:16:ee:3d:e8:64:af:88:ef:e1:0e:c4:b7:cf:d4:6e:40:
         49:5e:f9:01:7a:c8:34:4a:56:ca:c2:34:03:dd:4f:79:df:9c:
         d7:a2:eb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org