Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KnBMs7vdUp5GS2KFy8WxSu9Y7sk.roa
File:                     KnBMs7vdUp5GS2KFy8WxSu9Y7sk.roa (raw, json)
Hash identifier:          WhJ+Wyyp+Kl1zSxPaw5ZdrMfcb5HxMrQyDj+z5x4hlE=
Subject key identifier:   2A:70:4C:B3:BB:DD:52:9E:46:4B:62:85:CB:C5:B1:4A:EF:58:EE:C9
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02B0
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KnBMs7vdUp5GS2KFy8WxSu9Y7sk.roa
Signing time:             Mon 20 Feb 2023 08:05:36 +0000
ROA not before:           Mon 20 Feb 2023 08:05:36 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.101/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688 (0x2b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:36 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=2A704CB3BBDD529E464B6285CBC5B14AEF58EEC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:d4:3e:04:77:69:0d:0f:12:02:16:d3:ca:
                    50:e5:58:58:2d:49:1e:83:51:f0:2e:13:62:30:c8:
                    d3:9f:2b:42:4c:b9:4a:de:98:1f:eb:60:ab:a7:44:
                    78:56:94:0e:aa:0f:09:69:2e:5c:45:ca:5c:fb:b6:
                    7c:2e:7a:58:1a:03:21:6c:17:25:0d:dc:c1:6d:e0:
                    08:3e:fd:8f:23:37:e8:42:f9:d2:ff:34:a9:01:38:
                    3f:fb:df:ec:34:23:c7:72:c5:26:5b:24:28:47:4e:
                    2e:be:61:a6:8f:2a:53:f3:06:85:a1:81:cd:03:2f:
                    f3:d6:6a:58:21:83:1b:b8:3e:9a:4e:32:d4:18:a2:
                    ab:2a:69:53:b3:fe:54:d2:70:bd:70:57:cf:8e:2c:
                    21:50:87:84:67:16:8b:5c:59:5c:ad:9c:83:22:87:
                    83:c8:d5:82:6f:d7:9f:28:b6:d0:b3:a4:4f:03:79:
                    4d:f3:47:e2:f8:aa:94:a0:e4:d7:f9:a5:b6:92:db:
                    b5:bc:89:41:60:84:18:ba:4a:c7:cc:10:c7:4b:42:
                    e8:55:57:51:ca:c6:60:0c:a2:f6:41:59:a8:f7:6d:
                    e4:83:ac:be:ea:3d:c4:fc:3d:31:4a:cb:4a:ed:4a:
                    1c:6d:a3:18:fe:6c:d0:a2:4b:cd:80:54:90:21:44:
                    f0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:70:4C:B3:BB:DD:52:9E:46:4B:62:85:CB:C5:B1:4A:EF:58:EE:C9
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KnBMs7vdUp5GS2KFy8WxSu9Y7sk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.101/32

    Signature Algorithm: sha256WithRSAEncryption
         77:00:c9:6a:d3:1e:5e:1e:72:c0:3f:5c:e1:34:e4:7f:a4:cb:
         94:31:8f:fc:30:57:15:80:17:4c:eb:01:3e:88:d4:a8:67:e0:
         8f:0d:71:24:6f:7b:7f:45:5c:3d:bd:7d:ce:1d:12:55:0b:26:
         82:e4:85:9c:45:59:3b:c4:1d:c6:1f:ab:66:f5:5a:a4:75:41:
         a1:d9:46:59:27:fe:08:62:0b:9c:c2:f2:09:a7:a9:f7:50:09:
         51:1f:eb:95:0d:fd:14:3f:a5:82:19:95:ad:11:41:d5:71:11:
         b9:88:db:18:8a:08:84:80:26:4f:2f:6a:cd:05:d8:d3:14:5e:
         bc:eb:0b:c1:20:3a:d1:b3:eb:8b:d9:7f:db:79:a8:cd:55:31:
         55:c9:b0:9e:5d:49:3c:cf:b4:53:e3:66:55:83:d1:d4:5d:e4:
         35:af:92:2d:0e:79:79:09:9d:2e:6c:60:6f:41:53:21:ba:43:
         39:0e:b0:c6:5a:0c:f9:b8:20:fc:f0:9e:9c:48:99:76:ff:97:
         08:36:c9:02:80:32:78:4b:53:3b:83:fb:93:00:7d:9f:e6:fb:
         27:29:94:95:ec:f5:76:03:1e:ba:b4:d4:69:11:be:a7:0b:05:
         e1:0c:ad:96:19:94:6e:27:62:b7:3a:73:b6:53:be:3a:c5:25:
         4b:1d:d0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org