Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Ksmlzg2eze3tx6w_JjV9ZyCHgs8.roa
File:                     Ksmlzg2eze3tx6w_JjV9ZyCHgs8.roa (raw, json)
Hash identifier:          mlRMYNbvSDZcLvA4wEWYOkGi178CmeafGjp+rtIQ+Ec=
Subject key identifier:   2A:C9:A5:CE:0D:9E:CD:ED:ED:C7:AC:3F:26:35:7D:67:20:87:82:CF
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       82
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Ksmlzg2eze3tx6w_JjV9ZyCHgs8.roa
Signing time:             Fri 10 Feb 2023 07:45:31 +0000
ROA not before:           Fri 10 Feb 2023 07:45:31 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.11/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:45:31 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=2AC9A5CE0D9ECDEDEDC7AC3F26357D67208782CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3c:81:2e:a7:c6:89:5e:f4:06:97:ab:bf:7a:
                    47:ef:47:27:8a:cf:24:40:fa:df:1d:3c:c1:43:a5:
                    ca:a8:5f:ec:a0:fd:b2:59:bc:f2:b8:9e:e7:c8:03:
                    cf:ef:90:6e:68:20:82:7d:75:c7:74:16:52:9c:ec:
                    da:8a:e4:63:84:df:25:62:f0:d4:05:75:26:9a:37:
                    29:88:bb:de:89:33:c6:fd:04:8a:e1:c7:11:0b:60:
                    4f:4e:dd:a8:e3:88:ac:00:c2:35:2c:6f:44:93:95:
                    d5:1f:44:77:10:13:89:1f:d3:5c:a0:db:6f:84:fa:
                    be:da:67:15:49:ea:10:89:76:96:c1:d8:4d:ba:01:
                    b4:c6:ab:dd:93:8e:7c:15:35:03:da:e3:5f:ed:18:
                    7d:44:45:5d:21:8d:3b:49:92:45:88:fc:87:50:8a:
                    d8:96:be:34:df:d1:82:e1:ee:a6:68:32:21:c9:fa:
                    29:00:6a:62:30:88:30:66:47:ae:c4:02:da:21:35:
                    98:84:1b:e0:e3:bd:03:ab:29:10:f9:b6:8f:51:08:
                    9b:97:89:fe:59:8d:52:9f:d8:60:16:e2:7a:a3:84:
                    d0:d7:49:e0:f8:e3:cf:a0:c7:be:3c:82:3c:a4:37:
                    be:0f:4b:43:47:e7:03:62:71:55:30:ba:94:a2:04:
                    b3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C9:A5:CE:0D:9E:CD:ED:ED:C7:AC:3F:26:35:7D:67:20:87:82:CF
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Ksmlzg2eze3tx6w_JjV9ZyCHgs8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.11/32

    Signature Algorithm: sha256WithRSAEncryption
         15:8e:c0:3a:93:17:f4:c2:3a:6d:58:bb:1d:a1:81:8c:c8:a1:
         9f:c0:d6:28:84:6c:d6:bb:ca:81:f4:e8:75:de:eb:f2:40:bc:
         da:d8:8d:d1:c8:07:4d:0f:dc:23:a7:1b:3c:2c:a5:6e:b2:e4:
         84:00:48:73:6e:2d:94:57:9e:ea:e1:36:c4:86:61:63:fc:a8:
         0e:13:f3:0d:57:c7:15:e8:78:96:2f:80:1a:aa:f0:73:f7:b4:
         c5:81:5a:63:f0:cb:13:bd:13:8e:fe:f6:ff:eb:f4:21:4f:25:
         95:f2:f6:79:a8:d0:b9:68:4d:9e:b8:40:6a:92:21:94:a8:fd:
         46:23:8f:25:0a:cb:88:85:1e:4e:29:db:b0:cf:34:5e:26:15:
         13:b7:c9:83:13:38:03:84:0d:7d:ed:96:ae:7b:31:e1:21:52:
         13:42:9f:40:ff:63:ad:9d:57:c8:24:a3:95:94:e1:39:d7:e0:
         3e:9c:51:7e:9f:f0:bf:73:a0:dd:4d:f7:26:ed:23:12:44:5b:
         f8:cb:17:59:a2:4d:df:ed:79:4d:cb:5f:b5:73:67:a1:a5:8e:
         2a:f4:ec:98:17:28:45:25:4e:53:d7:7a:3e:fc:cf:cd:3f:ba:
         66:6f:a7:ea:43:08:be:46:22:2e:f7:66:dc:24:29:36:02:f3:
         f9:f9:12:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org