Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KuwgC9nLBbfhNvJR6paeJJCleyk.roa
File:                     KuwgC9nLBbfhNvJR6paeJJCleyk.roa (raw, json)
Hash identifier:          iVDpL1TcfkiHo+Qz5BvBFJQqkYIvkfq/EktsYCaJqmE=
Subject key identifier:   2A:EC:20:0B:D9:CB:05:B7:E1:36:F2:51:EA:96:9E:24:90:A5:7B:29
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0234
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KuwgC9nLBbfhNvJR6paeJJCleyk.roa
Signing time:             Mon 20 Feb 2023 07:59:30 +0000
ROA not before:           Mon 20 Feb 2023 07:59:30 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.123/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:59:30 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=2AEC200BD9CB05B7E136F251EA969E2490A57B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b5:72:ad:f7:11:31:5c:39:2c:4c:84:72:7a:
                    37:e6:fc:b3:a5:09:5c:12:43:28:98:a9:89:0c:bf:
                    bc:79:ec:50:99:b1:f0:01:7b:53:51:d9:02:cb:da:
                    24:5a:5a:db:6a:b8:16:13:a9:6b:9b:22:a7:f9:54:
                    b4:61:ec:7d:5c:15:1c:bc:5b:96:e8:dc:47:f4:57:
                    cf:58:10:1e:bf:e5:72:ee:02:aa:6b:c5:74:98:17:
                    08:3d:81:5d:ed:56:6e:ff:4f:ea:04:3c:9c:ca:7a:
                    c7:4f:ff:d6:81:98:ad:96:39:f2:d0:a1:73:36:64:
                    c4:15:78:b5:0e:73:23:a5:74:dd:a2:2a:58:85:21:
                    0f:d5:71:45:50:08:12:f1:ab:06:bb:38:56:b8:38:
                    aa:ab:94:c3:21:59:46:1e:cf:4c:87:1f:c6:2a:55:
                    f9:cb:f8:a0:ac:89:cf:f5:5a:31:e4:62:36:8d:39:
                    fa:9b:fc:37:5a:c4:8f:db:ce:2d:e7:c7:11:9e:24:
                    a9:a2:ed:09:0f:02:71:f2:6c:ad:6f:39:b8:d3:79:
                    1e:1e:0a:44:79:70:b9:02:df:50:42:6b:aa:94:1e:
                    da:ce:81:aa:26:73:2c:21:9f:8d:90:d6:88:bf:6a:
                    2a:34:69:e9:1e:0a:e1:8b:31:b0:17:e4:fd:d8:cd:
                    10:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EC:20:0B:D9:CB:05:B7:E1:36:F2:51:EA:96:9E:24:90:A5:7B:29
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/KuwgC9nLBbfhNvJR6paeJJCleyk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.123/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:b3:c1:f0:c1:34:3a:22:03:c7:69:8c:a2:83:7f:9b:b6:9b:
         f3:50:1d:f1:88:77:b2:aa:4b:aa:bd:ed:9c:46:cf:37:10:74:
         f2:a4:3a:f4:96:2d:8b:ec:9d:c2:86:05:44:8e:fc:c2:d8:d0:
         f7:ae:64:22:a4:10:63:b2:c3:e8:2c:70:48:09:44:bd:75:95:
         ca:39:06:70:77:78:eb:38:44:a4:8e:40:cf:01:79:05:41:2e:
         74:63:f9:66:70:48:32:53:45:6a:6f:86:a2:15:74:20:e8:4a:
         2d:7a:8c:18:4e:57:03:a7:c5:cf:de:c3:7c:d9:f3:b9:34:01:
         ff:fa:8e:1d:36:dd:39:b9:ff:08:d2:b4:f1:84:7e:da:ee:e8:
         40:15:fe:43:3a:a8:e4:c6:e0:91:67:9f:5c:e7:3e:3c:ff:93:
         90:06:fa:23:dc:96:e2:21:da:df:fc:1e:08:5e:ee:e4:0c:c2:
         4c:bc:e2:6c:af:8b:81:5b:84:40:37:35:bd:43:20:50:91:85:
         d7:47:d1:68:05:5e:62:db:09:6c:7a:8f:81:ed:a6:00:ec:16:
         6f:be:64:38:be:2b:b6:34:17:60:38:8a:b8:d2:ee:bb:68:be:
         dd:44:25:2a:6f:57:3a:f2:10:33:6d:65:01:8b:cd:26:84:8d:
         06:72:6b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org