Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/NPpVmTsC0kGEJADUu3H76Hmj1pA.roa
File:                     NPpVmTsC0kGEJADUu3H76Hmj1pA.roa (raw, json)
Hash identifier:          5lb5CK/7HJior3qvcbq9+O/yuz/KOrk5i0qK5PVqPL4=
Subject key identifier:   34:FA:55:99:3B:02:D2:41:84:24:00:D4:BB:71:FB:E8:79:A3:D6:90
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       021E
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/NPpVmTsC0kGEJADUu3H76Hmj1pA.roa
Signing time:             Mon 20 Feb 2023 07:59:22 +0000
ROA not before:           Mon 20 Feb 2023 07:59:22 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.59/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:59:22 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=34FA55993B02D241842400D4BB71FBE879A3D690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:97:d4:52:db:db:82:d4:9b:ab:8b:e3:8b:
                    0f:2f:19:f6:fe:b2:d4:58:f6:2b:43:c7:b3:ed:2f:
                    96:6b:dd:f5:cd:0a:39:5f:ca:0d:4c:c5:9d:05:27:
                    b6:a3:91:a5:91:0d:61:39:f4:f2:d2:23:b8:b6:61:
                    75:47:c8:c3:de:80:52:b2:2b:e8:aa:65:28:9c:28:
                    52:bf:5e:7e:4f:95:2e:cf:5c:79:82:ef:46:19:20:
                    44:3f:59:37:88:e4:9a:3f:c9:a4:9b:ea:29:e3:89:
                    a2:5a:fb:ea:e0:37:e0:12:13:50:8c:ab:6d:ab:49:
                    a9:b2:72:6b:96:df:1f:28:2f:ea:71:ca:52:eb:25:
                    2f:fe:96:49:09:24:c7:07:fd:e7:e8:0a:80:6f:f5:
                    19:af:e1:1a:2e:71:59:a6:21:4f:2b:2c:ef:f4:aa:
                    5e:25:bf:64:96:0d:40:8d:3a:35:f7:9e:bc:c2:41:
                    59:4e:c2:8f:87:2e:a6:f9:9b:57:51:c2:32:91:ec:
                    c7:6f:7b:b0:50:a1:82:69:50:41:a4:70:df:d7:c6:
                    74:ea:d1:ab:e8:aa:b0:95:f9:47:f0:09:6a:31:d1:
                    81:5b:19:85:22:e0:cb:9f:22:36:80:7e:7c:46:22:
                    1b:26:88:a6:84:6f:e5:3f:11:76:92:e1:b4:f4:ac:
                    12:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FA:55:99:3B:02:D2:41:84:24:00:D4:BB:71:FB:E8:79:A3:D6:90
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/NPpVmTsC0kGEJADUu3H76Hmj1pA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.59/32

    Signature Algorithm: sha256WithRSAEncryption
         05:53:ac:a7:d9:4c:0d:00:14:05:3e:50:57:a3:a3:35:15:ee:
         99:a5:a3:4b:3b:36:94:ac:79:20:0b:cc:18:20:72:0e:24:fa:
         12:7b:98:d7:37:12:09:7c:1d:2d:21:e4:07:fd:a7:0c:fc:59:
         2e:68:77:1e:48:f4:99:4b:d5:3b:49:d5:c6:85:60:34:d3:74:
         2b:9f:a6:9c:75:21:de:61:d5:c6:13:bf:cb:63:79:b0:a5:81:
         8e:6d:89:aa:85:86:60:7a:f5:69:36:18:f0:3d:f7:41:63:52:
         6e:f8:b3:bb:24:99:f7:e1:e8:39:bb:16:1d:45:5f:a0:35:d1:
         e2:c3:6e:01:7f:7d:22:97:fe:b9:b0:5a:e8:71:91:6c:56:0f:
         12:26:9f:aa:1a:08:33:22:32:fc:26:b7:43:8f:c1:4f:fa:6f:
         d3:c8:d7:94:40:eb:61:04:fe:fd:1c:b7:4f:35:2e:29:72:b7:
         dc:2e:a1:73:23:f2:a6:24:3c:6c:13:94:0a:86:ec:a4:81:f7:
         cd:5f:e0:d9:44:ba:53:38:93:aa:cf:10:0c:2e:32:b3:84:fc:
         06:46:df:21:bb:ef:28:42:ff:32:e1:fd:3a:32:bc:80:c8:2f:
         32:aa:3f:4f:22:d0:5d:67:e8:aa:7d:0b:12:be:09:3d:5f:ef:
         cc:d6:aa:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org