Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Ni0-Y34ge1ePV7-P7AHb_5D_838.roa
File:                     Ni0-Y34ge1ePV7-P7AHb_5D_838.roa (raw, json)
Hash identifier:          2nSlCliWY2J5OuBfbS6i9FQyxykbcqFQaFqdrwxbH7s=
Subject key identifier:   36:2D:3E:63:7E:20:7B:57:8F:57:BF:8F:EC:01:DB:FF:90:FF:F3:7F
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0245
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Ni0-Y34ge1ePV7-P7AHb_5D_838.roa
Signing time:             Mon 20 Feb 2023 08:01:26 +0000
ROA not before:           Mon 20 Feb 2023 08:01:26 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.240/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:01:26 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=362D3E637E207B578F57BF8FEC01DBFF90FFF37F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a8:68:e6:ed:72:cc:9c:d6:bf:d6:89:f3:17:
                    aa:ce:95:f4:30:ae:d2:61:30:39:cf:53:89:9a:ee:
                    0e:a6:f4:a3:bc:a9:cc:4d:7a:3b:d0:d8:df:9e:ec:
                    a5:72:89:5f:e2:a5:07:be:08:fe:a2:fa:cc:57:f3:
                    68:7e:e5:af:ee:36:45:bd:1a:6c:f2:1a:59:3c:63:
                    68:a7:89:71:ec:3c:b3:57:a1:b2:42:41:9a:f0:ff:
                    50:77:02:43:61:60:92:f1:e3:c3:ab:c3:09:8d:8c:
                    c4:12:ef:56:a6:3e:23:37:44:68:20:e2:4f:14:f7:
                    a6:1b:d1:e9:5f:d0:46:88:62:a7:1b:fa:14:4f:87:
                    83:c7:7f:67:cf:87:cf:cc:f0:14:b4:01:73:2d:11:
                    ef:4d:b5:4c:8b:ea:e4:44:bd:30:23:f1:49:fe:a8:
                    cd:95:69:64:b2:3a:9a:79:b5:f5:30:ca:7a:dc:cd:
                    1f:62:0a:1b:70:68:e1:02:32:af:80:a0:7a:d0:2b:
                    e6:f0:7b:33:96:e4:41:3a:0f:23:f5:72:36:2b:bd:
                    d9:fa:da:89:e1:4a:76:cd:21:29:06:0b:f0:19:00:
                    6f:f1:42:6a:73:2b:e5:36:85:bf:a9:3a:b2:50:63:
                    cc:d5:84:c2:7c:1e:f9:d3:67:b4:ad:b9:3d:26:70:
                    43:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2D:3E:63:7E:20:7B:57:8F:57:BF:8F:EC:01:DB:FF:90:FF:F3:7F
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Ni0-Y34ge1ePV7-P7AHb_5D_838.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.240/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:90:63:67:9e:77:30:19:c4:38:0f:c0:5e:02:29:66:3c:c1:
         5d:84:8f:7b:f2:9c:33:7a:79:18:6f:36:db:7b:04:87:33:b5:
         c2:da:f6:12:fd:30:47:de:e7:ce:11:da:d5:4c:35:17:98:5f:
         ed:e0:1b:c1:f6:a5:c8:9d:f6:bb:80:6c:09:2c:1f:87:49:75:
         ed:53:05:f2:ed:4a:7c:59:b6:86:76:2c:87:2d:69:be:e5:ce:
         48:de:77:c6:61:fa:42:55:07:9c:43:ae:e8:4d:49:93:8f:12:
         51:82:cc:3c:ae:ab:72:d9:bb:ea:64:54:d4:dd:27:e2:e0:b0:
         fc:6a:1d:fd:ce:82:c4:ac:58:6e:7d:71:df:40:70:c7:b0:23:
         6c:1a:d0:9c:21:3d:77:b3:fd:d7:a5:79:34:96:39:33:e3:99:
         6e:00:b9:bc:5b:bd:27:d2:65:aa:26:e8:ac:f2:69:6a:8e:05:
         b6:e9:e5:88:65:fc:d0:98:25:72:bf:ee:c9:03:a7:5e:12:de:
         1d:d4:8a:4d:c1:79:92:fe:10:d3:3a:3d:84:48:35:63:6f:51:
         0a:ba:89:a0:86:d0:25:8b:1f:cc:e1:a9:0d:0e:3e:51:4d:66:
         9d:bc:91:79:19:d6:fa:ec:4e:b4:15:58:db:e0:e2:f2:6c:a1:
         f5:3d:ba:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org