Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/OHwozKHUbk91BxlkPuxeQr4xrzY.roa
File:                     OHwozKHUbk91BxlkPuxeQr4xrzY.roa (raw, json)
Hash identifier:          hanFKtEzxmWamOMgyTCdG5d+ZEKf4d0bt9NePJPZvus=
Subject key identifier:   38:7C:28:CC:A1:D4:6E:4F:75:07:19:64:3E:EC:5E:42:BE:31:AF:36
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       76
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/OHwozKHUbk91BxlkPuxeQr4xrzY.roa
Signing time:             Fri 10 Feb 2023 07:43:42 +0000
ROA not before:           Fri 10 Feb 2023 07:43:42 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.106/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:43:42 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=387C28CCA1D46E4F750719643EEC5E42BE31AF36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ea:d6:a7:5d:3b:82:a2:1e:5a:8a:98:ec:c0:
                    90:95:a7:b0:08:14:f0:47:f1:2f:1b:2d:46:06:71:
                    ff:1f:b2:77:0e:47:30:64:e8:f0:f0:5f:e1:2a:82:
                    33:16:64:87:48:fd:12:77:80:9f:08:af:f5:28:37:
                    1d:5a:71:ee:6a:88:d7:c5:dc:47:31:6f:6a:d2:48:
                    9f:f7:2c:1b:61:6e:56:72:5d:25:b2:79:65:7b:39:
                    6a:21:3e:5c:2e:76:48:27:5e:cc:fd:a5:76:ea:97:
                    89:f6:e0:5e:d1:cc:ee:f5:27:48:59:be:6b:bd:f8:
                    5c:02:b2:72:06:44:ca:f9:1a:10:e2:0a:20:a6:ba:
                    86:5f:a4:87:d1:93:d7:b2:1f:57:ca:4f:bd:4b:9d:
                    b7:eb:e5:0d:ea:d6:1c:0b:c9:ed:00:90:ff:53:f2:
                    d7:3c:56:54:7e:a2:8a:d5:45:93:db:f8:b8:6a:10:
                    63:41:c2:5d:75:d9:66:8c:e8:15:b3:b9:42:bc:21:
                    cc:37:a2:18:1e:3a:11:15:cc:e9:28:ef:27:b0:86:
                    29:d0:90:31:76:df:e6:95:54:ec:2a:8e:2a:18:52:
                    9a:12:1f:3d:0d:9e:a1:8b:39:8f:92:6f:d3:24:ae:
                    bc:e6:58:3f:02:59:ce:15:ef:70:ca:ea:9b:18:bf:
                    3b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7C:28:CC:A1:D4:6E:4F:75:07:19:64:3E:EC:5E:42:BE:31:AF:36
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/OHwozKHUbk91BxlkPuxeQr4xrzY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.106/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:fd:64:28:fb:a9:5a:3c:d6:c8:31:ff:7b:57:8c:ff:59:2c:
         26:2c:92:26:04:a0:02:34:d7:ae:19:5c:57:e4:20:2c:d6:bc:
         72:93:ee:88:1e:8a:79:0b:8d:9c:05:eb:a8:bc:1f:42:0a:cd:
         a5:a3:30:9d:8d:ff:e5:a1:bb:01:ae:50:f9:cc:37:77:a5:53:
         ca:ae:91:b2:1a:07:01:38:fb:b6:72:6b:3b:9a:68:43:10:9a:
         fc:25:dd:e7:42:79:4d:4e:25:0d:68:bf:f5:68:0d:f8:47:6c:
         69:fd:b1:9f:06:ee:3b:8d:38:d0:89:69:27:88:a8:46:c3:35:
         0e:41:19:7f:c1:99:35:f0:06:96:e3:8f:3c:4a:64:a7:3e:44:
         84:11:a5:f4:c9:18:c3:7d:9d:28:80:1d:ab:ac:0d:aa:c6:c1:
         a6:62:63:b8:28:40:75:43:0a:7f:71:de:37:84:e4:e9:0d:c7:
         53:98:f2:15:21:0a:c1:cb:45:d5:a4:8b:93:0f:5a:23:44:e8:
         04:5c:8b:3d:2e:05:01:48:9f:9e:20:8b:3d:87:b1:5d:2b:1d:
         9c:5b:ab:c6:c7:a6:f3:28:81:8f:01:80:c0:74:bc:33:f0:07:
         de:b6:62:51:a1:8b:07:fa:5f:31:b5:6d:0b:3f:e3:67:a8:f7:
         61:49:4c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org