Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/OqLVUz3g9RS0ZANsa1aeJ3M2Wlg.roa
File:                     OqLVUz3g9RS0ZANsa1aeJ3M2Wlg.roa (raw, json)
Hash identifier:          rURc8vN9aYwTpXycpiVBgaWhs3NVnIXNtxpU//70Ezw=
Subject key identifier:   3A:A2:D5:53:3D:E0:F5:14:B4:64:03:6C:6B:56:9E:27:73:36:5A:58
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02B5
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/OqLVUz3g9RS0ZANsa1aeJ3M2Wlg.roa
Signing time:             Mon 20 Feb 2023 08:05:38 +0000
ROA not before:           Mon 20 Feb 2023 08:05:38 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.65/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 693 (0x2b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:38 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=3AA2D5533DE0F514B464036C6B569E2773365A58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c7:b9:9d:e9:05:d3:8a:72:25:bb:d1:2d:fc:
                    91:7c:85:6e:b1:90:d6:9e:49:fe:16:fe:b4:bd:f1:
                    5a:ee:d8:b9:a9:54:13:68:6b:77:5b:cb:bf:25:49:
                    d7:a6:b0:6b:27:eb:ae:c2:97:b2:5d:9d:10:e5:14:
                    b5:23:1d:11:01:2b:c6:40:e6:7b:12:24:f5:d9:dc:
                    11:90:d4:5b:4d:2f:db:2d:4b:38:a2:20:d1:da:1f:
                    8f:c1:fc:68:e6:7a:ce:52:f5:ca:15:64:c2:b1:a4:
                    48:a4:3c:52:a1:22:da:bf:60:8a:a4:50:98:ac:d7:
                    66:34:37:5f:80:20:8f:37:72:89:83:8a:13:f8:8c:
                    35:d1:dc:f6:7c:00:de:1a:09:cd:09:3e:18:01:06:
                    a0:73:d8:f2:a0:aa:62:35:c7:3e:21:74:be:25:04:
                    76:8d:cb:e9:0b:da:57:22:3b:91:46:94:6b:78:73:
                    14:fa:65:02:c2:8c:01:8c:e6:d7:26:68:09:40:6f:
                    33:27:04:0d:6d:f5:a1:a0:50:99:57:08:08:6b:9d:
                    ea:4e:8c:ec:90:9d:d9:46:49:c3:62:cb:5e:f5:a1:
                    7e:8a:88:71:fc:af:3e:5f:4a:59:58:b7:89:2c:b9:
                    42:87:60:08:7b:45:15:6c:ff:a6:16:51:11:ab:4c:
                    6e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A2:D5:53:3D:E0:F5:14:B4:64:03:6C:6B:56:9E:27:73:36:5A:58
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/OqLVUz3g9RS0ZANsa1aeJ3M2Wlg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.65/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:94:99:50:51:d0:40:8a:cd:56:36:d5:65:9a:e8:e9:d1:d4:
         00:03:38:e7:69:8d:a6:3b:ad:82:aa:d2:e2:bd:55:c7:b8:49:
         d6:5a:d8:0c:f7:d8:c5:d8:63:82:87:7f:d7:b4:65:54:ad:c6:
         1d:13:27:7d:c4:78:54:b6:cb:73:58:89:de:a0:0c:15:e9:18:
         d2:86:60:37:49:7c:af:31:2f:bd:e6:87:dd:cc:e6:c9:77:f3:
         08:a5:d3:42:2b:45:77:f0:e1:d1:4b:54:7d:fe:50:7d:e6:f5:
         d7:a8:18:14:5b:78:df:04:95:ff:4d:c5:a8:55:44:19:c9:ce:
         cf:63:fb:e9:b4:f1:10:81:01:c4:5f:b2:9b:ce:64:5d:4a:6c:
         36:52:3f:c4:bf:49:11:b2:57:01:1c:ae:14:89:e2:0f:a1:f8:
         b6:1b:2a:95:43:c7:b1:6c:fd:45:50:31:aa:22:24:10:e2:fe:
         02:f6:54:1d:6d:3d:9c:9c:dc:cf:a9:3d:b2:dd:cd:be:f4:04:
         d2:ff:78:71:b4:e6:d0:56:c4:fc:76:cd:03:87:7e:42:b3:72:
         60:a8:75:7c:89:79:2e:c9:5d:a0:0f:01:1b:b4:6d:50:42:9a:
         8f:76:73:84:36:ec:9c:f9:08:d5:d0:4e:e9:c6:25:76:49:b6:
         af:7c:7b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org