Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/P649IkgOi0ZNo6d6XMilk7RTl8s.roa
File:                     P649IkgOi0ZNo6d6XMilk7RTl8s.roa (raw, json)
Hash identifier:          259pTLIiUH3AHl9/00SjMsfZKX+CRR0oQHrNeFB4vsg=
Subject key identifier:   3F:AE:3D:22:48:0E:8B:46:4D:A3:A7:7A:5C:C8:A5:93:B4:53:97:CB
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0268
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/P649IkgOi0ZNo6d6XMilk7RTl8s.roa
Signing time:             Mon 20 Feb 2023 08:03:26 +0000
ROA not before:           Mon 20 Feb 2023 08:03:26 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.231/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616 (0x268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:03:26 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=3FAE3D22480E8B464DA3A77A5CC8A593B45397CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0e:3a:43:ea:9d:78:8d:e3:68:48:aa:b3:de:
                    8c:3d:cd:5a:dd:b4:7a:d3:e5:9f:93:93:0b:94:d3:
                    31:34:da:54:db:92:87:a6:11:78:f5:7a:36:2b:79:
                    ab:0d:c7:dc:80:22:21:6a:b9:f3:cd:47:11:28:ec:
                    5f:31:c4:3d:42:c0:6b:c3:ad:b7:46:e4:b6:a9:87:
                    92:12:12:7f:31:72:38:7e:31:18:22:fe:b9:6c:eb:
                    b3:dc:a7:d5:ab:50:2c:40:7b:24:dd:cc:e8:09:f1:
                    fe:cf:4d:28:94:51:91:f6:2f:0a:02:5c:62:d7:6c:
                    5f:59:cf:f4:04:ea:15:81:92:79:33:7f:8d:40:ab:
                    90:6f:3c:a6:2f:8b:8d:cc:80:83:1c:80:7a:26:af:
                    ae:f8:27:8f:10:11:a8:6f:f0:1c:62:9a:fd:6c:65:
                    a3:7c:0d:8d:8f:e9:fb:ea:99:f2:ec:d5:55:c6:0d:
                    f3:1a:b5:01:77:88:a9:e0:ec:42:df:c1:eb:a5:b4:
                    29:7a:e4:ea:fc:58:14:53:04:45:42:26:d5:d2:5f:
                    60:fc:18:60:e2:b5:11:eb:7b:46:5a:04:93:f0:cf:
                    ff:55:41:12:02:19:92:2a:f9:b1:f4:a1:2b:fa:0d:
                    c6:3c:af:15:d4:21:58:15:71:d3:87:d7:87:60:2a:
                    b1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AE:3D:22:48:0E:8B:46:4D:A3:A7:7A:5C:C8:A5:93:B4:53:97:CB
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/P649IkgOi0ZNo6d6XMilk7RTl8s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.231/32

    Signature Algorithm: sha256WithRSAEncryption
         76:b1:9b:a2:b9:67:cc:21:4b:fb:25:62:80:70:ac:14:00:1f:
         15:46:29:9f:81:17:63:31:45:37:95:51:4c:af:9a:c5:a1:90:
         e7:e7:04:d3:73:ae:54:9d:29:04:15:6f:d8:01:60:e4:01:38:
         4a:5d:78:9d:29:6e:37:9d:ae:d9:fc:04:ee:73:62:7b:32:b4:
         5f:a3:09:39:bc:d3:2d:0a:7e:1e:dd:e2:40:98:e3:0d:1f:b2:
         73:ac:98:6f:43:2a:9b:63:dd:17:4f:94:67:15:a4:52:52:d6:
         bc:f5:e1:7b:f2:07:7d:1e:f0:ef:c5:3e:20:e5:b7:de:59:58:
         b8:4e:8c:75:ce:0e:14:23:7a:0f:44:92:25:a5:05:ae:e0:9e:
         17:ad:73:92:43:5a:dd:4a:3c:25:1e:d3:9f:57:62:2e:8f:70:
         e5:f8:c8:70:d6:da:bc:82:42:4a:db:56:01:b4:d1:2d:8e:17:
         72:d8:7b:34:e4:59:d3:5e:a4:af:3e:d5:2a:5c:70:2e:91:a9:
         6c:c7:9f:da:0a:b1:ba:62:30:ff:d9:a0:61:d7:7c:87:1b:eb:
         4a:ce:83:13:c0:aa:31:e9:51:00:16:95:d7:b7:ac:0f:07:88:
         d1:8b:a6:8d:57:97:c2:60:f0:97:ea:61:5f:bd:1c:d0:d6:9a:
         3a:c4:29:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org