Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/P6dVwLKqE8ynivWzm95vhDM8prg.roa
File:                     P6dVwLKqE8ynivWzm95vhDM8prg.roa (raw, json)
Hash identifier:          3DyuMTqH4108K0RFe3QvNr+XPRUk50TccPSX13oz/i4=
Subject key identifier:   3F:A7:55:C0:B2:AA:13:CC:A7:8A:F5:B3:9B:DE:6F:84:33:3C:A6:B8
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       028C
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/P6dVwLKqE8ynivWzm95vhDM8prg.roa
Signing time:             Mon 20 Feb 2023 08:03:39 +0000
ROA not before:           Mon 20 Feb 2023 08:03:39 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.38/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 652 (0x28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:03:39 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=3FA755C0B2AA13CCA78AF5B39BDE6F84333CA6B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:52:02:80:94:ba:23:3a:ad:2f:8f:f0:e2:d7:
                    e4:e9:b9:cb:e2:dc:06:f5:4c:4f:1c:bb:cf:0a:50:
                    a1:0b:31:8d:df:e2:fc:77:dc:1f:e8:83:77:61:9d:
                    5c:1e:16:22:c3:1c:e9:10:df:c2:a8:2f:ac:10:df:
                    56:a7:76:d7:42:cf:9b:bc:8f:16:1b:60:db:e4:c6:
                    41:68:14:56:37:2e:fd:2e:4b:0e:3e:42:f3:cf:32:
                    6e:e7:a9:50:be:10:11:91:b4:45:fe:d3:89:09:35:
                    72:0a:3d:e4:17:8c:97:f2:73:9b:5a:46:cb:15:46:
                    08:d8:e6:90:fd:cb:b6:0a:57:5d:65:4d:78:b6:7f:
                    b7:bf:ba:7a:4f:24:e9:ef:29:87:51:a2:21:65:ce:
                    93:ae:90:bf:f8:25:55:54:02:8e:2b:57:64:6a:93:
                    dd:95:f2:be:cc:33:be:81:cb:52:f2:6d:1f:0b:06:
                    ef:a9:ff:99:f6:f4:8a:f9:c0:6a:cd:53:2d:1c:ea:
                    ec:6e:58:14:c8:60:f1:16:78:96:86:9e:08:84:ed:
                    1f:4c:1a:14:4e:51:0f:30:ca:6d:68:4e:92:d3:7f:
                    23:e4:18:84:55:2c:ed:3a:43:d2:10:40:10:c1:94:
                    3f:79:3f:f5:c7:56:da:27:b8:0e:86:1e:cd:57:14:
                    b1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A7:55:C0:B2:AA:13:CC:A7:8A:F5:B3:9B:DE:6F:84:33:3C:A6:B8
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/P6dVwLKqE8ynivWzm95vhDM8prg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.38/32

    Signature Algorithm: sha256WithRSAEncryption
         38:0f:67:b5:26:03:ed:0f:d9:1b:ba:9e:5b:f7:2d:43:03:8a:
         f4:73:f0:ca:27:b9:8f:87:52:bb:dd:4f:ea:ce:5e:8c:a9:e7:
         e1:13:7b:9c:e5:d9:e7:67:ae:a9:aa:14:2a:ba:a6:ec:72:00:
         e5:86:35:d3:c5:5f:73:cf:e8:2e:62:60:0b:76:23:b9:42:d3:
         56:dc:04:a8:d1:9c:f1:99:35:b9:e3:a7:6f:a4:1c:5b:1f:d0:
         44:00:77:4a:03:c7:58:43:63:6f:6e:38:51:50:8b:40:d1:35:
         cf:15:40:11:45:2e:ba:26:c1:a1:e5:05:fc:c8:df:1a:83:7f:
         62:13:54:ca:1f:e4:db:f7:0c:2e:c6:62:f5:23:25:32:f5:2c:
         a5:99:e5:f2:9b:1c:eb:04:54:59:45:8f:7e:e3:4a:1b:71:32:
         7e:62:28:6b:7f:d6:30:74:28:5c:66:99:51:bd:b3:2e:55:a8:
         99:26:22:10:6d:ea:b5:b9:20:e3:e2:81:1b:c1:34:4d:f4:e2:
         23:d2:cb:83:32:af:a9:e8:e9:33:b0:4e:9a:7d:ba:1f:54:fc:
         b3:89:3c:c1:c0:e3:1e:83:24:e2:b9:e4:a0:41:ca:58:9a:bf:
         c8:17:69:d2:35:8b:60:73:f9:b8:de:66:b6:57:2e:4a:5a:92:
         2b:f4:36:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org