Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/QlHR1CcyDsQv_1G8cLiA7o7WWY0.roa
File:                     QlHR1CcyDsQv_1G8cLiA7o7WWY0.roa (raw, json)
Hash identifier:          L5jpF0DYnr7KhVIJMaj/GHJlFvNJ9dyHECNpyK27rPg=
Subject key identifier:   42:51:D1:D4:27:32:0E:C4:2F:FF:51:BC:70:B8:80:EE:8E:D6:59:8D
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       3F
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/QlHR1CcyDsQv_1G8cLiA7o7WWY0.roa
Signing time:             Fri 10 Feb 2023 07:41:20 +0000
ROA not before:           Fri 10 Feb 2023 07:41:20 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.136/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:41:20 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=4251D1D427320EC42FFF51BC70B880EE8ED6598D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4e:46:24:e9:eb:76:f7:e5:6f:5a:00:1c:af:
                    bc:f3:9e:6e:8e:a5:f5:4f:eb:31:7f:1b:8e:99:c8:
                    08:d5:5c:ab:80:91:7f:52:ba:9c:e9:1c:bf:b8:4e:
                    22:72:08:c1:b4:bf:53:e8:bd:c3:6f:42:e9:15:15:
                    4d:00:7e:ad:3d:a9:26:51:cc:7a:64:4e:bd:97:57:
                    dd:95:ba:61:b2:62:1e:1b:20:ce:91:85:16:ae:54:
                    15:ad:ed:2f:25:b4:ac:c7:0a:5b:7e:c5:fc:64:f4:
                    37:46:bd:66:ad:14:fa:be:4b:ee:3d:17:93:6b:1a:
                    ff:55:8a:d0:94:62:22:72:8b:25:40:2e:3e:35:e3:
                    ec:12:8c:9e:3d:1c:fb:db:0e:e4:18:2c:7d:93:ee:
                    2f:11:03:1e:5e:99:d6:6a:a9:fa:24:94:fc:f1:94:
                    33:e8:fd:8a:e3:f9:0c:ee:6c:e8:04:7a:88:57:ee:
                    d4:8c:c3:35:c5:c8:07:d5:33:3d:7b:be:4b:e8:b5:
                    fb:c4:bd:cb:6a:66:c4:45:90:65:1f:27:c9:58:64:
                    9c:e1:32:bf:56:de:48:d8:1d:6f:1e:ca:59:a0:13:
                    30:9a:6e:71:88:6a:cd:97:cf:69:5e:31:7a:f1:20:
                    98:f7:72:c1:7d:a4:16:d6:ef:96:ad:8b:8d:57:e1:
                    1d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:51:D1:D4:27:32:0E:C4:2F:FF:51:BC:70:B8:80:EE:8E:D6:59:8D
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/QlHR1CcyDsQv_1G8cLiA7o7WWY0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.136/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:df:30:0c:f7:f0:d6:0b:e7:42:1b:ab:f6:7a:e9:31:22:b4:
         b4:21:a9:fa:2e:bb:0c:78:b4:90:8f:6a:82:bc:48:25:8f:7b:
         53:09:48:f7:a7:9c:ab:00:c8:5e:1c:7f:cb:31:9e:d9:8f:f9:
         ad:8f:aa:6e:68:03:a5:7d:19:f0:53:e8:ce:6e:41:9a:9a:44:
         8e:c9:9b:39:3e:d2:a1:3c:2c:33:28:b6:c4:33:e8:5b:35:64:
         27:a4:8a:73:f1:63:17:eb:f4:10:a2:a5:86:90:eb:3d:cb:55:
         a5:f6:29:42:14:fe:9f:08:b8:82:88:e7:b7:b2:b8:54:0e:1d:
         d9:42:ff:13:22:45:3f:bc:c1:22:07:84:1f:ca:7f:4c:47:0f:
         96:ed:31:06:75:b6:82:95:2e:41:0b:85:c1:48:87:1b:c7:16:
         ef:9a:d9:3f:93:c9:5a:2a:7a:3f:18:6e:39:85:b2:51:dd:b5:
         b0:53:e5:9f:9b:ae:c3:5a:62:9e:39:fd:40:85:2a:53:99:09:
         67:5a:e3:5a:09:62:c1:5d:3f:ee:7f:98:90:b0:a2:15:19:b8:
         20:32:09:e5:80:46:ce:0c:ba:50:19:b4:2f:45:b8:2a:c7:76:
         92:80:9b:b4:46:b4:54:24:98:90:c9:28:63:07:ba:c3:a0:70:
         5d:b8:4f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org