Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Qsj2hpejNtZoTI4Qo6NWmMPNMQ8.roa
File:                     Qsj2hpejNtZoTI4Qo6NWmMPNMQ8.roa (raw, json)
Hash identifier:          /qGVSg1DHzXeecJHMqqn5hqo2n0h55WPgom1VfpLy/o=
Subject key identifier:   42:C8:F6:86:97:A3:36:D6:68:4C:8E:10:A3:A3:56:98:C3:CD:31:0F
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0149
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Qsj2hpejNtZoTI4Qo6NWmMPNMQ8.roa
Signing time:             Wed 15 Feb 2023 02:28:28 +0000
ROA not before:           Wed 15 Feb 2023 02:28:28 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.2/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:28:28 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=42C8F68697A336D6684C8E10A3A35698C3CD310F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:52:40:2c:c9:26:15:60:97:43:79:21:28:2a:
                    2f:fe:57:78:6b:d7:8c:94:2a:ad:09:fe:fb:bc:b8:
                    d1:55:d2:aa:b3:2c:55:34:8c:96:cd:24:d8:29:18:
                    c9:2d:1d:e8:a1:20:aa:47:50:04:5c:6b:fe:59:d5:
                    67:45:8c:05:d8:e1:98:f7:a2:bf:69:29:51:f1:72:
                    b2:8c:eb:34:d7:83:c7:ac:c1:24:76:8a:c1:bb:bd:
                    26:25:22:44:0d:6a:bf:b1:4b:b5:57:76:a2:b9:6d:
                    e0:6a:19:97:8c:8b:f0:da:e2:81:16:6a:46:6c:f1:
                    5a:a9:07:32:5b:55:5d:d9:dc:dc:4e:94:5d:48:6c:
                    6f:d5:88:40:64:12:5a:78:85:15:32:7d:05:74:be:
                    4a:8a:20:03:3a:69:2f:a3:bb:22:d3:2c:19:d9:b2:
                    99:68:1c:01:56:f3:da:a8:48:58:34:77:32:68:7d:
                    80:db:dc:ec:da:71:e5:9c:7c:87:f2:cb:99:23:93:
                    a1:9c:12:7b:09:ec:f6:7f:15:59:6d:d4:91:cd:3f:
                    d8:84:01:e6:9b:2d:81:f8:de:94:3f:c9:74:36:80:
                    7a:bf:db:03:db:2c:f7:2a:36:d2:47:dc:5b:5d:0c:
                    c6:4c:77:e9:0e:f8:57:1e:f5:3b:f4:0a:29:11:de:
                    51:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C8:F6:86:97:A3:36:D6:68:4C:8E:10:A3:A3:56:98:C3:CD:31:0F
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Qsj2hpejNtZoTI4Qo6NWmMPNMQ8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.2/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:8c:03:12:d6:5b:94:fc:3c:9c:ae:c8:f8:3a:91:9a:11:ad:
         57:64:da:80:04:43:bd:a8:fc:4e:45:e4:32:02:bf:4c:37:b7:
         19:0c:db:2f:59:f4:8b:ef:98:66:a4:3a:86:80:8e:a4:b6:c9:
         38:41:16:b0:6e:46:86:5d:0b:5a:06:72:3c:f1:a9:c9:ff:50:
         ac:bc:d8:09:2c:c1:ad:85:63:91:fe:8f:cf:28:f8:6c:09:89:
         73:68:65:68:ba:8e:0a:86:b2:b8:c1:2e:be:40:66:2d:91:7b:
         04:10:5c:ef:1c:1f:6f:09:0e:ea:2b:2d:e4:3b:b2:04:c5:1b:
         ab:d1:ea:6e:72:d7:3d:36:96:2b:5a:fd:4d:eb:cc:d4:67:e5:
         15:47:e6:d9:24:a3:66:5d:b3:9b:70:77:de:88:5a:fe:4d:3c:
         1d:d1:9b:dd:c0:95:90:00:07:2a:97:c5:9d:04:66:73:ba:ed:
         2c:01:35:3c:fc:08:5b:85:8a:00:b5:f6:a2:75:aa:af:56:05:
         ab:00:a1:8c:81:19:9d:24:63:e7:cc:b6:4e:a1:7e:41:49:bd:
         3b:d6:40:63:d1:f4:d0:65:5f:5a:aa:f6:e1:6f:8b:18:02:cd:
         98:e3:22:c4:1a:df:74:04:a3:80:2f:9f:3f:81:2c:4f:c7:06:
         b7:8b:86:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org