Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/RFA2QnwbYbDc4N7947rO1-XyjlA.roa
File:                     RFA2QnwbYbDc4N7947rO1-XyjlA.roa (raw, json)
Hash identifier:          GrLlpteLDvYjACPO0Mk0iiHY/9pKWN6WUWFl3j4tSJE=
Subject key identifier:   44:50:36:42:7C:1B:61:B0:DC:E0:DE:FD:E3:BA:CE:D7:E5:F2:8E:50
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0258
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/RFA2QnwbYbDc4N7947rO1-XyjlA.roa
Signing time:             Mon 20 Feb 2023 08:01:33 +0000
ROA not before:           Mon 20 Feb 2023 08:01:33 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.120/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600 (0x258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:01:33 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=445036427C1B61B0DCE0DEFDE3BACED7E5F28E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:dc:a3:ea:2d:e5:2d:ed:59:da:b2:51:d1:29:
                    e2:9a:7e:9a:9f:d7:f6:66:f2:44:1c:ad:2f:c1:fc:
                    a5:a6:d8:66:dc:8e:26:89:dc:13:59:55:0c:59:1a:
                    08:d0:45:b1:13:ff:c2:6e:aa:86:6f:a6:51:1a:09:
                    a3:b4:7a:54:ab:ca:e5:95:ca:70:75:ff:8f:93:5e:
                    9f:66:a3:67:6a:0c:9e:ba:a5:36:0f:32:23:69:00:
                    3b:ef:31:6d:94:1c:38:47:b1:69:b9:ad:ac:ec:25:
                    46:27:85:18:0b:be:3b:1f:1c:ff:eb:8d:3a:46:d5:
                    d5:b6:ab:36:f0:54:4d:ed:29:9d:11:71:60:68:93:
                    5f:8c:4a:19:34:1f:9c:7d:b8:81:0a:c4:a8:a9:d4:
                    d2:69:77:f9:c1:a5:e3:5c:60:72:b3:ba:85:3f:7d:
                    d6:40:7e:68:cc:f3:40:72:3a:f6:65:ab:9f:3a:e9:
                    39:a2:29:4f:77:ee:e6:1e:69:01:08:0b:1e:2c:47:
                    45:ef:9d:0a:da:e8:56:4e:64:9c:b0:56:ec:e5:ed:
                    83:b5:80:fa:ef:0d:8c:8c:65:15:49:cf:12:c9:89:
                    e3:0a:e2:b7:d6:6a:a3:54:e3:f1:17:c5:f2:c2:55:
                    6c:a5:a3:4f:5d:2b:11:ef:95:1e:ea:5f:08:a1:1a:
                    6a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:50:36:42:7C:1B:61:B0:DC:E0:DE:FD:E3:BA:CE:D7:E5:F2:8E:50
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/RFA2QnwbYbDc4N7947rO1-XyjlA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.120/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:06:2c:d6:bd:7d:2b:5c:81:43:09:a4:13:3f:14:e2:4b:09:
         be:f0:1f:74:61:df:20:4b:9b:2d:ed:ad:bd:67:ec:9d:41:9c:
         93:d4:e3:a1:e5:32:f5:2e:f9:7e:42:f5:91:76:89:7c:db:91:
         e3:bf:cd:0c:8b:3a:9f:25:14:16:38:68:c9:0b:b8:d4:ad:7f:
         5d:14:77:bc:bb:36:cd:11:92:e0:94:f5:f8:e5:dc:8f:9d:98:
         a4:8e:f1:dd:e4:75:67:c1:8d:40:24:ec:f6:cc:6e:bc:04:d8:
         68:c1:5a:ad:25:62:9e:21:eb:69:3c:9c:55:4f:4d:74:30:c1:
         8e:96:72:51:cf:29:fb:a0:1c:32:32:93:ed:9b:e0:b9:53:c1:
         08:f9:5d:bf:94:0d:c9:aa:bf:8d:74:5a:e4:45:63:cb:df:78:
         31:61:43:9f:4d:3a:65:cc:cc:6f:4c:b8:31:22:9c:5a:ea:6e:
         13:f3:e9:ce:e5:72:ee:dd:ad:f7:95:f8:d7:15:22:5d:53:c2:
         b0:62:f7:26:06:05:d3:8a:f3:bd:47:f9:10:53:3a:aa:0b:34:
         d3:55:36:e9:de:0e:ee:48:fa:c4:76:5f:38:6c:3a:a7:a5:b9:
         43:a5:7c:89:ad:24:62:18:04:f5:92:56:45:ef:39:f9:2b:31:
         23:74:52:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org