Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/SXHr1Bpa07IDBAEHsbo9xY7hY_w.roa
File:                     SXHr1Bpa07IDBAEHsbo9xY7hY_w.roa (raw, json)
Hash identifier:          1MhL/FwUZhVEL2tQhcQ1MjDEcH7fEN8Ez8Dv7LW+qNA=
Subject key identifier:   49:71:EB:D4:1A:5A:D3:B2:03:04:01:07:B1:BA:3D:C5:8E:E1:63:FC
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02A1
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/SXHr1Bpa07IDBAEHsbo9xY7hY_w.roa
Signing time:             Mon 20 Feb 2023 08:05:30 +0000
ROA not before:           Mon 20 Feb 2023 08:05:30 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.234/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673 (0x2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:30 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=4971EBD41A5AD3B203040107B1BA3DC58EE163FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:51:5b:04:f1:0e:3f:69:8f:4a:a7:d4:a9:87:
                    8b:0c:bc:93:ca:e5:c3:3c:73:6f:fd:ed:d4:db:27:
                    3c:c7:be:b5:54:04:3b:0f:f0:b9:0c:df:e2:21:e6:
                    47:fb:00:59:11:10:e7:0d:63:a7:c5:30:02:7c:d0:
                    77:e4:a5:36:61:aa:4b:84:a4:43:4f:2c:a3:fc:2f:
                    cd:d0:35:12:22:6a:1e:08:8f:0d:29:63:26:c7:1d:
                    69:ba:27:9c:0f:8a:be:68:6e:3c:bc:26:b6:61:b9:
                    a6:48:70:14:1a:4e:44:a2:9e:90:40:56:f7:ed:09:
                    b8:1d:30:80:89:c6:a7:1c:01:90:f1:51:37:68:11:
                    ba:32:4b:d2:9e:48:11:a9:68:28:6e:6a:58:37:7a:
                    d4:80:5b:92:49:78:c7:b3:20:8a:12:d9:e9:91:7b:
                    89:ef:77:62:e5:1d:7d:de:a5:f6:d6:fc:7a:ef:e1:
                    58:c8:7f:e9:39:1a:1b:bc:bf:8c:3d:9e:e2:f5:ee:
                    69:64:45:e2:73:4b:56:46:d7:3c:32:2d:0d:8e:40:
                    da:54:a7:3b:7b:de:ec:0b:75:94:bf:bd:2e:cd:87:
                    b0:86:f3:08:22:03:6c:0c:f4:f7:63:8f:3e:d0:33:
                    72:06:dd:5f:83:e5:4a:f5:10:47:fc:ec:ac:7e:87:
                    8f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:71:EB:D4:1A:5A:D3:B2:03:04:01:07:B1:BA:3D:C5:8E:E1:63:FC
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/SXHr1Bpa07IDBAEHsbo9xY7hY_w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.234/32

    Signature Algorithm: sha256WithRSAEncryption
         42:bc:a7:eb:b6:b9:50:cb:ca:0d:00:77:5f:8a:42:51:83:4e:
         19:0c:85:0d:b3:13:ef:62:a3:79:b4:51:a4:72:31:4c:f3:f6:
         7e:a7:40:19:11:8c:09:58:78:a7:a0:fd:14:62:48:b3:e0:80:
         88:57:51:69:b1:f2:26:6e:e6:4b:d8:5e:73:e8:0e:f0:a9:15:
         67:ca:5f:7e:99:0c:bf:5e:09:b3:31:7d:fe:28:f0:01:78:98:
         59:1c:9c:0d:71:cf:cf:10:4c:84:b0:03:37:47:ed:b5:4f:84:
         34:5f:05:77:d0:60:7b:06:f9:33:b6:bb:9a:b1:9b:0a:d5:bb:
         2b:77:ac:80:99:b8:70:79:97:58:fb:ea:af:7c:c4:72:5e:65:
         69:dc:44:3f:ff:52:df:74:fb:8a:0a:f5:6e:c5:1c:1c:03:e5:
         0a:8f:59:22:4b:a6:a0:26:d3:ab:5d:ed:73:e3:43:69:db:f5:
         0f:55:21:7e:23:d5:83:10:45:ba:80:03:a0:ac:58:8f:89:d4:
         a5:73:2f:47:8f:19:f4:a6:39:07:92:62:bf:e1:b7:92:ca:7a:
         c8:8a:e7:e6:c8:47:b3:f1:c5:9d:3f:81:68:29:d7:82:82:8c:
         8f:1c:63:05:6e:1f:d8:85:5a:b3:8c:3e:01:3b:f3:74:7d:1a:
         51:c4:63:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org