Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/SqJNdv0P1YEBjGJy4XO7ofyoCO4.roa
File:                     SqJNdv0P1YEBjGJy4XO7ofyoCO4.roa (raw, json)
Hash identifier:          5RMTZw0nNrJ7IbgNVDa5QnHGyFe2Vg9b+tpow+UrfoU=
Subject key identifier:   4A:A2:4D:76:FD:0F:D5:81:01:8C:62:72:E1:73:BB:A1:FC:A8:08:EE
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       59
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/SqJNdv0P1YEBjGJy4XO7ofyoCO4.roa
Signing time:             Fri 10 Feb 2023 07:41:32 +0000
ROA not before:           Fri 10 Feb 2023 07:41:32 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.131/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:41:32 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=4AA24D76FD0FD581018C6272E173BBA1FCA808EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:62:1b:c5:15:4f:0f:be:90:04:88:fb:4f:51:
                    10:f7:80:b5:8f:92:84:06:9b:79:25:c7:7a:cc:7c:
                    3f:84:97:3d:4e:0c:c8:87:b5:02:56:fd:a3:84:60:
                    f3:f5:bf:a2:b5:c3:33:09:73:9f:e8:7b:c7:33:c0:
                    ac:f0:60:68:c3:6f:d8:24:4b:8b:38:59:31:10:27:
                    a6:cb:e9:35:a7:22:75:f5:41:e4:95:f0:d9:34:c5:
                    1d:6b:78:07:f5:d2:ed:39:db:66:ba:8b:f5:14:00:
                    45:dc:c3:f3:3f:c1:3a:8f:7f:4d:64:63:a3:e6:c5:
                    e5:f0:e9:68:de:13:e6:c0:c9:1e:c5:04:bf:da:56:
                    d1:b5:f3:ab:b8:18:db:8f:63:0f:37:de:c4:26:77:
                    96:b4:2d:80:e1:00:2c:23:d8:b0:e9:8d:0a:3e:71:
                    02:a8:6a:4a:fb:5c:69:44:09:0b:89:7b:f1:a1:cc:
                    1f:0c:7f:ba:5a:60:f5:b4:0e:8d:7c:56:bb:7f:c1:
                    24:e1:5a:b4:b3:d4:89:c1:c2:f4:a1:40:8d:35:1e:
                    24:da:27:83:4c:07:9f:e4:56:45:1b:28:02:0b:69:
                    d8:b4:78:28:fb:ef:40:1e:bf:1c:aa:ff:cd:ba:f9:
                    2d:c0:d6:34:3f:eb:2d:54:d6:fd:ad:80:77:fb:0e:
                    de:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A2:4D:76:FD:0F:D5:81:01:8C:62:72:E1:73:BB:A1:FC:A8:08:EE
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/SqJNdv0P1YEBjGJy4XO7ofyoCO4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.131/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:29:2d:0d:b8:1e:4e:c4:78:96:c3:ac:aa:fc:b4:63:e2:5c:
         32:fc:da:28:1c:c7:41:8c:fe:e1:40:c5:22:5e:7a:fe:be:67:
         f4:a2:63:ec:57:f3:13:ea:c9:6b:36:1b:0f:38:08:00:0d:a8:
         4e:35:cd:ee:69:13:c2:02:d3:50:85:f0:f9:dc:9b:18:7a:cb:
         03:2b:f3:b6:27:0d:2b:3c:9a:6f:e9:a3:4c:15:29:29:25:b0:
         71:93:c6:0b:73:00:aa:7d:d7:0b:4c:89:3b:76:5c:bd:24:e5:
         de:e6:c5:ff:36:6b:fd:c5:2f:21:6b:c1:da:81:c2:83:46:00:
         e9:94:18:7b:7f:74:c7:49:30:9a:fc:f1:83:86:0e:9a:84:6a:
         ed:8a:4b:c3:19:95:6c:2e:ef:5f:d6:31:2c:74:c7:9a:1b:f1:
         32:e8:2f:db:da:f6:62:92:4c:0b:99:4f:8e:a9:f8:d8:72:f1:
         07:f0:8e:6d:2c:55:db:bf:69:d6:7c:71:e7:52:81:df:d6:a4:
         3f:85:94:eb:69:ec:62:fd:41:cc:ee:f8:e0:46:d1:ef:ee:38:
         5d:7a:ff:ae:d4:e1:c5:d4:02:3c:82:08:c1:05:ed:e0:e2:04:
         7a:3e:08:19:bc:8e:da:71:04:92:96:0e:65:a7:7d:4a:08:6d:
         fb:86:65:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org