Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/TCaj8yqTFSyVb8yT9sYmWq5mdic.roa
File:                     TCaj8yqTFSyVb8yT9sYmWq5mdic.roa (raw, json)
Hash identifier:          lWuwQeRxd7SaXhmtim9WoLYHWTIR4nihL6G1lCGHpCc=
Subject key identifier:   4C:26:A3:F3:2A:93:15:2C:95:6F:CC:93:F6:C6:26:5A:AE:66:76:27
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01BB
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/TCaj8yqTFSyVb8yT9sYmWq5mdic.roa
Signing time:             Mon 20 Feb 2023 07:53:18 +0000
ROA not before:           Mon 20 Feb 2023 07:53:18 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.164/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:18 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=4C26A3F32A93152C956FCC93F6C6265AAE667627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a4:e3:49:08:38:1a:4d:83:4d:e8:68:9d:8b:
                    66:e9:df:b4:8c:7b:3f:f1:50:9c:7b:cf:38:0e:e8:
                    e1:30:95:c2:b0:05:81:3a:3d:98:1e:fb:44:f3:6b:
                    ff:29:b8:5f:0c:c0:4b:f3:7d:2d:98:6b:52:39:bc:
                    0c:59:10:48:a5:6e:da:98:41:58:62:7a:0f:31:25:
                    ee:21:9b:ad:57:1b:bc:ba:a6:c8:d0:40:d6:97:90:
                    c6:8f:6d:94:a5:6f:a0:e5:9b:dd:4b:23:24:43:a4:
                    09:b4:29:8e:c7:12:f4:b3:cd:b8:fd:ef:9a:b2:92:
                    87:ed:f8:d5:b6:51:7f:e2:5e:a1:07:c6:c1:59:b8:
                    fc:76:13:d2:72:68:fe:99:ca:3e:8e:99:be:32:ad:
                    94:4c:62:af:41:5b:fc:5d:52:d3:d4:11:b4:69:cc:
                    d7:6f:f1:b9:fa:58:3b:a1:a8:5f:29:25:bc:e2:6f:
                    53:54:ac:60:6a:a9:20:3d:69:28:02:aa:13:24:e1:
                    55:d7:f2:d7:de:e9:e6:31:c0:ea:02:77:39:41:9b:
                    4f:e8:65:31:6e:94:3b:3c:fc:02:39:e0:af:77:2a:
                    50:0c:6f:2c:64:57:49:e6:e5:a2:36:77:3f:cc:96:
                    f5:e3:ca:e8:a2:97:e3:49:33:87:a4:73:ab:a2:90:
                    10:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:26:A3:F3:2A:93:15:2C:95:6F:CC:93:F6:C6:26:5A:AE:66:76:27
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/TCaj8yqTFSyVb8yT9sYmWq5mdic.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.164/32

    Signature Algorithm: sha256WithRSAEncryption
         75:54:a6:39:71:82:3f:18:5e:0d:a3:bf:06:dd:20:b7:d8:12:
         99:81:04:f1:76:84:b2:3b:e9:33:7d:5f:7e:9f:49:4b:be:2a:
         5c:62:6d:82:52:aa:33:24:39:2a:9b:08:c2:ae:f1:02:f8:c3:
         14:a8:67:ce:c8:ec:9c:c5:74:55:13:f2:0f:c8:bd:59:99:df:
         ae:41:32:a5:90:88:c2:20:32:55:8f:98:61:54:84:66:8a:a1:
         dd:5c:1b:f4:28:ea:17:7d:44:c0:40:2b:a0:19:d7:7d:f8:85:
         80:3c:fe:ea:99:e7:58:ab:b2:2f:b7:fe:9f:69:dd:2d:be:60:
         76:c6:65:e9:05:74:23:4e:38:ec:74:c7:8b:71:7c:26:d2:7d:
         82:d1:a3:55:1d:64:03:d0:56:b6:b5:75:b0:96:a7:9b:0c:df:
         3e:f8:45:27:b8:86:80:cb:cd:93:0b:18:e6:a7:9d:6f:04:9a:
         5d:22:f4:d7:ce:1c:1e:2a:b9:bb:dc:b5:72:ed:58:b2:be:58:
         a1:fa:60:e2:20:19:68:b2:f3:d5:ae:f1:7f:fd:21:91:12:be:
         2a:08:a9:66:01:67:50:70:3d:88:71:a0:1e:b3:86:19:60:f4:
         9c:db:4e:28:a4:c1:0a:c0:d5:9f:2a:2c:07:33:5d:73:aa:f0:
         2f:0c:b6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org