Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/TCeybkqxzVSKRzJAUuKV3TDM4As.roa
File:                     TCeybkqxzVSKRzJAUuKV3TDM4As.roa (raw, json)
Hash identifier:          V9AvcEZLrZPLU7eiP0xq1RtN6SMSLEXsCPpkMFlxPME=
Subject key identifier:   4C:27:B2:6E:4A:B1:CD:54:8A:47:32:40:52:E2:95:DD:30:CC:E0:0B
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01AB
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/TCeybkqxzVSKRzJAUuKV3TDM4As.roa
Signing time:             Mon 20 Feb 2023 07:53:12 +0000
ROA not before:           Mon 20 Feb 2023 07:53:12 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.23/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:12 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=4C27B26E4AB1CD548A47324052E295DD30CCE00B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:ab:94:21:95:ee:36:57:05:67:df:98:2f:
                    73:4d:66:e8:32:61:a7:53:6b:f7:ee:31:c6:3f:5d:
                    e8:3d:6b:6e:3e:1c:bd:b9:a9:5a:65:cd:b7:be:01:
                    cd:10:16:b0:cb:53:81:95:57:d3:c8:1e:c4:2f:45:
                    0c:1b:ac:1a:15:2c:80:32:c6:ca:f4:5e:5e:e0:c3:
                    b3:59:83:81:19:8a:48:42:1f:f5:0a:63:b5:bf:3f:
                    45:2b:4b:cb:12:22:c4:95:b0:76:eb:09:46:b4:8a:
                    e8:db:0a:69:0d:1b:64:1e:3c:d4:1f:a4:17:40:0d:
                    ea:96:19:2e:d6:77:6e:01:8a:b5:14:68:82:e7:ce:
                    1a:9a:2d:28:c4:60:a5:7e:49:be:fc:7e:11:61:0d:
                    d5:db:10:64:72:5b:5f:ca:9b:a4:54:cb:2d:70:98:
                    49:b5:08:09:55:be:5b:1b:33:4c:e8:0c:38:a8:2c:
                    12:81:19:e7:78:13:8d:1b:53:90:8a:01:17:24:59:
                    6f:81:18:18:f4:87:3a:4b:41:68:21:bd:4d:3b:91:
                    14:8a:61:cc:41:5f:92:c6:08:1f:bd:db:8c:85:d4:
                    02:d3:fd:d4:83:c5:20:37:e7:32:80:f9:1c:72:95:
                    ab:41:d7:b2:b2:da:b1:a5:db:3d:d1:f0:61:5f:ac:
                    2a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:27:B2:6E:4A:B1:CD:54:8A:47:32:40:52:E2:95:DD:30:CC:E0:0B
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/TCeybkqxzVSKRzJAUuKV3TDM4As.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.23/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:f1:53:7a:0f:46:1f:16:4d:97:a0:51:89:4a:ea:05:04:52:
         6e:a3:ae:e9:f9:09:e0:13:33:6a:76:1e:32:ad:69:d0:56:9c:
         4c:85:90:05:5b:9c:40:96:2c:e5:c5:d8:b8:94:03:9e:0d:a4:
         bb:5f:9b:53:b1:5d:ad:8c:2a:4f:01:b4:5a:7d:06:c1:e3:b8:
         39:cb:ba:68:15:a0:d3:de:18:23:d3:9c:08:62:c2:81:1b:06:
         4c:ea:58:72:10:a0:75:bc:0a:26:9e:04:f8:64:cf:e5:f2:49:
         fb:c0:9d:e8:58:77:62:f1:aa:89:73:e4:54:d7:1c:81:b5:52:
         b3:8e:6c:6f:58:03:a4:12:c6:e7:1e:2c:75:bb:6d:66:58:1d:
         2e:0e:8f:ed:4f:1b:fb:4e:2d:7e:5b:9e:9b:bf:d6:16:4f:51:
         bf:67:06:9a:2d:6f:29:23:d6:d6:a4:6e:f8:b0:56:72:de:f0:
         f4:77:3b:14:f5:64:db:e9:70:fd:44:91:f5:59:69:fd:03:b4:
         ce:81:f0:9a:dc:01:64:91:4b:a5:4f:5b:1c:c1:a4:fc:80:ee:
         30:43:75:20:e9:3d:50:f8:42:e7:05:a4:ed:f0:d7:78:c3:0e:
         f0:8e:ac:4c:ec:62:1a:34:d0:e4:8e:d3:f5:7a:11:8b:0d:60:
         3d:5d:43:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org