Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ToG86p6wz_iqU6YF6ScGhWxVJIo.roa
File:                     ToG86p6wz_iqU6YF6ScGhWxVJIo.roa (raw, json)
Hash identifier:          b7+868ETqdOpnR30Al6nhcWgBcC3cYZFxXe9F1SJDIE=
Subject key identifier:   4E:81:BC:EA:9E:B0:CF:F8:AA:53:A6:05:E9:27:06:85:6C:55:24:8A
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       013D
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ToG86p6wz_iqU6YF6ScGhWxVJIo.roa
Signing time:             Wed 15 Feb 2023 02:28:25 +0000
ROA not before:           Wed 15 Feb 2023 02:28:25 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.6/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:28:25 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=4E81BCEA9EB0CFF8AA53A605E92706856C55248A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2d:48:f1:7c:12:3f:07:b2:7d:f1:9d:2c:1b:
                    f6:66:90:47:e4:eb:b5:97:77:60:cd:41:e1:c5:ea:
                    f8:81:a5:db:15:21:b2:3e:a5:7d:ec:92:36:81:69:
                    34:89:ab:45:98:4c:99:d1:67:53:04:6c:f0:ff:00:
                    77:8d:e6:2c:f4:6c:0a:4e:8e:d3:17:5c:96:dc:08:
                    20:8b:e0:25:eb:4d:8b:a5:67:ac:78:28:26:9a:3f:
                    e4:a7:83:66:de:fc:94:f7:2a:64:c8:03:07:a0:fe:
                    57:bb:aa:9f:bd:cc:d2:de:86:76:d8:ed:4e:b9:76:
                    31:a5:94:38:5a:4b:fc:72:dd:b4:e7:f8:ed:1d:c2:
                    7c:e7:dd:6c:a8:d3:96:e2:7b:00:9d:54:ce:7e:6a:
                    23:1f:33:c6:cb:f3:6a:c9:9d:2c:68:fb:2a:42:63:
                    c6:99:b1:66:41:d5:22:f1:47:8f:57:2a:40:de:a3:
                    b0:71:61:79:20:a3:9f:f2:b8:a1:66:98:e7:50:f0:
                    76:98:c1:ac:01:82:81:0b:7c:7b:8e:3b:e8:9f:0b:
                    5f:40:6b:7d:4d:5c:2a:bd:39:2f:7b:a8:3f:89:32:
                    44:ff:d6:c8:ac:15:fa:eb:f0:63:d0:d7:de:3d:36:
                    32:fa:eb:3e:be:17:f9:e2:74:db:e5:0a:19:f6:a1:
                    64:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:81:BC:EA:9E:B0:CF:F8:AA:53:A6:05:E9:27:06:85:6C:55:24:8A
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ToG86p6wz_iqU6YF6ScGhWxVJIo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.6/32

    Signature Algorithm: sha256WithRSAEncryption
         53:8e:1c:9e:eb:c9:6b:86:52:cb:63:b7:10:1d:1c:a0:11:b4:
         85:8d:c3:c9:5b:36:1f:fe:30:d9:0f:64:ce:d4:a6:98:ee:bd:
         c5:a6:bf:8e:c9:0e:74:19:1d:c3:0d:3d:ed:f0:a7:f1:50:6a:
         87:7d:71:12:c2:68:fb:cb:8c:3d:0d:33:62:b5:37:ea:33:ec:
         a3:f2:b8:2b:23:bc:28:06:dd:72:37:3d:9f:04:a4:bd:2c:eb:
         4b:b1:b9:ab:b6:52:ef:6e:de:f7:e2:3e:c8:85:65:72:28:63:
         3b:63:ca:27:6e:a5:d5:ca:e9:78:9b:9b:a6:8c:70:9e:20:e3:
         0c:f4:e8:aa:e5:4b:e6:9e:dd:27:8d:06:97:a4:8f:bd:23:e2:
         31:a1:93:df:80:f2:0a:c5:d8:b6:ac:43:96:af:59:48:bd:49:
         6f:e3:21:e6:98:b6:f1:c4:b3:7e:8d:16:e3:26:36:e4:68:75:
         2e:b7:6d:62:a4:fd:c9:f4:19:3e:4a:db:90:5b:b1:bc:9e:b1:
         11:5e:64:e2:11:d7:e4:8a:59:44:92:44:5d:ed:89:b7:c5:13:
         0a:60:4c:6a:09:5d:0f:ce:f8:c8:09:56:52:58:ab:a5:16:da:
         96:f7:38:24:4d:c9:d3:7c:e6:a3:5a:e5:d5:64:b1:c8:2a:13:
         6f:fd:7c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org