Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/UJsgcsvDSnI-YtofCeqc08KJduc.roa
File:                     UJsgcsvDSnI-YtofCeqc08KJduc.roa (raw, json)
Hash identifier:          iNlodRCgt/V7UrvHhIR1qmW3QcGv1e+31lpvTawWt94=
Subject key identifier:   50:9B:20:72:CB:C3:4A:72:3E:62:DA:1F:09:EA:9C:D3:C2:89:76:E7
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02BB
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/UJsgcsvDSnI-YtofCeqc08KJduc.roa
Signing time:             Mon 20 Feb 2023 08:07:21 +0000
ROA not before:           Mon 20 Feb 2023 08:07:21 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.147/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699 (0x2bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:07:21 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=509B2072CBC34A723E62DA1F09EA9CD3C28976E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:14:41:8a:68:20:7c:cd:70:d7:92:6b:dd:05:
                    7f:4a:22:11:a7:65:ff:48:a6:38:2f:e2:59:0a:16:
                    05:28:95:9a:82:a0:ef:a9:0c:00:dd:30:95:f6:91:
                    55:b8:3d:35:48:3c:eb:9b:6d:95:fd:9c:55:5f:15:
                    58:93:6a:6d:14:d7:d2:57:b6:a9:67:38:44:6b:02:
                    b8:a5:cd:41:d3:73:b7:b7:11:62:56:33:3f:22:d3:
                    51:0d:99:a0:5b:0e:e7:7d:57:c4:d5:d9:a0:28:88:
                    9a:ab:50:09:93:a6:40:f4:f3:d6:f6:95:7b:97:40:
                    4e:c2:11:37:1b:40:66:cc:3a:67:c8:06:03:90:94:
                    69:50:3a:c3:3c:21:f5:48:6d:e0:f3:0c:90:66:e5:
                    bf:ae:ac:60:f4:bb:49:23:a9:d0:6b:b1:6f:0b:7e:
                    ae:cc:3e:1f:a0:0a:20:e8:96:73:71:9a:6c:8e:a4:
                    29:6b:23:ce:37:57:61:42:16:0d:6e:88:b0:5b:85:
                    a5:d8:b7:39:7e:64:13:51:d9:45:0b:51:67:33:94:
                    db:18:03:0f:77:c3:58:1d:a2:c9:38:9a:63:b5:59:
                    a5:fd:cf:32:13:cf:0f:ef:da:cd:cc:0d:bb:5b:e9:
                    8c:71:c5:69:a6:6c:5b:52:e6:d4:d9:5a:8f:03:f1:
                    7b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9B:20:72:CB:C3:4A:72:3E:62:DA:1F:09:EA:9C:D3:C2:89:76:E7
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/UJsgcsvDSnI-YtofCeqc08KJduc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.147/32

    Signature Algorithm: sha256WithRSAEncryption
         02:c7:8e:d9:18:5f:3e:f6:27:59:ac:58:70:e4:89:b6:ae:53:
         49:1d:5a:1d:a2:cf:93:05:b5:34:30:3d:8b:21:18:86:c4:d6:
         4f:9a:e9:4c:24:68:92:68:ba:f5:fd:7f:b8:62:59:ef:b7:ff:
         51:75:9d:53:7c:6b:0c:43:d2:1d:b8:c6:65:38:7a:0b:e7:62:
         58:9c:88:87:04:ca:db:96:ca:bb:89:b3:f7:39:bb:05:9f:8c:
         6a:cc:79:27:4e:3e:72:51:9c:ca:36:2f:9f:20:64:c1:13:61:
         40:71:32:c1:4c:c7:57:c3:bf:23:6e:45:f3:41:d2:49:86:04:
         7a:e7:95:87:1e:0b:82:4b:37:29:93:b8:ac:43:d2:f7:9b:29:
         0a:96:82:ec:1c:64:37:b6:ae:cd:84:d9:5e:98:fb:d9:de:1f:
         8b:4c:0f:00:4c:e4:a5:8b:7b:20:c8:63:80:9e:19:1a:24:cd:
         e4:aa:8a:40:c2:7b:0c:2a:82:49:ea:82:5e:41:73:3e:0b:cd:
         0b:d5:f2:88:97:89:29:b5:17:3b:b6:f3:48:06:36:92:94:f1:
         2c:74:93:a3:d7:a4:76:5c:6d:c7:22:0a:af:a9:7e:0e:7d:1b:
         bc:32:75:6f:e5:03:b0:05:1e:ea:bd:e0:1b:a4:69:b5:b6:3f:
         b0:e6:42:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org