Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/WazK9DaUni2xIL2Q9rFS7USYYzI.roa
File:                     WazK9DaUni2xIL2Q9rFS7USYYzI.roa (raw, json)
Hash identifier:          aeEcPEasOL9BZPs7ytRTDn+8Xo85NatHt5znutlIisM=
Subject key identifier:   59:AC:CA:F4:36:94:9E:2D:B1:20:BD:90:F6:B1:52:ED:44:98:63:32
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01EB
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/WazK9DaUni2xIL2Q9rFS7USYYzI.roa
Signing time:             Mon 20 Feb 2023 07:57:25 +0000
ROA not before:           Mon 20 Feb 2023 07:57:25 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.75/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:25 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=59ACCAF436949E2DB120BD90F6B152ED44986332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:78:91:ad:db:fd:67:09:63:52:3f:52:10:d0:
                    d3:dc:fe:dd:65:fd:ee:d5:e4:6f:23:e1:46:dd:99:
                    d0:e6:d3:90:9b:90:cd:b6:b2:71:16:35:e8:5f:af:
                    cd:7b:39:ec:dd:6d:80:23:f3:a8:61:5b:40:4a:80:
                    0b:6e:be:a8:f1:7e:e0:b7:bb:0c:a9:39:46:0a:af:
                    b5:18:9d:06:b2:66:c9:e0:7e:63:e0:8b:9a:87:a5:
                    3a:a3:7d:d2:37:1b:c9:fd:b8:2d:b3:ed:33:09:71:
                    87:9b:09:8b:f0:1b:5d:56:c2:0f:fa:d4:a6:f9:d7:
                    c7:04:17:b9:19:2a:84:f8:6c:a2:fc:a9:47:2d:65:
                    5a:33:92:0e:cb:dd:af:89:ce:6e:de:0b:2f:cf:80:
                    9f:eb:08:3a:88:7e:61:01:c5:bf:e5:37:74:82:3b:
                    f2:ae:e3:d6:5e:df:59:85:0e:9a:06:36:3d:08:ac:
                    9e:fb:78:fe:89:f3:4a:f3:83:27:d2:b7:94:94:56:
                    ce:d7:8f:dc:30:e8:bb:42:d7:f7:4e:59:3e:eb:ae:
                    d7:43:a9:b2:c3:dd:5e:64:0f:b0:9f:d0:38:48:08:
                    9a:05:a8:39:21:73:10:cf:df:ef:7e:a2:57:09:f3:
                    ca:32:43:1c:75:97:20:7a:68:8b:7c:cf:f5:cd:bc:
                    42:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AC:CA:F4:36:94:9E:2D:B1:20:BD:90:F6:B1:52:ED:44:98:63:32
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/WazK9DaUni2xIL2Q9rFS7USYYzI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.75/32

    Signature Algorithm: sha256WithRSAEncryption
         82:53:e0:33:45:72:4f:bd:6b:10:0a:03:1b:43:92:2e:56:d8:
         2f:b7:ef:84:97:3d:88:f5:63:f5:ba:52:75:00:7a:d6:1d:59:
         eb:30:12:30:8a:eb:0b:68:8d:74:13:34:17:86:ff:3b:15:aa:
         d9:ae:dc:5e:82:f0:00:74:da:ec:d3:c9:f5:44:aa:15:51:16:
         b2:b3:62:5b:7e:65:42:1f:59:93:11:13:f5:af:ad:10:4e:9a:
         d6:d2:bc:75:47:96:b7:c8:ea:28:bb:aa:a2:ed:1a:d8:e7:a3:
         49:d5:d3:97:81:a7:6e:a0:4b:06:34:40:89:cf:13:bd:3a:e8:
         13:7f:90:16:c1:65:fc:d0:13:6e:70:17:32:02:9f:a0:36:5e:
         8d:4e:2c:34:7c:b3:0b:a7:9f:fd:9c:15:8e:79:18:f0:5e:26:
         1d:1d:6c:73:88:21:43:19:0c:50:9c:b6:20:5e:94:22:c8:4b:
         c1:cf:a6:ba:93:a1:3c:d9:a4:aa:ed:84:29:90:07:5e:ee:5d:
         a1:f5:76:0b:99:ea:e9:f3:66:7b:06:0d:10:8a:98:f1:fc:f8:
         01:c4:04:22:ab:09:86:82:f2:e2:92:3a:01:d6:52:10:a7:71:
         16:b0:87:54:ea:28:20:cc:3c:8f:a8:e9:45:3e:2e:0f:4e:09:
         9a:62:f6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org