Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/XZtprm0Yl6AbzrfpaVT6G_IFA6Q.roa
File:                     XZtprm0Yl6AbzrfpaVT6G_IFA6Q.roa (raw, json)
Hash identifier:          K5PX1ZCLvjQO9IE142zpcwE+7uUOao6blEUuhYidAlg=
Subject key identifier:   5D:9B:69:AE:6D:18:97:A0:1B:CE:B7:E9:69:54:FA:1B:F2:05:03:A4
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       026F
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/XZtprm0Yl6AbzrfpaVT6G_IFA6Q.roa
Signing time:             Mon 20 Feb 2023 08:03:29 +0000
ROA not before:           Mon 20 Feb 2023 08:03:29 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.163/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:03:29 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=5D9B69AE6D1897A01BCEB7E96954FA1BF20503A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:04:56:c1:5e:be:d3:c7:7d:96:1a:74:a4:
                    97:f6:7a:02:ce:13:20:1d:9f:b3:9b:ac:a0:80:0e:
                    1e:cd:2c:43:2d:7c:8b:9e:a1:87:f0:60:40:a8:fa:
                    36:bc:a4:4d:ba:00:a3:3c:8d:b9:b6:fc:d5:dd:f7:
                    ab:a5:c5:c6:68:ad:3c:be:4e:92:7c:d0:71:64:79:
                    37:37:c8:42:69:40:37:86:1e:fe:17:41:16:4f:58:
                    f0:2e:bf:87:f2:94:0e:c8:2c:29:90:58:48:df:2c:
                    b7:1a:37:8c:58:2a:a2:b4:a2:bc:11:20:7a:be:c1:
                    1a:5b:dd:b0:9e:26:5d:17:8e:1c:80:cf:55:26:b2:
                    70:59:64:67:4b:22:12:af:54:4a:c1:c9:95:39:8f:
                    1a:6e:32:15:38:07:9e:8f:2e:c9:fa:c2:bf:12:98:
                    cf:1d:52:66:39:3a:7a:fa:75:1e:9d:ad:59:b4:8b:
                    4c:6f:c1:ee:a4:11:da:97:da:ea:67:6d:31:e0:3c:
                    db:13:ea:a4:84:ea:b2:3a:86:eb:cb:58:b6:7c:f3:
                    46:5c:1f:6f:1c:c8:bd:f3:77:8b:8a:66:6d:86:ab:
                    b1:9c:dc:40:ad:2b:75:a9:a3:40:a5:e7:35:6a:6b:
                    67:2d:f4:9a:1c:7b:33:2f:f1:65:4d:35:4d:d9:15:
                    d6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9B:69:AE:6D:18:97:A0:1B:CE:B7:E9:69:54:FA:1B:F2:05:03:A4
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/XZtprm0Yl6AbzrfpaVT6G_IFA6Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.163/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:2a:be:f0:4b:43:4c:0c:8a:18:fc:44:85:42:e6:fb:4a:d0:
         5b:5a:cb:77:88:e6:c5:e6:04:90:64:41:7d:35:57:53:7d:35:
         51:df:95:ab:bb:8f:fd:e5:94:e3:3c:7a:f2:99:3d:7c:9f:e1:
         96:43:be:8b:78:e3:ea:76:27:f6:0e:64:c4:96:6b:13:8a:84:
         4b:ac:ec:60:7e:bd:3e:22:9b:f4:75:c7:df:09:35:21:8c:c3:
         b2:99:34:c5:45:b5:5b:32:e4:71:ce:54:9e:f3:56:54:dc:fc:
         fe:5d:75:f8:94:db:bf:a1:a5:b4:25:52:94:c2:81:a9:a2:38:
         d7:fd:40:df:17:b8:b5:12:2f:ae:dc:06:a1:a4:74:bd:7c:74:
         7c:39:11:49:2a:b7:e4:c3:64:4e:0f:ac:05:10:cb:cb:f8:62:
         33:d3:8c:cb:d7:64:0f:f2:b9:d6:9f:ab:ab:b2:81:20:9c:5d:
         dc:a8:c4:e9:32:b4:07:b7:6e:00:32:1e:6d:2d:9c:ab:84:c1:
         0c:9b:85:25:45:07:bd:0f:3a:6c:90:9f:0b:04:39:b9:e6:c1:
         11:42:6b:f0:74:27:1a:88:2a:6c:cf:fc:f6:36:32:11:f8:d6:
         a5:f2:0a:85:1d:c0:11:f7:a6:d7:6a:bc:13:a7:ae:d4:c9:33:
         68:f5:ca:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org