Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Ye1IuXqyfb14KhRAuPVOwsL8nII.roa
File:                     Ye1IuXqyfb14KhRAuPVOwsL8nII.roa (raw, json)
Hash identifier:          rBfjwgzlRm2eolnqWZOg7E79uyVyzRuNcpgJp7mp8hM=
Subject key identifier:   61:ED:48:B9:7A:B2:7D:BD:78:2A:14:40:B8:F5:4E:C2:C2:FC:9C:82
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01C1
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Ye1IuXqyfb14KhRAuPVOwsL8nII.roa
Signing time:             Mon 20 Feb 2023 07:53:21 +0000
ROA not before:           Mon 20 Feb 2023 07:53:21 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.156/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:21 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=61ED48B97AB27DBD782A1440B8F54EC2C2FC9C82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4d:49:81:eb:f7:c2:6f:94:17:78:3f:5f:8e:
                    49:1b:48:14:c1:0b:c7:77:ef:a0:90:61:9d:f3:2f:
                    c9:c1:23:56:ce:3d:a8:1f:5c:ef:2a:23:13:37:07:
                    94:95:10:f2:d4:86:03:9f:ee:22:f9:89:30:04:4a:
                    2b:7e:07:d1:9f:00:01:99:aa:88:80:b4:5e:b6:8b:
                    d3:db:73:36:f8:1a:0a:bd:19:61:3a:aa:5d:19:67:
                    32:22:72:f6:5e:f3:78:3c:19:a8:8d:f1:c6:d4:83:
                    4a:b2:6f:cc:41:db:dd:6a:9e:6c:c2:fd:40:90:b2:
                    b2:e7:67:ee:d5:e5:64:ec:48:fd:9e:63:53:6b:06:
                    46:7a:7e:dd:ef:d7:da:4a:48:88:8a:b3:8e:0f:3a:
                    ed:ea:bd:11:1e:81:af:64:36:ef:a8:dc:29:50:02:
                    b4:72:cc:72:e2:7e:ab:1d:bc:1b:25:6e:6c:5b:8d:
                    45:d2:9a:a3:d3:8e:e0:cc:fe:5b:ee:a7:87:cc:e7:
                    5e:69:26:e7:69:50:70:5c:ab:c0:88:54:3e:f9:ee:
                    b7:c8:f0:23:b1:d7:0b:c6:ad:2c:f7:cb:a2:d3:b9:
                    84:79:4e:ac:8e:17:22:0d:d2:69:61:c9:a8:e2:6c:
                    55:16:39:20:ac:a1:0e:2d:2e:13:38:59:e4:9b:27:
                    7e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:ED:48:B9:7A:B2:7D:BD:78:2A:14:40:B8:F5:4E:C2:C2:FC:9C:82
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Ye1IuXqyfb14KhRAuPVOwsL8nII.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.156/32

    Signature Algorithm: sha256WithRSAEncryption
         80:5c:ff:40:4f:a5:63:3d:45:9a:53:7c:f9:03:15:2e:f9:3b:
         76:73:b0:4c:8b:26:1b:86:47:7f:e8:92:d5:28:09:8e:a8:e9:
         54:f8:f7:15:1e:35:12:29:64:5a:b7:73:46:fc:60:8e:fb:94:
         6b:63:5e:b5:d9:92:19:4d:28:89:59:45:dd:a7:83:c8:46:62:
         bf:f9:2f:fb:e4:95:83:29:b1:93:78:1b:07:55:dc:01:86:3f:
         1e:93:23:bc:d5:2c:32:a4:ee:3f:33:5e:27:d4:c4:72:b0:8b:
         47:ee:f4:da:d8:60:f9:e7:86:1b:af:d6:e7:e3:65:b9:0d:a3:
         fc:e6:f3:eb:68:43:05:57:56:3b:cc:6b:84:73:a7:1d:96:08:
         68:9e:d0:99:60:8c:4c:61:0d:cc:2d:29:ee:69:4d:02:ff:14:
         6b:4c:e6:8f:12:f9:ec:d7:37:40:a7:b7:d1:48:52:6c:8a:ea:
         49:64:e4:92:03:bb:7f:35:90:72:44:46:d9:9c:db:bd:11:0f:
         d3:21:f1:5e:db:08:bc:b0:d0:a4:c8:6a:b2:7a:73:94:9b:5f:
         a6:bf:d8:80:db:a5:71:6f:27:dd:26:a7:b6:d9:c0:3c:5f:93:
         55:64:c6:07:26:2a:76:46:87:97:33:fd:c7:95:64:04:1a:97:
         66:a0:65:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org