Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ZljnxBd_vfevcA8cy2K9rJHtzEs.roa
File:                     ZljnxBd_vfevcA8cy2K9rJHtzEs.roa (raw, json)
Hash identifier:          4uWP8AQ2HNzzDjKqCdYPM6REzcz7euu3hQk1d/NOYos=
Subject key identifier:   66:58:E7:C4:17:7F:BD:F7:AF:70:0F:1C:CB:62:BD:AC:91:ED:CC:4B
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       3B
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ZljnxBd_vfevcA8cy2K9rJHtzEs.roa
Signing time:             Fri 10 Feb 2023 07:39:12 +0000
ROA not before:           Fri 10 Feb 2023 07:39:12 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.17/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:39:12 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=6658E7C4177FBDF7AF700F1CCB62BDAC91EDCC4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ec:97:d8:d9:77:07:ff:6f:98:42:8f:33:24:
                    b6:bb:46:62:2d:e1:60:fa:7f:23:81:cc:9c:5a:03:
                    df:a6:4f:87:c0:57:15:ec:6a:02:a1:86:01:30:42:
                    d5:b7:dd:c0:4e:6f:a9:55:ce:f7:05:f6:fd:1d:04:
                    6b:04:3a:36:ea:d9:08:b6:80:87:db:ee:85:b9:ef:
                    23:25:57:b6:77:0b:44:b6:c4:22:ab:5c:f9:e6:ee:
                    2b:81:6b:71:43:93:b1:6b:35:da:fa:49:37:96:c4:
                    1d:67:2b:91:8c:ca:3f:5b:a5:6f:55:0d:3d:99:42:
                    39:4b:46:6f:7c:0c:9d:b5:4d:48:4c:fa:44:5e:47:
                    fa:9e:08:dc:be:bc:61:c8:28:bf:6d:2e:ea:63:8b:
                    b4:35:2a:08:af:e8:35:59:be:84:d6:44:46:d8:21:
                    2d:94:b9:09:92:e3:8d:7f:83:8e:47:3a:e1:32:42:
                    62:29:d5:2a:3b:c2:57:70:c0:e1:59:55:fa:ec:79:
                    a6:70:6c:b0:1d:78:42:36:0d:0d:19:01:92:5f:c1:
                    5d:13:45:75:c2:e8:dd:dc:03:bd:a0:c8:fb:64:fc:
                    21:ad:72:f5:5a:99:72:a8:51:dc:63:3a:57:7b:73:
                    92:75:7c:f9:42:a7:5b:8a:95:fb:5f:a4:bf:56:0f:
                    c9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:58:E7:C4:17:7F:BD:F7:AF:70:0F:1C:CB:62:BD:AC:91:ED:CC:4B
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ZljnxBd_vfevcA8cy2K9rJHtzEs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.17/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:da:b9:bc:8e:47:17:ae:65:38:4c:a6:f5:3d:2c:4f:0c:78:
         79:4a:d7:3d:c4:2b:26:de:7b:a7:e1:e7:24:76:7b:17:cb:ea:
         2b:03:80:d0:de:4c:64:0e:5c:12:e3:c5:ef:41:a4:9f:85:ce:
         98:35:bd:01:62:27:c3:93:28:f9:d9:04:c0:7d:d7:44:3b:23:
         4e:5e:16:d6:35:b8:4d:dc:2b:49:8e:16:7e:fe:57:34:6f:73:
         5c:eb:12:87:2e:da:e4:36:e4:13:d0:f5:e3:47:90:33:82:89:
         b6:97:c2:50:6b:97:c4:c8:73:ca:05:8b:b7:81:47:83:70:29:
         19:27:82:15:90:42:fa:28:63:73:9f:0b:d7:0e:e3:e4:ff:b4:
         e7:20:47:ec:d9:f2:b3:d6:f9:80:ab:f7:b5:63:ee:5a:79:b2:
         7a:5a:9c:30:33:16:0c:7f:a2:4f:c7:6d:53:0c:76:7f:ef:28:
         4b:c0:e5:46:99:39:e9:de:93:b3:7c:ee:15:8a:9f:42:2d:71:
         62:f7:bf:33:8f:63:c1:3f:3e:7e:ad:91:be:6c:28:06:7f:70:
         5f:31:3c:ff:de:74:58:9d:bd:d6:59:d2:34:d4:7f:87:4d:6f:
         8d:21:4d:76:7d:d8:7f:90:e3:ca:1a:96:79:46:56:56:aa:d2:
         c2:9e:6a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org