Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/_Gpxn-NQ5prD1scgddbOnn5cIf4.roa
File:                     _Gpxn-NQ5prD1scgddbOnn5cIf4.roa (raw, json)
Hash identifier:          Bd97H+KuGyZDBE9i6qoDh/VieXWGLpdIIyQTG4QBtiw=
Subject key identifier:   FC:6A:71:9F:E3:50:E6:9A:C3:D6:C7:20:75:D6:CE:9E:7E:5C:21:FE
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       7E
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/_Gpxn-NQ5prD1scgddbOnn5cIf4.roa
Signing time:             Fri 10 Feb 2023 07:43:45 +0000
ROA not before:           Fri 10 Feb 2023 07:43:45 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.240/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:43:45 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=FC6A719FE350E69AC3D6C72075D6CE9E7E5C21FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:8e:39:46:a6:d3:45:db:5d:04:df:60:c9:
                    09:e3:99:31:d6:82:04:dc:c0:05:16:f9:e3:36:e0:
                    76:ee:b4:69:51:72:44:b1:ea:e3:99:df:f5:eb:f7:
                    5b:4a:68:55:3c:02:4f:6a:9a:56:70:0f:90:d0:8b:
                    77:7c:b1:60:fe:41:b7:85:e2:6c:9e:3f:45:08:3a:
                    5e:ee:0c:80:ec:e8:33:58:3d:47:2f:3e:99:fe:58:
                    44:b6:d2:ba:3e:13:2a:42:dc:ba:49:ae:3d:8f:92:
                    29:3f:10:b7:68:c2:9d:12:2c:dd:0a:05:7c:cd:69:
                    af:c6:6b:55:c0:db:73:65:23:7b:af:79:91:f1:ae:
                    22:06:5e:e4:d8:3f:fb:39:86:d8:49:29:c0:a6:7e:
                    ee:de:4a:f2:f1:a3:05:58:9d:3d:6e:5c:10:b6:c4:
                    a9:3d:c6:54:e2:2f:9c:8d:c9:2d:cd:01:d6:df:6e:
                    ea:53:3b:80:86:e3:b6:fd:a8:48:48:48:e6:54:f1:
                    f7:59:c3:fe:55:9a:bd:3d:f8:94:d4:2f:db:b2:8f:
                    69:08:1d:3b:6b:67:8f:a9:a8:d5:e4:7f:03:d2:5f:
                    9a:70:dc:fc:a6:cb:4a:fa:3b:3f:a4:50:ff:eb:1a:
                    26:ff:43:78:f1:15:51:48:0d:32:9f:45:23:d1:4a:
                    be:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6A:71:9F:E3:50:E6:9A:C3:D6:C7:20:75:D6:CE:9E:7E:5C:21:FE
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/_Gpxn-NQ5prD1scgddbOnn5cIf4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.240/32

    Signature Algorithm: sha256WithRSAEncryption
         33:89:14:38:6c:9c:8a:a0:e1:cc:8a:71:c9:5b:2d:2f:4f:d1:
         9c:5e:53:f4:f1:ce:fe:f4:29:e5:ea:93:11:45:03:72:b4:ff:
         bd:35:72:c0:18:da:83:47:8e:26:7b:de:d5:2f:92:b5:90:d1:
         35:f4:06:ee:38:c0:16:4f:9c:0d:3e:18:1f:80:c0:7e:e4:75:
         87:8e:55:ef:e0:9f:c2:64:d5:68:72:9b:4d:85:15:e2:08:b0:
         2d:a2:f5:7d:23:f6:06:16:ee:b9:b0:2a:4e:9e:8e:f3:b5:d3:
         57:72:50:05:c8:7c:39:e7:61:35:92:0d:31:bf:11:57:4a:63:
         4a:b7:39:6b:58:9c:f0:56:21:cc:22:53:e7:3b:1b:0d:ad:68:
         09:20:ed:26:13:e4:b6:15:91:15:3d:3d:20:c4:d7:0a:1f:e5:
         96:d7:15:bd:28:21:e0:c0:af:cc:5f:a9:31:63:04:fe:21:fb:
         68:7f:d9:a6:7f:8e:da:53:35:cb:69:8d:48:aa:07:cf:09:1e:
         71:ff:78:02:e4:92:b5:17:da:52:f7:f5:f2:90:b2:be:0a:75:
         d6:30:42:78:30:a3:64:81:b9:14:1c:f6:5e:71:26:9a:37:11:
         cd:7a:6d:bd:29:f3:d0:60:1f:9f:5f:c5:b9:91:fc:53:05:94:
         7d:d3:cb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org