Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/aE25LiWW2gdp-eHTC4yMfIhfE6M.roa
File:                     aE25LiWW2gdp-eHTC4yMfIhfE6M.roa (raw, json)
Hash identifier:          ZKlw/quMVVv4PYsH+NfZ30bdvPkDUaZAyCaS6M5y+4I=
Subject key identifier:   68:4D:B9:2E:25:96:DA:07:69:F9:E1:D3:0B:8C:8C:7C:88:5F:13:A3
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0212
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/aE25LiWW2gdp-eHTC4yMfIhfE6M.roa
Signing time:             Mon 20 Feb 2023 07:57:39 +0000
ROA not before:           Mon 20 Feb 2023 07:57:39 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.129/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:39 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=684DB92E2596DA0769F9E1D30B8C8C7C885F13A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:05:57:8a:e8:52:13:35:63:4c:85:f9:86:7a:
                    97:00:cd:d6:af:ec:a2:24:00:40:de:9d:df:45:ab:
                    f8:9a:91:38:b2:60:96:f7:2f:75:6b:a0:9d:a6:88:
                    18:03:a7:05:1e:28:f5:b1:38:7c:e7:8a:d4:3a:55:
                    1b:1e:d4:a5:29:52:bf:1b:31:52:53:2d:c6:74:df:
                    63:c9:8a:80:49:51:67:92:72:df:f1:f5:b7:e1:26:
                    dd:89:6b:08:ce:d2:7f:48:90:78:f8:21:eb:1d:8d:
                    67:4e:89:26:44:87:54:a5:c1:42:68:96:58:6d:0c:
                    af:a0:33:7f:0d:63:03:a9:7f:93:10:20:ff:f2:3f:
                    4e:2c:25:db:cc:8d:4b:18:a7:0d:98:db:ad:96:c7:
                    64:02:bf:ab:5a:24:8c:37:7a:46:db:fc:6e:f5:7b:
                    38:e3:23:fd:ec:76:a7:a7:d7:dc:bb:c9:20:6e:00:
                    16:56:c2:b7:ea:33:aa:97:24:f1:c6:c8:43:8c:32:
                    fa:08:c6:ca:22:ae:97:4b:8c:2a:16:3a:1b:a9:eb:
                    0d:ba:9e:1d:d4:e6:43:ac:05:83:f3:8f:a9:27:8f:
                    f4:1c:74:51:3a:9f:7c:53:e0:c5:9a:19:d0:67:78:
                    72:9d:03:53:d0:ba:5b:3c:dc:bf:27:41:2d:14:ab:
                    e3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4D:B9:2E:25:96:DA:07:69:F9:E1:D3:0B:8C:8C:7C:88:5F:13:A3
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/aE25LiWW2gdp-eHTC4yMfIhfE6M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.129/32

    Signature Algorithm: sha256WithRSAEncryption
         43:6c:fe:cc:19:e6:06:57:a9:a9:02:05:d1:c3:da:98:08:81:
         c7:54:17:cf:ac:f4:bc:f7:b7:ed:94:b3:f0:74:6b:57:68:f2:
         da:40:87:ea:3a:e1:10:74:3a:7e:0b:e7:22:1b:2b:47:f4:d5:
         27:e9:3a:f2:b2:00:bb:d2:42:c8:22:1c:17:30:42:a5:6f:eb:
         f2:76:85:98:3f:e7:75:7a:48:6c:c7:b0:a8:1c:22:64:c4:d0:
         c2:54:f2:28:e8:03:5b:f0:a0:d2:03:2d:24:4c:a0:cc:6d:98:
         2b:a9:4c:f6:01:d0:06:c5:d7:5d:61:d4:5b:ab:1e:ad:48:4c:
         c6:78:d4:7f:44:aa:df:b0:73:db:f5:47:43:3f:0a:54:5b:a6:
         18:17:25:e5:28:b7:b6:b9:fd:cc:bb:95:a4:be:6a:ff:46:9b:
         a9:38:9f:53:34:ce:fc:ab:93:9e:8f:27:eb:67:ac:9b:86:2b:
         b1:9b:fa:b1:cc:5d:44:e0:45:cb:75:ab:1e:a6:cc:b1:28:66:
         ee:2e:d8:18:94:8c:f5:86:2c:97:15:ea:a6:f9:e7:8f:e1:e2:
         da:70:04:f1:13:5e:de:84:4c:85:af:b7:8e:55:12:93:99:70:
         3a:9a:cb:52:6f:c2:e4:56:28:62:ed:47:ea:02:98:b2:bc:52:
         0a:da:d8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org