Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/aN42ZCJ8voHyTmC4vZOxZg9C3wk.roa
File:                     aN42ZCJ8voHyTmC4vZOxZg9C3wk.roa (raw, json)
Hash identifier:          NOWqOT1NkaqY/Wxg3CoWktVsD3NeeJOllI7DTFKKRes=
Subject key identifier:   68:DE:36:64:22:7C:BE:81:F2:4E:60:B8:BD:93:B1:66:0F:42:DF:09
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01D5
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/aN42ZCJ8voHyTmC4vZOxZg9C3wk.roa
Signing time:             Mon 20 Feb 2023 07:55:26 +0000
ROA not before:           Mon 20 Feb 2023 07:55:26 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.115/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:55:26 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=68DE3664227CBE81F24E60B8BD93B1660F42DF09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:df:33:a8:85:e1:be:87:df:58:07:79:cd:3f:
                    b8:11:0e:1a:a7:34:0d:1f:e5:72:98:8b:7e:7f:f9:
                    7e:03:57:1e:1e:8f:55:a5:b4:e2:14:ce:00:e4:6a:
                    a8:f7:61:7b:b8:23:2a:a0:6b:91:73:16:7d:a9:db:
                    5d:01:f0:68:05:71:7d:d1:e1:fd:30:61:a8:46:ce:
                    16:57:d4:a2:31:3e:16:a3:9a:91:7d:36:73:a1:0f:
                    36:4b:de:4d:89:25:ff:1a:7d:70:b5:dd:2d:a8:10:
                    67:a0:07:2b:55:0d:5c:2a:41:25:a8:58:a2:4a:35:
                    c3:40:67:5c:c5:f9:56:ad:e1:cc:c7:ae:19:87:bb:
                    0d:c3:a7:8c:d0:6d:a5:b1:39:f2:c6:1d:ac:a5:44:
                    0e:58:63:a2:b3:9c:f5:7d:e6:12:37:96:48:b4:73:
                    1e:50:02:5a:5f:35:65:74:a3:fe:d3:96:f8:97:3e:
                    26:2a:7c:e7:77:a1:0d:01:14:34:c2:05:a4:98:85:
                    38:a6:27:d8:67:9d:6e:12:e6:55:bd:00:c5:e5:84:
                    a8:1f:9a:c8:80:64:45:0f:4a:4c:98:48:94:b9:e6:
                    76:4f:31:16:f3:89:f0:83:aa:28:47:07:76:c1:7e:
                    0d:57:0a:b0:9f:a1:d6:ba:f5:5d:26:2e:c7:65:cf:
                    71:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DE:36:64:22:7C:BE:81:F2:4E:60:B8:BD:93:B1:66:0F:42:DF:09
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/aN42ZCJ8voHyTmC4vZOxZg9C3wk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.115/32

    Signature Algorithm: sha256WithRSAEncryption
         99:95:ee:c7:67:e8:db:dd:13:d6:47:b7:63:fd:e1:93:ba:8e:
         73:38:e4:cb:d9:8a:6b:d0:a2:dd:11:a4:f5:b7:77:6f:49:41:
         e5:c6:3b:88:58:7d:24:37:d2:b3:ea:9e:78:83:75:1d:9a:67:
         18:d6:0d:3b:f0:ef:d2:77:2a:96:7a:03:d9:28:12:66:2c:e3:
         07:d7:6f:ff:c6:57:64:0a:16:67:35:22:46:01:b8:65:63:df:
         2b:d8:8e:4d:07:84:2f:fe:e3:1d:11:8c:0a:a0:ea:26:0c:79:
         71:cd:f4:4b:b2:c2:81:18:b8:9a:a5:73:17:95:f2:80:c9:31:
         a6:15:39:95:52:8a:76:09:5d:a3:bb:e8:ef:74:d7:67:bc:52:
         21:8b:6c:4e:72:3f:c6:81:e1:86:12:a8:e9:a0:92:51:c9:92:
         a0:a5:30:eb:cf:cd:81:e7:eb:8f:df:d8:35:cb:37:d9:ff:f4:
         01:10:a0:9a:e1:f4:37:10:37:08:ce:64:1a:2e:8f:3d:0e:b3:
         14:e3:40:49:28:94:b8:44:f6:cb:71:95:a7:7b:a1:87:82:99:
         6d:0d:44:63:fd:8b:67:6f:89:c4:96:52:8e:c5:02:d9:8d:90:
         72:78:8c:78:11:f9:33:3f:fb:6d:ee:ad:bc:24:59:aa:8d:87:
         06:81:fa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org