Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/cIrej3yPK8-sxszsQVZBrvukcp4.roa
File:                     cIrej3yPK8-sxszsQVZBrvukcp4.roa (raw, json)
Hash identifier:          +7NWKs+HHv4U5TSVDFGz3fJaOxi1WWWbubzdSrAp2N8=
Subject key identifier:   70:8A:DE:8F:7C:8F:2B:CF:AC:C6:CC:EC:41:56:41:AE:FB:A4:72:9E
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0213
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/cIrej3yPK8-sxszsQVZBrvukcp4.roa
Signing time:             Mon 20 Feb 2023 07:57:39 +0000
ROA not before:           Mon 20 Feb 2023 07:57:39 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.78/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:39 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=708ADE8F7C8F2BCFACC6CCEC415641AEFBA4729E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:bf:f7:4f:47:d6:47:30:83:1b:8f:dc:dd:
                    a0:d8:45:ed:78:9b:7c:45:e6:30:11:39:b3:3e:46:
                    71:11:20:b5:63:c3:65:df:86:d6:57:34:0d:32:d2:
                    49:15:18:91:87:43:dc:e8:9d:ad:92:24:10:d2:11:
                    9c:9a:3f:f5:ae:89:f8:43:d0:88:7a:23:4d:af:c2:
                    7f:8b:08:87:b6:b9:fc:a8:e8:db:92:79:37:19:06:
                    7f:63:49:63:65:82:03:7c:6a:e0:d6:cd:33:57:77:
                    5c:1c:ea:5f:f8:75:01:46:ce:2f:f1:95:36:0a:49:
                    42:ad:02:4a:92:54:4f:4b:7c:3c:77:75:fe:4b:c5:
                    22:9e:28:30:97:6e:c8:df:6e:fc:77:08:98:c0:3f:
                    22:4a:9f:ed:b9:7f:0a:a0:25:58:54:5b:f5:a2:0b:
                    83:57:a7:81:f5:9d:ba:da:73:c9:01:fc:1d:24:4e:
                    17:3f:b2:25:c4:70:73:4d:ff:86:2e:67:73:3c:d6:
                    f1:cd:82:4b:65:04:e9:3e:dd:7d:32:cf:00:4c:bd:
                    39:1f:e0:10:b9:09:e6:a7:f4:72:a9:7c:80:e6:7a:
                    78:6e:04:37:8d:29:81:26:55:6d:08:6c:7f:09:ae:
                    53:fd:1e:b7:f7:13:2f:ca:eb:d3:22:f5:0c:1c:83:
                    0e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8A:DE:8F:7C:8F:2B:CF:AC:C6:CC:EC:41:56:41:AE:FB:A4:72:9E
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/cIrej3yPK8-sxszsQVZBrvukcp4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.78/32

    Signature Algorithm: sha256WithRSAEncryption
         75:3e:08:82:b6:87:fe:05:3d:8d:0f:b3:e6:4c:3b:f1:7c:86:
         06:94:bd:91:15:a6:74:ad:dd:2f:5c:fe:5a:90:5d:fc:c7:e6:
         03:53:e1:da:c1:f6:e0:51:a8:4a:92:d3:ab:d4:a7:88:f7:2b:
         de:bb:9f:56:15:e0:14:13:79:35:8d:0d:eb:60:fa:d1:b9:8a:
         a9:35:31:c7:7b:54:16:10:c9:52:e0:cd:18:51:8d:3d:8b:31:
         fe:59:74:73:22:4f:8e:13:1f:86:ac:63:02:08:e9:b2:a6:2b:
         88:fd:a0:e4:5d:b1:89:01:80:07:38:aa:36:b2:13:98:f7:92:
         5a:30:ed:dd:a2:55:38:fa:4b:e4:6c:d5:d0:7a:94:c9:88:a5:
         4c:38:29:82:7a:3d:0b:ec:e2:e9:8f:f7:2e:b8:8d:81:38:d3:
         bc:43:0b:36:36:f8:eb:0e:c3:1e:77:82:67:f4:de:96:f8:60:
         38:6b:6e:69:07:c0:3a:3f:a5:e4:6a:32:ed:49:fd:d5:8c:11:
         b6:3e:4b:5b:58:4b:fe:72:5f:be:a3:9c:59:7e:e7:72:41:a3:
         3a:5d:20:36:fc:d5:aa:8e:c8:cf:37:24:42:87:ba:f7:e5:b7:
         20:ab:d5:8d:0b:a6:39:b5:89:ce:ca:4e:2b:8c:09:57:8f:24:
         61:1e:f7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org