Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/dmvXYrrd3uhuiW_UceaKRLgbtPI.roa
File:                     dmvXYrrd3uhuiW_UceaKRLgbtPI.roa (raw, json)
Hash identifier:          0GmL7iDgLGZk2/AEx76z03PTQisQIi1HjKo60fWu6HQ=
Subject key identifier:   76:6B:D7:62:BA:DD:DE:E8:6E:89:6F:D4:71:E6:8A:44:B8:1B:B4:F2
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       013F
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/dmvXYrrd3uhuiW_UceaKRLgbtPI.roa
Signing time:             Wed 15 Feb 2023 02:28:25 +0000
ROA not before:           Wed 15 Feb 2023 02:28:25 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.1/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:28:25 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=766BD762BADDDEE86E896FD471E68A44B81BB4F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6a:84:81:d2:ae:68:f6:8e:90:bb:3f:79:7f:
                    3a:ad:21:4b:38:3f:b2:cb:fb:8a:58:fc:72:c0:8c:
                    79:e3:4d:b7:f9:3c:ce:d0:41:a3:82:06:72:c2:a8:
                    6f:59:7a:e3:aa:2d:9f:93:01:9d:ea:90:ca:cf:83:
                    ab:08:fd:4a:97:79:6d:98:74:c7:c8:c5:7e:80:85:
                    b7:d4:46:23:e7:e8:e8:d6:40:6e:ae:77:9b:34:61:
                    b4:89:e0:eb:6f:cd:2f:b1:d2:48:9b:5d:87:49:6b:
                    2c:ba:b8:21:e7:b7:de:54:80:38:ed:06:74:53:15:
                    4f:0a:32:70:48:fc:92:55:4f:c1:54:c6:1b:14:8a:
                    bc:b4:c1:a8:5d:9a:e7:38:0f:b3:8e:c6:70:f6:9c:
                    b4:32:f5:24:fc:82:c6:6a:d6:70:2e:91:8c:04:58:
                    eb:ac:41:05:22:b5:d2:e1:19:6e:e2:5a:a1:82:2a:
                    fc:92:18:20:3a:60:57:84:b4:37:be:e9:a2:0e:d4:
                    77:c6:fb:7a:71:47:62:5b:36:98:d0:1a:54:6f:bb:
                    a9:9a:d3:2b:28:79:65:31:2b:b1:2c:5a:cb:1a:75:
                    e8:13:20:80:3d:68:6a:25:b9:52:c7:45:cb:de:bb:
                    97:83:0e:b3:49:e6:b3:f6:95:e4:77:1c:8f:85:26:
                    95:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6B:D7:62:BA:DD:DE:E8:6E:89:6F:D4:71:E6:8A:44:B8:1B:B4:F2
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/dmvXYrrd3uhuiW_UceaKRLgbtPI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.1/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:67:fc:9a:9c:ff:88:19:d5:84:b9:4e:95:2a:18:2a:57:c0:
         53:f4:c5:ee:6c:db:97:02:4b:cf:94:96:95:e4:f3:17:a7:1a:
         94:26:df:d0:7f:91:55:f5:40:0d:2a:44:b4:1d:fd:c1:45:de:
         90:2a:63:e0:e0:a4:4b:ef:65:a8:1c:48:c6:c9:21:b0:77:c3:
         3a:35:25:6d:ec:50:23:e6:1d:04:ab:38:26:a2:1c:26:2c:37:
         1a:0f:0b:69:74:bd:70:3c:c7:70:46:24:34:87:4d:65:52:0c:
         3d:9b:31:a5:33:bd:99:1d:40:49:80:7f:fa:91:c7:d6:6f:3b:
         44:49:16:f2:23:31:d9:ed:4f:b6:56:8c:3f:89:bc:02:a1:69:
         ae:03:cb:a1:74:34:6c:d3:48:0a:a0:4e:50:4f:fa:5e:22:c7:
         50:72:cd:a7:5e:03:59:d5:fa:59:f8:8f:25:ea:0d:89:63:72:
         7e:fb:fe:d5:e9:55:4a:02:88:ac:6b:40:b1:5e:1a:de:42:88:
         ef:e2:b5:bc:ed:db:17:e0:1b:54:c1:f8:ce:25:b5:47:d3:7f:
         54:8c:ae:d2:12:b0:a8:f9:18:38:eb:ae:68:f3:41:d2:30:7d:
         66:e7:1b:f8:56:50:a4:41:ad:dc:93:68:9a:d0:c6:38:da:b4:
         b2:79:59:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org