Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/dqllEu6Op1MoUSwWFcO9uFWPBVs.roa
File:                     dqllEu6Op1MoUSwWFcO9uFWPBVs.roa (raw, json)
Hash identifier:          Tjax2Q6ZZD0ZMxJw1TUZ0CvI4gJptxoK2eZr3mCGam8=
Subject key identifier:   76:A9:65:12:EE:8E:A7:53:28:51:2C:16:15:C3:BD:B8:55:8F:05:5B
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0210
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/dqllEu6Op1MoUSwWFcO9uFWPBVs.roa
Signing time:             Mon 20 Feb 2023 07:57:38 +0000
ROA not before:           Mon 20 Feb 2023 07:57:38 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.238/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:38 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=76A96512EE8EA75328512C1615C3BDB8558F055B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:69:ef:47:35:19:11:c3:6b:06:4b:45:86:fd:
                    be:3a:ef:d4:30:46:ee:dc:86:b1:9d:a5:df:b7:65:
                    88:0c:dd:dc:29:93:5c:df:fb:0a:09:9e:8c:a8:5d:
                    fc:a4:b1:08:65:c0:0f:e7:d7:bd:72:fb:a7:be:16:
                    c3:22:c5:1e:62:44:11:c9:44:1a:a5:ee:ae:bc:de:
                    57:08:6b:36:57:42:06:98:8b:a2:4b:93:37:ca:d2:
                    be:b3:8e:35:0c:05:cf:b8:7b:92:fd:26:7b:24:c9:
                    cf:6e:76:5f:49:d0:28:1a:49:1a:1f:a6:b0:11:d9:
                    4a:fc:e3:f9:5d:15:51:fd:17:66:e7:8a:15:97:0f:
                    b2:65:a9:47:37:2c:71:41:10:5b:1c:be:ba:5b:54:
                    3a:3d:57:e0:46:69:f4:9c:20:6e:75:1a:e1:75:01:
                    20:8e:4b:68:08:96:15:19:f7:ae:d5:09:fe:35:56:
                    c7:5b:a0:5b:97:99:c5:37:79:12:b4:ea:86:05:9a:
                    93:e6:ec:03:65:b6:36:8c:fb:83:5e:dd:3b:83:75:
                    29:ca:59:46:f1:8e:00:10:24:8d:b4:ca:20:cd:7f:
                    bc:79:c4:ca:f8:01:94:2e:7e:86:55:e5:6e:1c:63:
                    e0:23:25:ef:e0:9f:65:ed:88:14:a5:34:71:2c:6c:
                    41:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A9:65:12:EE:8E:A7:53:28:51:2C:16:15:C3:BD:B8:55:8F:05:5B
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/dqllEu6Op1MoUSwWFcO9uFWPBVs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.238/32

    Signature Algorithm: sha256WithRSAEncryption
         60:1a:fe:b4:7c:c4:9b:06:2a:ab:ae:0d:2f:35:f6:c4:a9:5f:
         bb:8e:57:3d:61:dd:39:9d:a4:97:07:48:2d:67:9b:ee:f9:ae:
         a4:73:37:a0:47:0b:24:66:b8:d5:c9:b5:42:72:4f:69:21:f8:
         26:fc:c2:b4:3a:ae:65:62:52:5d:e1:49:69:1d:26:8d:f9:f6:
         60:ed:ec:80:a0:1c:9f:d4:91:74:53:a6:2f:69:17:33:d8:e8:
         a8:a7:ed:cb:fd:d9:1b:d5:d5:75:56:79:b8:29:68:42:31:fe:
         c6:5a:59:db:df:5c:23:61:3b:ac:b1:f7:56:a2:6f:50:a2:98:
         21:79:64:23:1f:81:7b:ca:f0:cf:42:53:98:ab:9f:b7:aa:81:
         71:e9:08:dd:a3:84:80:49:ae:2f:e1:fe:7c:fe:78:84:db:61:
         cc:1d:51:cf:57:21:28:9c:6f:b9:70:29:17:3b:69:bc:4e:de:
         e4:66:28:f8:34:48:7f:d6:ad:b7:2f:37:f4:24:fb:fa:6e:94:
         3a:62:08:7f:3b:3a:ea:9d:fe:8a:78:e9:e7:21:e6:a0:06:8f:
         85:2b:42:ed:ea:a2:13:02:67:b9:61:aa:a8:65:41:bc:69:73:
         8c:7a:45:72:7c:83:a8:90:78:ed:63:87:f3:88:ba:f4:df:bd:
         a0:3b:f5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org