Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/enplMQ2JbamW5YCOxghRu0HhMyI.roa
File:                     enplMQ2JbamW5YCOxghRu0HhMyI.roa (raw, json)
Hash identifier:          3FVH01g4pGv005U97Y3WJiU7KMYiPEsNF4oZQk+ILTc=
Subject key identifier:   7A:7A:65:31:0D:89:6D:A9:96:E5:80:8E:C6:08:51:BB:41:E1:33:22
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01EE
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/enplMQ2JbamW5YCOxghRu0HhMyI.roa
Signing time:             Mon 20 Feb 2023 07:57:26 +0000
ROA not before:           Mon 20 Feb 2023 07:57:26 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.127/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:26 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=7A7A65310D896DA996E5808EC60851BB41E13322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:af:88:6e:32:27:88:44:a0:3a:18:29:16:12:
                    aa:ef:da:6a:f1:01:1a:73:ee:69:c1:22:64:3f:ef:
                    c9:cb:55:2e:47:64:54:a3:01:41:6c:a0:c0:94:30:
                    92:5c:27:3e:94:8a:fb:8f:69:57:20:dc:e3:64:6b:
                    6f:dc:e4:16:d6:7c:31:a0:08:96:ef:ca:d6:57:e2:
                    1e:73:16:89:c8:12:63:46:37:63:b6:a3:16:c9:f2:
                    e3:44:f2:c4:10:aa:ca:55:8a:8e:06:6c:59:4b:8b:
                    08:9d:e3:d3:56:c6:e8:6c:e1:d2:4a:76:fd:6a:19:
                    86:5a:c6:52:a8:e9:7e:99:98:ed:14:f9:a1:f8:d1:
                    24:a6:f4:92:5e:da:9a:62:65:cc:93:f9:b9:64:b5:
                    61:29:52:2e:65:1f:68:01:59:d9:a0:58:45:24:34:
                    11:45:d7:55:61:34:1d:37:9e:79:62:f2:ad:0d:69:
                    df:61:6b:42:f4:ac:c1:a4:80:b0:35:70:3d:7b:95:
                    28:1e:5d:ac:20:7c:0a:75:3a:1e:8d:c4:87:64:19:
                    76:91:11:07:0e:31:69:a3:a2:22:d0:a8:6c:f3:d4:
                    18:ea:5e:fb:c0:9c:7d:6a:31:f4:55:8f:0d:97:e9:
                    b1:6f:9e:0e:20:8a:83:cb:1f:96:5e:ac:64:d1:d7:
                    50:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7A:65:31:0D:89:6D:A9:96:E5:80:8E:C6:08:51:BB:41:E1:33:22
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/enplMQ2JbamW5YCOxghRu0HhMyI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.127/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:25:4f:11:ea:f8:a3:8c:8f:9b:40:04:70:7a:29:aa:fe:27:
         e9:15:e6:d4:8e:ac:dc:2f:2d:92:de:64:aa:f8:40:2a:10:1d:
         35:12:e3:bf:4d:fc:08:1f:e8:a9:83:99:0c:03:76:a0:ed:07:
         f1:bf:22:40:b7:18:6b:4c:c3:35:7a:39:af:fb:0f:56:d3:86:
         01:66:60:9b:e7:53:a5:6b:6c:18:5b:ba:98:cd:95:17:e9:00:
         20:33:f5:07:53:13:2b:42:ea:01:c7:8c:1c:7e:95:d9:3e:6c:
         8b:a5:ef:46:2b:ff:ea:19:bf:83:76:1f:10:01:bd:e0:c2:a7:
         7b:7a:ea:4c:d6:21:5d:a2:1f:47:a3:8c:bb:77:4d:1e:13:f3:
         3a:51:8a:7b:cc:1c:3d:56:f8:b8:8c:ea:8f:40:cd:c7:62:d3:
         02:0f:d7:c4:ef:32:36:7d:8f:a7:11:2a:79:05:e8:cd:86:39:
         fc:bb:8f:44:0f:d0:12:45:53:2a:d3:72:70:d4:c7:8b:b3:dd:
         78:fc:53:3e:22:7e:42:7e:99:24:a0:9e:0e:55:b1:33:39:26:
         30:63:b0:29:96:3f:ce:8b:79:2c:d3:fa:40:b0:cb:d4:85:ff:
         d5:b0:13:d6:31:70:4d:ff:ed:c6:3e:38:d5:7b:d7:0a:04:aa:
         75:17:86:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org