Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/eslZKBln-w1tAhVM748djI7M0cA.roa
File:                     eslZKBln-w1tAhVM748djI7M0cA.roa (raw, json)
Hash identifier:          yrgYdYpfs/jlhTzRSxFfeZiONcuEq4ltVvCAqczspmE=
Subject key identifier:   7A:C9:59:28:19:67:FB:0D:6D:02:15:4C:EF:8F:1D:8C:8E:CC:D1:C0
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0227
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/eslZKBln-w1tAhVM748djI7M0cA.roa
Signing time:             Mon 20 Feb 2023 07:59:25 +0000
ROA not before:           Mon 20 Feb 2023 07:59:25 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.138/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551 (0x227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:59:25 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=7AC959281967FB0D6D02154CEF8F1D8C8ECCD1C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:ba:5b:71:33:70:f7:50:20:55:fd:75:8c:
                    78:77:46:e2:a9:5f:0c:74:bc:9b:8b:98:59:2a:3a:
                    13:a9:ce:87:9d:3f:f0:b8:82:ef:f5:ec:3a:20:b7:
                    00:e7:6e:03:29:04:2d:1e:4f:ac:ca:45:bb:95:bf:
                    9e:41:b1:c0:02:76:f9:ee:a0:09:fa:22:94:2c:02:
                    7b:ae:de:bb:f4:29:43:01:97:a5:f2:8d:76:56:80:
                    d1:b9:6d:a7:17:2e:1c:42:a8:6d:e4:58:8b:a1:9c:
                    5c:72:ae:31:92:6b:d8:01:09:9e:a2:6e:58:8d:b6:
                    de:cf:f6:27:5e:1f:92:c6:99:f5:68:09:b2:3e:0d:
                    05:40:2c:75:e6:5a:cd:0c:be:6e:0d:c4:a5:35:14:
                    a8:9f:3f:4a:a5:df:8d:4b:ff:18:fe:c2:05:74:56:
                    99:68:e0:21:f8:0a:61:f1:0a:7a:85:de:3f:32:fc:
                    c2:c0:a2:d5:a8:45:1e:ec:20:83:7d:35:96:0c:02:
                    db:5f:c6:de:cc:26:62:f6:42:27:d7:ce:ab:8e:9f:
                    98:6d:96:a3:0e:c0:ac:97:97:de:6f:a2:7e:c0:c6:
                    e8:db:03:5d:cb:57:3e:de:e8:b6:07:ed:50:6f:36:
                    0a:b5:48:70:7b:f7:20:40:3d:4a:dd:1c:c7:0b:09:
                    e5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C9:59:28:19:67:FB:0D:6D:02:15:4C:EF:8F:1D:8C:8E:CC:D1:C0
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/eslZKBln-w1tAhVM748djI7M0cA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.138/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:37:50:27:41:8e:37:22:4e:85:f2:82:08:a7:e6:f4:2d:72:
         03:cf:3b:eb:39:eb:5c:d1:7c:68:4e:14:f9:d0:1e:b7:b9:46:
         2f:85:82:11:4b:b4:3a:d1:42:92:97:88:22:d6:0f:40:08:cc:
         c1:89:a6:77:63:96:ca:21:d3:55:72:31:e4:ec:97:49:20:5c:
         3d:47:86:9d:1d:80:29:05:07:22:d6:5e:32:3a:5f:c1:49:0b:
         11:fb:19:49:ec:d4:63:65:fb:c1:4e:a3:26:81:49:9e:ea:73:
         47:c8:81:e2:4d:a9:f1:f2:83:bb:c8:8f:45:c8:9a:88:3d:f0:
         c2:ab:7b:ad:a8:cf:30:47:e9:b5:9e:de:1f:46:b4:90:5b:26:
         05:be:aa:08:32:44:ec:45:1b:bf:f7:71:42:11:6b:c7:29:8a:
         84:d9:8b:32:54:88:8d:35:17:82:a1:d3:1b:88:fa:0b:e3:ae:
         f6:2b:1a:b7:25:a0:e8:78:7f:08:fe:5f:d6:cd:d8:27:e0:cf:
         8a:0c:47:0a:5b:58:1e:e2:69:9c:70:0c:6b:52:a9:57:18:cc:
         af:32:9e:9a:25:84:85:0e:d5:b6:2e:89:6e:57:b2:74:33:f8:
         33:a8:87:17:a8:18:14:09:e9:79:a2:b7:f7:5a:60:c5:d3:91:
         cc:04:08:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org