Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/fKQuQfe95tXU3Tevn8-NNyHOgtY.roa
File:                     fKQuQfe95tXU3Tevn8-NNyHOgtY.roa (raw, json)
Hash identifier:          q5kXJk19k6vBTfzkuhgdEEduBMZIHWngMp+TGzQAhZg=
Subject key identifier:   7C:A4:2E:41:F7:BD:E6:D5:D4:DD:37:AF:9F:CF:8D:37:21:CE:82:D6
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       45
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/fKQuQfe95tXU3Tevn8-NNyHOgtY.roa
Signing time:             Fri 10 Feb 2023 07:41:22 +0000
ROA not before:           Fri 10 Feb 2023 07:41:22 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.45/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:41:22 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=7CA42E41F7BDE6D5D4DD37AF9FCF8D3721CE82D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:88:c9:43:af:3b:0b:6f:c0:c9:8d:62:5f:
                    ba:f4:28:63:6c:71:e1:bf:e8:48:05:42:9c:31:db:
                    c0:c2:fb:28:d6:16:20:a6:e3:92:8b:7a:29:d2:5b:
                    19:6b:4b:f6:85:87:73:56:d9:c8:e5:9f:3e:be:90:
                    56:b3:91:ee:9e:f1:88:47:bb:a3:fd:10:30:ee:92:
                    bd:a3:89:11:b9:f9:75:ee:00:ab:d4:2e:12:fc:8c:
                    b3:37:7b:d8:2a:0c:31:6d:ae:a9:c3:96:52:a8:3f:
                    46:28:24:1e:c6:03:de:e9:6a:50:22:10:35:61:18:
                    1d:ce:ed:9c:39:33:c0:a4:9c:54:a9:2a:6e:c5:16:
                    31:f5:51:f5:6a:67:11:24:f3:a8:53:6e:b0:7c:7b:
                    ea:54:ac:f3:1c:f7:b0:2a:c7:13:c8:09:fc:b1:71:
                    87:41:65:07:88:e1:94:f2:74:1d:6d:82:c8:da:1d:
                    08:4c:6f:36:f7:f9:f0:76:33:61:73:ca:d2:10:e4:
                    d2:8a:90:e9:a4:60:f7:03:27:d0:65:45:61:cd:5e:
                    83:e1:c0:75:9d:27:9e:e7:b3:de:93:11:5a:bd:80:
                    89:0d:9e:71:2f:0c:38:58:52:a6:6e:51:41:6b:37:
                    57:8d:a6:17:ea:73:eb:0d:96:04:e6:76:92:e3:e4:
                    82:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A4:2E:41:F7:BD:E6:D5:D4:DD:37:AF:9F:CF:8D:37:21:CE:82:D6
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/fKQuQfe95tXU3Tevn8-NNyHOgtY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.45/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:59:28:2b:3c:ea:b3:ea:8d:f9:17:b0:bd:f0:3f:ef:f6:81:
         8e:6e:19:d4:d9:69:07:8b:6f:70:cf:12:ee:f0:7c:c1:fb:05:
         74:2b:73:00:e4:19:cb:ea:ea:77:cc:ea:86:e6:6e:12:86:61:
         26:07:96:70:98:a4:f7:ef:ad:9e:02:eb:7e:08:54:44:2b:07:
         d5:ea:01:1c:eb:db:55:b3:5d:66:5b:54:17:8c:1b:f9:fa:6a:
         63:bd:1c:a6:de:87:c5:84:92:39:be:f0:51:cc:b7:d9:17:ec:
         22:72:82:9d:69:03:21:60:b2:2d:db:52:32:96:51:a4:5f:a5:
         68:50:56:17:b9:bc:8b:70:5c:67:10:97:e7:2e:27:33:1c:d6:
         9a:46:41:eb:78:a7:84:43:42:ee:35:9a:f9:d6:22:c0:d8:ee:
         58:fe:03:bc:df:89:95:f8:4a:32:9c:d7:fd:cd:df:11:9e:01:
         84:f9:9c:5a:82:cd:b8:58:4a:cb:f8:f8:ed:1e:51:d6:5c:45:
         13:d1:ef:c4:30:61:e9:cf:86:4f:1e:11:89:6a:01:8c:9f:ab:
         53:22:f6:87:22:6c:f9:de:84:46:2a:28:28:70:c1:35:92:4e:
         88:84:40:af:e0:ac:56:0b:38:4b:cf:89:af:51:70:d2:f4:c3:
         95:80:e0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org