Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/gE5Nubpja7T6d9PyrFlpDIUm2iM.roa
File:                     gE5Nubpja7T6d9PyrFlpDIUm2iM.roa (raw, json)
Hash identifier:          8Hc0jkVsBWKuxNXtfYvSXeKPt3vaL2Ic5N2e6eSLBU4=
Subject key identifier:   80:4E:4D:B9:BA:63:6B:B4:FA:77:D3:F2:AC:59:69:0C:85:26:DA:23
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01E5
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/gE5Nubpja7T6d9PyrFlpDIUm2iM.roa
Signing time:             Mon 20 Feb 2023 07:55:33 +0000
ROA not before:           Mon 20 Feb 2023 07:55:33 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.226/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:55:33 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=804E4DB9BA636BB4FA77D3F2AC59690C8526DA23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:48:bd:f5:9a:56:5c:09:45:8c:7e:90:d7:a2:
                    d5:fb:81:bd:5f:12:58:4a:f6:cf:2b:a1:c0:e3:2f:
                    e5:56:f7:fe:7d:f7:b8:79:dc:b2:be:65:61:50:e4:
                    e1:65:52:eb:30:96:9c:a6:1f:2f:3b:34:3c:77:7e:
                    db:2f:d0:8e:51:55:73:16:e5:bc:5c:93:87:11:1e:
                    9b:fa:97:0d:07:c7:d1:e3:3a:a3:a7:2f:3c:91:08:
                    f8:7c:18:64:d3:9b:d9:bf:be:65:13:d0:ac:96:61:
                    6e:67:b0:cf:c2:40:f6:5c:52:98:fe:01:ca:0b:7e:
                    1c:4f:a8:ff:32:a3:92:55:54:4f:88:01:cb:cb:e0:
                    0b:69:b8:18:dc:5c:a6:1b:45:e2:fb:19:55:20:16:
                    2b:1d:b4:29:fc:24:59:f7:10:63:c7:4e:af:dc:62:
                    fd:6a:1e:71:9f:8c:30:98:bf:30:82:3c:2a:99:60:
                    a5:18:44:41:53:f3:64:b5:50:59:9a:c8:4a:13:7b:
                    8d:ea:87:59:5b:ec:18:a2:c2:34:6d:18:37:24:22:
                    2e:18:55:2d:25:3c:f1:be:3a:58:32:d4:74:70:40:
                    cb:14:aa:73:60:6b:ec:58:47:4c:33:b4:20:30:e2:
                    fb:2c:df:3a:0d:46:23:73:00:5c:7e:66:b2:85:51:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4E:4D:B9:BA:63:6B:B4:FA:77:D3:F2:AC:59:69:0C:85:26:DA:23
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/gE5Nubpja7T6d9PyrFlpDIUm2iM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.226/32

    Signature Algorithm: sha256WithRSAEncryption
         18:b1:da:7c:d3:05:cd:08:2a:a2:03:f8:68:e3:2c:d8:ce:67:
         8e:2c:fe:cc:a9:3d:69:af:d6:90:0f:e5:c4:17:34:e5:af:39:
         c3:ae:80:ad:ce:44:8f:45:14:26:e9:c3:5a:7d:68:dc:54:d0:
         1b:ad:ce:51:f3:09:39:2b:86:6d:95:d7:a1:be:1f:46:cc:2e:
         6b:f2:bd:01:fa:d2:62:15:b4:8a:8f:64:eb:7f:0a:48:b1:53:
         eb:e6:01:cb:3d:13:61:04:88:2a:ad:b8:11:f2:08:57:ae:0b:
         9b:3e:73:b7:1c:73:dd:48:88:ba:7e:ba:db:71:fa:89:1a:9d:
         19:fe:75:71:5a:b4:33:31:f6:75:52:e9:23:96:f9:6c:36:be:
         9d:b3:cf:78:36:87:bc:b2:7a:69:c0:f7:da:f7:aa:4c:44:c2:
         5f:12:04:a4:cc:6d:65:81:bc:fe:61:a1:37:79:fa:29:75:15:
         89:7a:c5:6e:7a:9d:ef:ba:c5:68:79:96:7e:00:ae:b1:35:34:
         1c:c0:f4:ff:99:03:08:e6:ae:86:b8:9f:0b:3c:da:b7:33:44:
         0c:04:f7:b4:4b:0c:5e:13:44:d3:43:32:2e:63:f0:2a:cf:b2:
         65:ff:0c:e1:4b:10:23:e8:79:f8:1d:08:aa:6b:72:9e:7f:5c:
         9a:cb:76:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org