Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/gqH5ipaoh4M23w2glRjs_GxbuOU.roa
File:                     gqH5ipaoh4M23w2glRjs_GxbuOU.roa (raw, json)
Hash identifier:          LbrO183CdsvvvwPS9zXOmDx0QOgpjG6gud66b2SyEMo=
Subject key identifier:   82:A1:F9:8A:96:A8:87:83:36:DF:0D:A0:95:18:EC:FC:6C:5B:B8:E5
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0186
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/gqH5ipaoh4M23w2glRjs_GxbuOU.roa
Signing time:             Mon 20 Feb 2023 07:50:52 +0000
ROA not before:           Mon 20 Feb 2023 07:50:52 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.235/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:50:52 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=82A1F98A96A8878336DF0DA09518ECFC6C5BB8E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5d:23:cd:92:81:60:84:7a:35:32:d9:5d:23:
                    25:c6:32:7f:c0:08:13:20:94:f1:37:57:a8:5b:31:
                    16:e5:fc:c8:b8:6f:4f:23:77:45:29:9b:f9:6a:76:
                    70:dd:1a:1b:5f:88:41:f6:42:40:84:27:c5:a0:bc:
                    1a:9a:d4:7e:7b:02:52:05:c8:f3:f0:60:d7:8c:06:
                    5f:12:19:5e:97:c8:cd:9b:ea:87:1d:b8:33:01:49:
                    d8:47:94:5b:fd:7b:1b:63:cb:59:70:80:17:c3:ca:
                    64:39:d1:2e:bf:ca:5e:1e:75:d0:2a:ab:b5:74:a2:
                    e2:d4:26:7c:c5:fe:7e:33:33:45:eb:8c:5f:36:59:
                    a3:be:96:f9:82:35:9a:1a:07:fc:bd:98:90:f2:f4:
                    b2:ae:0b:6a:d9:d4:97:cf:bc:9a:71:6c:35:03:52:
                    3d:0f:fa:d3:a2:aa:34:1e:56:17:2e:e7:f8:53:7c:
                    19:d5:be:57:e0:fb:b7:b4:cb:7e:54:92:fe:08:38:
                    fe:3c:e1:3e:e6:93:26:8b:e1:10:4b:d5:83:16:bb:
                    1b:ee:de:ca:07:75:27:bf:96:51:5b:af:99:47:90:
                    5e:94:6c:5c:6a:ce:ac:be:97:18:34:7d:85:84:79:
                    49:37:17:cf:62:6e:59:0b:cb:b8:0b:9e:d7:29:46:
                    8f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A1:F9:8A:96:A8:87:83:36:DF:0D:A0:95:18:EC:FC:6C:5B:B8:E5
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/gqH5ipaoh4M23w2glRjs_GxbuOU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.235/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:cd:43:e9:b5:ca:d4:ff:4c:24:6c:ad:a6:db:67:b0:5f:60:
         65:50:04:71:21:05:8d:a0:02:50:0b:ca:71:98:67:3e:bf:ff:
         36:0e:d9:49:01:e2:95:80:7d:00:3a:92:90:98:4e:eb:b0:7d:
         cf:e9:a2:80:9f:32:23:62:36:92:d1:e6:a8:43:f2:43:81:73:
         6e:1f:4a:84:58:20:b6:a7:d6:8a:66:e1:bd:37:22:3e:b5:37:
         00:fe:1e:d0:98:33:31:0f:f6:8e:2b:f1:bc:b5:c9:0e:52:51:
         14:dc:17:42:32:92:7e:e2:d4:c0:b4:1b:87:b4:42:44:d6:42:
         52:7b:bb:ee:a2:c2:58:03:19:ef:ad:d9:e1:bb:a4:9e:a9:aa:
         ec:1a:8f:42:ea:07:0e:ec:35:71:43:28:2f:82:cb:f8:5b:92:
         b2:f3:2d:26:32:d1:77:57:f4:c3:b5:ca:e3:c4:7f:98:42:6a:
         14:e2:98:d1:8c:21:cc:3a:4e:74:0a:a3:6f:7c:b8:ed:69:e6:
         0b:86:46:2e:a8:4f:f0:54:bc:eb:f9:35:cb:3b:9e:0f:8f:4c:
         80:8e:c4:12:35:86:91:55:71:a3:81:7b:d7:66:57:ba:78:54:
         80:10:84:b8:ee:3e:52:40:8c:7b:e1:bf:80:d7:38:64:26:20:
         aa:8b:15:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org