Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/gqdhq8376KhW_RSXh_7cHN8PKZs.roa
File:                     gqdhq8376KhW_RSXh_7cHN8PKZs.roa (raw, json)
Hash identifier:          udx0YGxlAs67ENV80rkP0vjdbF3tEng+jP1l03ZRvIk=
Subject key identifier:   82:A7:61:AB:CD:FB:E8:A8:56:FD:14:97:87:FE:DC:1C:DF:0F:29:9B
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       24
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/gqdhq8376KhW_RSXh_7cHN8PKZs.roa
Signing time:             Fri 06 Jan 2023 08:32:26 +0000
ROA not before:           Fri 06 Jan 2023 08:32:26 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.88.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Jan  6 08:32:26 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=82A761ABCDFBE8A856FD149787FEDC1CDF0F299B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e5:49:28:5a:bc:de:f8:b0:17:57:15:ca:6d:
                    6b:45:b4:a0:3b:a3:43:c8:d4:7f:83:9f:28:e5:a4:
                    69:b6:62:00:6a:f8:9a:7e:91:ca:a9:69:a1:d7:ea:
                    35:d1:69:75:99:c7:cf:a8:c3:fc:ba:09:e0:ac:98:
                    5a:e0:9d:8a:f7:12:2a:c3:29:79:bf:f6:0c:f3:b4:
                    cf:bb:14:cb:53:1d:7e:8f:02:2a:1b:3f:38:17:58:
                    5f:7f:3d:1f:0b:50:d5:ad:ba:73:af:42:ce:c6:1b:
                    e4:aa:e5:e1:50:bc:bb:83:b2:1b:9d:32:23:4b:3f:
                    cc:72:31:5b:31:00:6a:73:03:85:c0:74:ee:93:c0:
                    fc:49:df:ee:88:6f:3b:56:c0:00:70:53:4a:04:5d:
                    3f:6e:22:04:c3:93:c4:3e:09:e9:15:f0:e8:03:6c:
                    80:31:0d:b6:f1:fd:23:8a:0e:ac:a3:bc:81:93:00:
                    9a:ed:14:a9:93:54:db:2b:f6:26:e8:2a:82:4b:8c:
                    91:5b:27:83:02:f8:a7:77:ae:8b:2c:3c:48:9c:2f:
                    cd:04:d7:8a:7a:0e:58:57:0f:10:d8:e3:da:ba:71:
                    5e:e3:08:2d:32:ef:e5:a0:5a:0d:5a:96:e1:35:f0:
                    a7:f5:00:ae:a2:b3:9d:4f:01:43:3f:25:1b:e7:0c:
                    97:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A7:61:AB:CD:FB:E8:A8:56:FD:14:97:87:FE:DC:1C:DF:0F:29:9B
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/gqdhq8376KhW_RSXh_7cHN8PKZs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:c0:4f:38:d0:f4:7c:e2:0f:c5:cd:a2:33:cd:1f:9e:c5:41:
         ee:65:69:c4:11:62:33:10:22:d6:f0:30:f4:b3:85:17:17:0e:
         59:66:83:96:2f:94:37:da:04:68:5e:97:4d:c9:16:91:08:49:
         46:ab:84:12:93:6e:24:7d:e5:a6:f4:c7:c0:95:ac:21:7f:e2:
         31:ae:38:98:6a:bc:d9:8c:6c:b0:91:ad:63:41:50:35:5a:a1:
         ae:99:69:5e:45:8f:19:bf:ba:f9:2a:2c:a0:83:77:09:53:bb:
         5a:b0:e6:c2:f0:b7:cd:38:3e:ec:d4:a7:61:fe:62:86:c2:9b:
         f5:46:4e:cd:d3:a3:2d:b1:27:75:42:1f:f7:66:48:17:72:83:
         ff:2f:b6:d0:3f:4c:61:ae:12:26:44:7e:b6:ae:e8:85:8f:dc:
         30:e2:cf:11:32:18:15:63:64:d7:4b:c9:1c:77:76:59:61:cf:
         6f:f2:0b:67:8b:e8:40:6f:9d:93:46:69:86:59:5b:64:5f:bf:
         a1:a2:cc:fa:cf:43:b4:b8:bc:b6:46:2f:b8:e6:ae:f2:24:06:
         6a:59:1c:41:37:dc:ac:c9:56:a9:e5:b7:f5:4e:2a:aa:18:ff:
         97:d5:f9:84:86:16:f4:1d:c9:cb:5e:09:3a:ec:19:db:dd:a7:
         96:53:25:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org