Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/iRu7tfLojF5E4EPVEBIMUWb2MFw.roa
File:                     iRu7tfLojF5E4EPVEBIMUWb2MFw.roa (raw, json)
Hash identifier:          Uv94xYMgHRFinIaaMkHvmrS+qQC6Nu77CSGdzFwb5TY=
Subject key identifier:   89:1B:BB:B5:F2:E8:8C:5E:44:E0:43:D5:10:12:0C:51:66:F6:30:5C
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       4D
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/iRu7tfLojF5E4EPVEBIMUWb2MFw.roa
Signing time:             Fri 10 Feb 2023 07:41:25 +0000
ROA not before:           Fri 10 Feb 2023 07:41:25 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.121/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:41:25 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=891BBBB5F2E88C5E44E043D510120C5166F6305C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4c:70:63:82:67:eb:c3:27:47:73:31:a8:b7:
                    20:0d:26:54:7b:86:e7:f7:49:82:fc:d8:ed:8b:d3:
                    83:43:6f:47:00:83:9a:5c:d7:da:80:73:02:00:b2:
                    8b:1a:ec:80:4a:85:5a:4b:ab:d8:0c:93:f7:a0:ba:
                    46:d5:7d:52:f7:f8:ae:d0:fe:6e:dd:32:71:be:d8:
                    63:8c:6b:c2:ae:8e:a0:89:c0:0a:f9:ba:7b:23:d8:
                    bc:0c:8e:69:21:ba:f5:34:fd:ab:ab:60:bd:c4:23:
                    d4:55:23:d9:6d:d2:c5:d5:25:98:54:30:19:e8:cd:
                    37:5a:6b:e6:38:19:55:a1:73:f9:d2:7d:9a:d3:94:
                    8a:e1:c4:ad:be:27:2a:2f:cd:80:94:ca:b2:a6:e3:
                    51:c6:ea:6c:da:af:a4:fb:01:67:91:46:79:b7:2f:
                    27:18:c8:e9:e5:70:c8:d2:0b:8e:bb:36:80:7c:a1:
                    3a:7a:7d:04:68:87:82:f9:e8:63:da:13:f2:ee:ca:
                    ed:5c:7f:09:63:7f:48:38:98:98:e5:61:5f:70:d8:
                    08:ce:aa:57:a7:07:2f:6d:90:ba:f1:40:9a:e8:66:
                    58:46:1e:78:fe:52:f5:75:93:b0:a9:85:69:c1:7d:
                    89:2d:02:e8:71:a6:02:ab:5b:bd:35:89:c3:3e:87:
                    33:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1B:BB:B5:F2:E8:8C:5E:44:E0:43:D5:10:12:0C:51:66:F6:30:5C
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/iRu7tfLojF5E4EPVEBIMUWb2MFw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.121/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:18:16:97:44:10:03:a3:b2:01:c8:12:32:ef:e1:ac:81:f5:
         26:28:c7:f3:c7:f2:6e:28:f7:83:c3:11:a3:af:96:dc:d6:89:
         df:d9:9c:0a:bf:8d:7c:64:c4:ab:2a:ab:59:a9:44:f6:9d:c2:
         7e:79:e4:78:c4:c4:40:7e:ff:19:06:e6:c3:93:8d:a4:34:db:
         7b:ad:75:34:49:6e:5e:31:bd:02:2d:d4:75:19:0c:ea:e9:94:
         ff:91:bb:9c:4c:f3:da:d3:7b:80:63:c5:01:e4:4e:ae:e6:ea:
         94:4a:cb:e7:21:ba:57:96:bd:e3:e7:89:b1:03:13:96:3c:3a:
         d0:65:03:9f:76:65:20:ce:61:1e:0e:e6:45:fd:5b:76:bc:f9:
         21:1f:12:35:60:d4:ed:b6:d0:59:d0:8c:ac:64:de:5c:77:0f:
         e3:1d:24:28:4e:00:4e:29:6e:5e:63:87:80:aa:38:4e:71:cd:
         52:e1:36:21:1b:56:fc:b6:cc:7c:99:87:6a:6a:9d:48:b4:18:
         fe:51:7d:fa:15:d9:9e:7e:73:1e:bd:b9:11:ed:a1:8a:63:f8:
         7b:45:e9:e1:12:b7:5d:ad:10:94:99:b5:4c:cd:f1:0c:e7:6c:
         b4:aa:90:67:80:6a:aa:7b:7b:a2:59:71:c3:6e:a2:15:ca:81:
         04:63:20:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org