Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/jTb__y5fTwiQDMzNoPf7QML43Oo.roa
File:                     jTb__y5fTwiQDMzNoPf7QML43Oo.roa (raw, json)
Hash identifier:          ifu55xNDZvrw6gmnqXMVXQ/dDS4iVaBw0+bd4ulaeDg=
Subject key identifier:   8D:36:FF:FF:2E:5F:4F:08:90:0C:CC:CD:A0:F7:FB:40:C2:F8:DC:EA
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       6D
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/jTb__y5fTwiQDMzNoPf7QML43Oo.roa
Signing time:             Fri 10 Feb 2023 07:43:38 +0000
ROA not before:           Fri 10 Feb 2023 07:43:38 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.235/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:43:38 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=8D36FFFF2E5F4F08900CCCCDA0F7FB40C2F8DCEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:67:2f:b9:8b:9e:c8:39:d3:c3:e5:5a:36:22:
                    3c:ed:a1:48:65:63:34:ee:eb:fa:33:35:50:59:a7:
                    e7:27:b3:b7:1b:90:95:96:77:67:d4:2a:46:fe:22:
                    bd:83:fd:f9:1f:a2:1a:3c:75:72:c8:94:7d:ff:ba:
                    45:97:da:d6:78:f9:3b:d3:85:14:ce:a5:d7:e6:16:
                    db:5b:c9:e9:3e:73:a2:ef:8c:fa:1d:1a:81:5f:09:
                    87:0e:76:59:43:07:9a:82:db:6a:05:9d:40:3a:f1:
                    26:9c:90:7f:ec:77:56:69:cf:3f:65:d6:22:72:df:
                    c9:a6:eb:cd:94:4b:39:41:dc:96:ad:b2:e1:34:37:
                    92:84:b5:48:f0:ff:1d:c4:16:3c:3e:dc:18:cc:d7:
                    0b:f2:16:f8:8d:69:a5:4b:ca:7d:39:f5:13:47:e1:
                    b5:45:8a:56:65:4a:7a:31:8a:f1:eb:13:fd:19:d8:
                    75:1e:1c:af:f0:ea:0f:f7:0e:5f:8e:5a:b0:c0:62:
                    f4:ef:30:a2:4a:87:0d:fc:7c:65:3e:e1:4a:ef:df:
                    23:43:dc:1f:e8:3a:4e:bb:60:bb:ca:4e:ef:1b:c8:
                    02:91:b9:8e:6e:93:a1:d3:c1:f5:5f:5a:fb:94:fd:
                    92:9f:e6:11:75:2d:d8:72:2a:84:65:5a:ea:43:07:
                    8a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:36:FF:FF:2E:5F:4F:08:90:0C:CC:CD:A0:F7:FB:40:C2:F8:DC:EA
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/jTb__y5fTwiQDMzNoPf7QML43Oo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.235/32

    Signature Algorithm: sha256WithRSAEncryption
         90:76:68:1b:b1:1f:9b:4d:ed:8b:e5:ca:b5:84:fc:76:72:24:
         b7:df:cc:e0:77:b5:f7:f4:1d:44:80:6f:b7:48:13:3d:a3:bf:
         f8:1a:1d:98:2c:6a:63:de:4e:27:ab:25:92:6e:d7:6b:ff:7c:
         7f:a1:d7:77:0f:84:f6:0d:96:bf:8e:48:56:49:2f:81:d9:d3:
         e3:82:96:f9:98:62:de:d6:e3:9b:e8:81:f5:06:ae:63:aa:bc:
         af:84:36:5c:e8:a8:c0:88:2a:83:98:8b:13:4d:c9:56:4b:5e:
         88:30:1d:5a:3f:fb:fa:c6:d2:6c:90:e7:2c:41:d2:83:61:c3:
         07:f6:b4:ce:22:ed:18:bd:87:d7:08:a6:85:45:42:ec:6f:9b:
         46:4d:a1:b5:75:cd:1c:a4:eb:0f:75:65:f6:b0:35:1e:24:2b:
         6d:74:fb:c1:e0:79:db:96:2e:1d:5f:fe:b3:8c:05:0c:98:38:
         a1:c5:b0:24:d2:db:80:04:f7:58:40:fb:08:6c:b1:0a:6c:e8:
         35:34:9e:2f:d1:a6:d9:01:24:b5:22:96:d4:05:7a:df:d0:e9:
         2e:66:6e:6a:f8:cb:ee:73:88:1b:45:37:f1:d1:b3:8f:6d:e5:
         d8:96:ec:5e:43:62:d4:82:1e:c0:90:26:aa:49:67:7a:17:dc:
         9f:a7:9a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org