Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/jkyswlXuWdfQWtdyUdah3-CrodQ.roa
File:                     jkyswlXuWdfQWtdyUdah3-CrodQ.roa (raw, json)
Hash identifier:          NwQ5VzMUVjNkO8pT8P5FGzWLmodAKOUnb/Iqg4iQBEs=
Subject key identifier:   8E:4C:AC:C2:55:EE:59:D7:D0:5A:D7:72:51:D6:A1:DF:E0:AB:A1:D4
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       32
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/jkyswlXuWdfQWtdyUdah3-CrodQ.roa
Signing time:             Fri 10 Feb 2023 07:39:10 +0000
ROA not before:           Fri 10 Feb 2023 07:39:10 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.4/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:39:10 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=8E4CACC255EE59D7D05AD77251D6A1DFE0ABA1D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d3:e7:e5:fc:ae:26:6a:64:81:18:95:ce:2c:
                    83:ff:d3:27:a7:e0:32:d0:5c:b1:ef:51:2c:c9:53:
                    7d:42:bd:8d:af:da:da:b0:62:bd:26:8b:48:1e:32:
                    36:0d:8d:c7:4b:bd:6d:8f:5c:c2:c4:e4:fd:3f:47:
                    d6:ce:91:a0:c4:85:53:34:6e:b8:db:48:3b:13:a3:
                    fb:27:1d:1c:06:0d:8f:ba:80:d8:f9:56:a8:a7:36:
                    a1:27:63:e4:17:ad:b2:cd:01:fd:cf:62:24:bc:8a:
                    bb:ee:b9:e1:34:51:ad:2e:b2:4e:77:42:b0:1b:5d:
                    32:dc:1a:a6:55:ac:74:2a:55:4b:c6:dc:6e:b7:71:
                    3c:3c:47:2b:d0:81:11:32:95:80:7b:25:a7:48:43:
                    16:ea:3c:e5:b3:43:1c:8a:9e:bb:12:3c:31:cd:2b:
                    99:7b:5c:57:83:f3:7e:f8:4e:fe:c4:38:40:17:94:
                    d0:33:e2:9b:a4:9e:e4:ca:df:83:8b:bb:e6:e6:3a:
                    78:29:f1:85:ec:24:7d:be:9f:c9:d7:5c:b2:18:15:
                    96:0e:ee:67:dc:f9:fa:12:b3:ff:23:e1:02:30:eb:
                    6a:3c:71:58:53:54:1c:1e:12:af:55:59:20:f3:8d:
                    c6:50:ae:89:78:27:c1:2b:fa:73:a2:9b:d6:1d:21:
                    39:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4C:AC:C2:55:EE:59:D7:D0:5A:D7:72:51:D6:A1:DF:E0:AB:A1:D4
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/jkyswlXuWdfQWtdyUdah3-CrodQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.4/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:da:61:c7:db:ce:55:33:51:65:1c:d0:60:a2:ba:6d:d3:2d:
         6e:d5:c6:3e:89:9a:cb:f2:4b:10:ad:b7:74:24:b3:eb:27:8b:
         6f:20:b0:48:24:c3:f3:3f:e1:be:57:68:c4:b5:60:89:90:8d:
         fc:2a:5c:42:13:9a:cd:d4:25:ff:0d:fd:c1:80:9d:9d:1e:64:
         84:9e:d9:5c:42:89:24:7f:1e:69:e1:47:8e:35:a3:d1:0e:8a:
         cc:2c:33:d6:67:1a:ff:68:ef:7d:e3:44:bf:60:cb:dd:c8:0a:
         d7:90:e1:6b:14:fd:3a:50:92:1c:22:bf:41:78:68:1a:6b:e6:
         d4:ab:52:39:da:d7:ce:75:c3:3c:bd:e6:60:a1:d4:06:19:29:
         63:de:18:2b:84:e9:f8:4c:62:b9:a7:56:e3:36:2b:db:79:69:
         f5:cc:d1:33:3e:a2:83:d3:b8:f3:5d:bb:77:92:ae:17:6a:e5:
         05:51:47:93:8a:8f:9b:79:95:93:4f:1f:bb:65:dc:75:92:fc:
         f6:4f:d0:06:60:e2:fa:cd:11:59:9a:48:3c:1f:8d:2a:f6:ad:
         4c:ab:22:82:d4:bc:11:1f:ea:ed:19:58:43:29:b3:5a:2c:23:
         e0:0f:7f:fa:83:00:72:f4:6a:4d:77:4f:92:e5:bd:80:c1:52:
         c3:57:95:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org