Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/jxqRZU3OuZxu8rCmblvhVcmzUxo.roa
File:                     jxqRZU3OuZxu8rCmblvhVcmzUxo.roa (raw, json)
Hash identifier:          NlP1MWunr1fPn7FgN9yq0/ibg7CTctV0xvRBmEPD7bE=
Subject key identifier:   8F:1A:91:65:4D:CE:B9:9C:6E:F2:B0:A6:6E:5B:E1:55:C9:B3:53:1A
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0188
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/jxqRZU3OuZxu8rCmblvhVcmzUxo.roa
Signing time:             Mon 20 Feb 2023 07:50:54 +0000
ROA not before:           Mon 20 Feb 2023 07:50:54 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.117/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:50:54 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=8F1A91654DCEB99C6EF2B0A66E5BE155C9B3531A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8e:af:ca:b5:fe:4d:13:c6:e7:1b:bd:d1:7e:
                    1e:ef:9e:d1:eb:19:38:8b:60:e6:61:b2:34:d4:c5:
                    3b:12:67:56:2c:a3:0c:5d:39:09:4b:64:72:22:ca:
                    d1:7d:11:a9:aa:f8:ef:6e:71:a5:8c:e1:7e:f8:e5:
                    14:3d:c9:96:b3:eb:3b:2f:b0:f3:61:ff:37:fb:6a:
                    a9:7d:20:72:b9:d7:ce:65:22:83:64:ad:dd:48:d2:
                    db:88:84:63:13:29:bb:3f:48:b4:12:70:07:9e:8a:
                    7f:56:5e:6d:e4:12:41:d4:e2:4a:ce:31:0d:55:b5:
                    ed:70:53:25:2c:8f:00:09:7a:f4:ab:bf:a8:01:b4:
                    c7:b3:43:5b:49:84:fb:ba:f1:c7:9d:9e:a2:57:03:
                    b2:fa:bd:5e:cb:f6:57:55:2f:3d:b6:02:70:d8:27:
                    e0:41:06:42:1e:29:ed:ef:23:09:fd:27:96:36:0a:
                    d0:9e:9d:f3:59:d3:f7:c1:4e:27:a8:87:5d:58:36:
                    81:2b:58:f9:29:f2:d5:3f:d5:84:c6:ee:c7:cf:13:
                    13:28:48:07:e1:da:f6:9d:f6:4b:24:2a:73:f8:ad:
                    b3:be:64:cb:a5:bf:d9:74:9b:28:a5:c0:30:15:f5:
                    a7:84:7f:93:f0:b3:4e:14:96:b5:98:2c:a6:19:1f:
                    85:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1A:91:65:4D:CE:B9:9C:6E:F2:B0:A6:6E:5B:E1:55:C9:B3:53:1A
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/jxqRZU3OuZxu8rCmblvhVcmzUxo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.117/32

    Signature Algorithm: sha256WithRSAEncryption
         46:ee:fe:d6:73:f1:7a:b8:df:29:9e:8e:87:3c:30:8d:06:44:
         b9:9b:de:85:2e:bf:fa:83:48:2e:06:88:d4:f9:c8:67:4d:b9:
         74:17:d4:f1:25:54:47:47:ae:3d:0b:a4:fa:5b:a5:54:64:90:
         e4:97:e6:04:f1:f5:e1:be:d0:b7:47:e1:ea:c5:0f:55:35:e6:
         a0:22:ff:49:6e:4e:67:a3:73:64:6b:ee:c2:c1:5d:d9:a1:a0:
         ae:aa:28:21:67:54:8b:92:6e:27:c7:aa:5e:c1:57:4a:fc:a9:
         93:8c:0f:26:8c:a1:27:c4:9e:17:bc:96:81:5b:84:7f:2e:76:
         10:2c:54:1d:14:72:43:8d:b5:08:ba:93:eb:2a:1a:79:f8:c4:
         5d:46:69:fe:38:94:4a:52:9c:7a:f3:51:55:33:38:0a:82:79:
         eb:6f:03:48:87:bc:cc:bb:09:4a:10:64:ff:cb:8c:43:07:fa:
         6e:0e:58:e1:14:6f:e2:55:4e:1d:6c:a7:a5:5a:60:d0:33:49:
         96:f2:3a:8b:37:fe:86:97:54:c4:00:17:e2:a9:4f:76:f2:c2:
         d3:76:44:eb:c4:ba:cb:1e:18:d6:2f:b4:59:5a:fc:d4:5e:ca:
         52:61:53:23:ac:62:44:28:be:2d:1e:96:7c:29:ba:79:37:26:
         41:7d:1a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org