Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/kk0p9-aOd9efWBzoFLMJpQqZww8.roa
File:                     kk0p9-aOd9efWBzoFLMJpQqZww8.roa (raw, json)
Hash identifier:          gG4cKOnaJkHpJnsXwLlRGAuWdT+edqm1ZcrAEcPf/T4=
Subject key identifier:   92:4D:29:F7:E6:8E:77:D7:9F:58:1C:E8:14:B3:09:A5:0A:99:C3:0F
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       62
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/kk0p9-aOd9efWBzoFLMJpQqZww8.roa
Signing time:             Fri 10 Feb 2023 07:43:33 +0000
ROA not before:           Fri 10 Feb 2023 07:43:33 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.110/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:43:33 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=924D29F7E68E77D79F581CE814B309A50A99C30F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:0d:12:c9:8b:56:f7:03:41:70:df:04:a0:
                    fa:34:43:14:38:f9:22:b6:ef:bf:1e:1d:b8:0b:2e:
                    df:76:d3:e5:fc:ab:2d:a6:54:c4:d1:73:8c:08:24:
                    9f:dd:0a:3c:3b:ab:5f:95:e1:ac:04:cc:d8:44:1a:
                    bf:06:99:f9:f6:1b:5b:23:cb:f5:49:85:af:38:b4:
                    2b:b7:f5:3f:d0:67:09:3e:bc:c0:71:df:8d:64:a4:
                    ff:34:1f:bf:76:f9:3e:ba:29:3f:69:b2:58:e2:9c:
                    32:41:cf:4d:4c:e1:95:ea:11:07:f7:22:7e:e7:ea:
                    9f:5d:a1:aa:91:34:28:45:ee:68:e1:9b:cf:d2:7c:
                    de:83:c6:dd:98:6f:e7:dc:93:e9:4e:1a:e4:53:a1:
                    72:00:26:83:83:ff:32:05:6e:38:90:54:df:3e:30:
                    b9:e6:7d:b8:43:99:ff:91:e5:e2:0c:71:2c:a5:8c:
                    39:48:7c:b5:93:d9:b4:35:c9:b2:ab:45:35:f8:16:
                    0b:4b:73:27:45:53:6c:c7:41:be:a4:a3:6e:e5:01:
                    96:48:d8:a2:be:4a:84:ed:2d:c3:16:b2:1f:3a:cc:
                    2c:23:f4:51:bb:87:ea:f9:6b:cc:51:43:62:ab:0b:
                    a8:30:45:34:9d:eb:5d:91:e9:2a:58:39:ec:b2:97:
                    16:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4D:29:F7:E6:8E:77:D7:9F:58:1C:E8:14:B3:09:A5:0A:99:C3:0F
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/kk0p9-aOd9efWBzoFLMJpQqZww8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.110/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:90:e3:6f:f3:90:41:48:df:50:f3:91:c7:2b:47:66:18:14:
         05:35:65:c2:c0:41:6d:4b:08:11:89:d9:17:8f:01:9b:30:6d:
         d6:90:cb:29:93:69:4d:d7:b3:0c:47:b8:67:2b:72:c6:b6:95:
         f8:a3:13:de:fa:f6:80:11:c1:70:4f:b0:41:16:c2:23:a1:94:
         2a:2f:f6:b6:10:6f:3c:9b:36:f1:12:7c:21:a1:3f:3a:5c:63:
         61:d2:ee:dc:06:2c:19:c8:84:0f:2d:e4:eb:a9:f8:8c:57:de:
         24:f8:eb:77:de:e3:f8:e4:fa:87:b5:a4:f2:ae:1c:20:7e:83:
         e9:df:0c:4c:3b:b0:36:99:5c:95:59:24:be:61:ef:39:7f:81:
         e4:51:a9:e9:1b:ea:dd:56:bc:f1:19:58:0d:b2:ce:ed:1d:3b:
         85:5c:d4:a8:0d:71:34:9e:f0:39:4a:dd:0c:8a:f2:db:05:b6:
         fc:0a:cd:5e:61:04:77:c8:e3:70:21:ed:05:0f:f3:f5:5d:be:
         8f:1f:f0:47:19:0a:bf:04:c8:3f:43:13:c3:09:d9:ef:fa:31:
         f8:69:5e:7c:c9:2f:af:1a:cc:9a:9a:bb:f0:9c:a6:a2:dd:85:
         b2:b3:56:34:05:3d:3e:1b:69:6c:c3:ca:7f:e1:0c:9e:7b:2a:
         03:ab:4b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org