Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/kt_4VkoRelO2pImBLypA7rHvIDc.roa
File:                     kt_4VkoRelO2pImBLypA7rHvIDc.roa (raw, json)
Hash identifier:          GqShdXyQEKjlGWRMqghlFInkCjktGqdHVZSKGrlJd1o=
Subject key identifier:   92:DF:F8:56:4A:11:7A:53:B6:A4:89:81:2F:2A:40:EE:B1:EF:20:37
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       019C
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/kt_4VkoRelO2pImBLypA7rHvIDc.roa
Signing time:             Mon 20 Feb 2023 07:53:07 +0000
ROA not before:           Mon 20 Feb 2023 07:53:07 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.66/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:07 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=92DFF8564A117A53B6A489812F2A40EEB1EF2037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a1:5a:c2:38:ac:23:cc:e4:5e:7e:a4:2a:96:
                    38:4e:21:03:5e:6a:4a:02:85:a8:f4:f0:33:4e:51:
                    f6:a2:64:af:0d:ad:dd:2a:29:07:69:f8:20:1e:d1:
                    51:d7:85:f1:7f:fc:98:2f:4c:28:ff:35:df:35:89:
                    01:b9:87:61:98:fd:7a:47:5d:a7:c7:f1:2b:3c:80:
                    70:49:34:93:7e:d4:a3:a5:7a:4b:e5:66:18:eb:95:
                    39:9f:ed:ec:1c:17:a1:1c:6f:8d:38:ba:a0:af:ea:
                    cb:f1:af:c3:0d:4d:cc:95:7e:f1:42:ca:33:b1:45:
                    a6:ed:af:5f:79:a1:e9:38:c7:f3:4a:15:fc:8b:e2:
                    10:4d:58:2f:fb:bf:11:25:cc:0b:69:c7:3b:76:97:
                    20:87:ff:ef:e9:66:13:ed:92:13:aa:a0:b2:ff:5a:
                    c2:ad:8a:08:9f:54:96:e2:e0:e0:da:33:26:5b:07:
                    ce:0a:06:cd:98:7c:6e:ce:76:b3:9d:6c:4a:e8:3b:
                    30:93:ec:9e:5a:28:e1:18:d6:89:94:b7:f5:f0:b0:
                    c2:a2:ed:a0:1e:e7:0b:78:8c:c2:15:0c:ec:79:bf:
                    16:a8:ce:cc:76:40:58:23:af:50:db:2a:2d:3e:a2:
                    56:c0:17:c2:0a:1d:57:c2:dc:f3:53:b9:f2:87:dd:
                    bf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DF:F8:56:4A:11:7A:53:B6:A4:89:81:2F:2A:40:EE:B1:EF:20:37
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/kt_4VkoRelO2pImBLypA7rHvIDc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.66/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:31:4f:ca:61:c2:8e:0a:ce:b5:63:b3:52:1e:07:70:4a:37:
         1a:91:1c:6a:69:7f:9e:b1:38:e3:44:c1:8e:2a:da:ad:9c:10:
         34:b5:d0:24:f6:f1:13:d6:f8:31:fe:33:a6:4d:a2:9d:1f:95:
         5a:40:e2:52:08:d1:da:3e:12:fe:6f:eb:f6:b2:a8:89:c4:03:
         f2:af:34:65:fd:3a:13:ff:9e:34:12:ae:4f:82:60:7d:79:a3:
         17:78:fc:08:79:00:aa:f9:33:78:1d:2f:80:85:3d:0e:f4:7d:
         9b:79:f2:b6:66:40:68:51:bd:5d:09:59:46:83:3b:34:39:19:
         ff:f4:44:6c:0e:4d:db:4e:74:88:b8:a7:fa:e3:87:05:8a:52:
         e9:88:4a:dd:07:25:3f:25:28:4a:f6:e3:13:b9:7e:ca:0a:6d:
         1d:3a:4c:d3:18:db:b4:3f:83:1f:14:a0:7e:b6:5f:e7:74:ef:
         f2:ac:91:ab:1e:01:0e:15:92:1a:db:b1:f1:68:69:2e:65:b9:
         3d:4d:78:0e:0b:29:a7:82:b8:31:eb:ca:0f:b3:a1:82:62:5e:
         89:f0:7a:e4:46:f6:60:86:67:87:3f:73:41:01:c9:92:0e:d4:
         d0:3d:18:b4:04:ca:e8:4b:78:de:26:f6:8d:5d:47:0d:e4:64:
         a3:5b:d5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org