Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/kyROR-sBjvh1jHBmHt7yDkkCcu4.roa
File:                     kyROR-sBjvh1jHBmHt7yDkkCcu4.roa (raw, json)
Hash identifier:          1lyiIW9e6bApRr3/dtleZj1G8SzlORcgbhts24rhhAw=
Subject key identifier:   93:24:4E:47:EB:01:8E:F8:75:8C:70:66:1E:DE:F2:0E:49:02:72:EE
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02A8
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/kyROR-sBjvh1jHBmHt7yDkkCcu4.roa
Signing time:             Mon 20 Feb 2023 08:05:33 +0000
ROA not before:           Mon 20 Feb 2023 08:05:33 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.177/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:33 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=93244E47EB018EF8758C70661EDEF20E490272EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5d:66:b9:fd:0b:d6:6c:86:28:1a:0c:43:68:
                    d1:6c:03:3d:e3:25:f1:dc:b2:54:61:f2:1d:0d:78:
                    65:48:38:96:24:a8:79:2a:51:da:62:0f:5c:1e:07:
                    72:98:4f:ea:82:f9:17:b9:c2:a3:9d:0b:53:0b:dd:
                    37:2d:f4:8a:f5:49:39:ee:5b:c1:08:b9:80:73:3b:
                    87:ed:97:64:1b:e9:0f:ac:89:29:dc:24:f4:22:61:
                    95:e0:23:e1:35:32:61:32:cd:76:fb:2d:93:9b:5f:
                    ee:98:08:8a:1e:56:dc:86:ed:b0:01:26:c2:5b:12:
                    3d:93:43:b0:e6:d0:a8:89:d1:14:2f:48:68:7e:1e:
                    fd:f8:04:72:ff:08:52:89:bf:0d:3f:1d:fc:73:09:
                    c9:dc:74:3b:22:4b:d5:90:c0:64:64:98:92:c0:69:
                    ee:f9:db:3b:2e:2f:6b:b3:5d:95:dc:dc:14:78:93:
                    d9:13:11:d1:cc:9e:07:cd:31:f6:65:e5:a8:98:32:
                    c4:d7:ee:c6:2a:88:23:05:29:55:8a:a4:99:3c:10:
                    80:46:ba:3d:ed:e6:d2:9d:26:b6:48:a3:26:53:c2:
                    14:e6:6c:67:be:16:68:9a:dc:e2:1b:de:4c:cd:1b:
                    a7:05:11:82:4e:d1:bb:3b:f5:30:04:9b:33:e7:ad:
                    7e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:24:4E:47:EB:01:8E:F8:75:8C:70:66:1E:DE:F2:0E:49:02:72:EE
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/kyROR-sBjvh1jHBmHt7yDkkCcu4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.177/32

    Signature Algorithm: sha256WithRSAEncryption
         17:1b:8b:fb:50:f2:45:4c:5c:3b:a5:ae:e8:a9:e7:d6:81:fd:
         ee:9a:90:c5:3a:de:b1:14:a9:9f:a3:d3:fb:3d:33:dc:b6:50:
         ea:03:df:45:b0:87:1b:d0:78:83:5b:4a:76:4c:65:07:be:40:
         fb:8b:8e:32:7d:01:9b:a1:b1:6c:02:9d:28:5e:ce:88:37:54:
         d3:c8:5d:2d:d3:b7:39:6b:68:d3:9e:13:f5:2a:0c:ff:a6:4b:
         51:51:c9:34:86:bc:7e:5f:28:a2:76:4f:ff:1c:b4:26:2c:b8:
         80:3c:e8:43:08:c5:ca:04:d7:38:23:e5:09:04:61:d9:9e:f6:
         b8:6b:e6:bb:7b:99:b9:52:0c:08:b9:f8:80:69:90:23:22:f4:
         81:06:c2:7d:e2:b7:da:0c:bb:97:11:e3:de:b3:6b:ed:07:67:
         83:cb:22:b9:b0:de:e4:20:2c:b2:c9:73:94:52:c8:81:6e:62:
         ab:74:6e:68:d5:5b:d2:7f:e1:24:c3:02:3a:a4:b8:d6:6a:13:
         41:3f:99:25:9f:a9:f7:73:8e:72:66:49:15:3c:32:22:9b:42:
         15:82:94:cb:55:ec:43:b2:8d:17:a4:7e:fe:24:78:92:77:c8:
         d0:0e:e2:8e:6d:79:fc:3e:f3:b9:25:c9:ca:89:f2:ae:62:2c:
         9f:3f:4c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org