Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/l1lxhO9Gn7CBgjzhidasIaIvSSE.roa
File:                     l1lxhO9Gn7CBgjzhidasIaIvSSE.roa (raw, json)
Hash identifier:          19FFb0+JPp3aleoD9BzYj0RG8s8Ky9U3rWQJfNIVD9k=
Subject key identifier:   97:59:71:84:EF:46:9F:B0:81:82:3C:E1:89:D6:AC:21:A2:2F:49:21
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       71
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/l1lxhO9Gn7CBgjzhidasIaIvSSE.roa
Signing time:             Fri 10 Feb 2023 07:43:39 +0000
ROA not before:           Fri 10 Feb 2023 07:43:39 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.228/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:43:39 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=97597184EF469FB081823CE189D6AC21A22F4921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:6b:cb:ce:50:85:b8:cc:dc:3d:79:69:b1:
                    c3:0e:50:4e:75:b9:aa:d9:86:7e:86:41:8b:99:b1:
                    66:ab:ba:00:e7:ba:e2:ed:aa:99:58:0d:a1:25:fb:
                    fa:f2:0e:5c:0d:84:65:c7:93:0d:38:d0:7e:42:31:
                    cf:ae:42:63:ef:c5:b2:73:4b:62:1d:1d:b3:22:59:
                    62:10:62:6e:5e:f9:d0:d8:37:3d:d7:09:e2:20:4a:
                    a3:f3:47:91:d6:8e:c8:a9:17:5d:ff:a4:0a:a9:31:
                    48:86:5d:e7:db:23:f5:ed:99:b8:58:a7:a3:c3:e9:
                    75:34:71:fb:84:ef:d2:33:4b:98:b5:65:fb:d2:1c:
                    7f:1c:f6:32:1e:f6:fd:a3:a0:88:94:d2:15:b6:4e:
                    c8:48:26:24:b2:30:68:c5:11:db:f4:89:53:07:b4:
                    6a:0a:f4:bd:fc:ba:88:85:7a:a3:56:05:3d:25:b6:
                    91:95:d7:db:99:4a:ba:f0:27:bc:62:3d:cb:86:08:
                    43:ea:13:fe:4f:17:3c:b9:88:f0:dd:96:86:f1:13:
                    7a:ba:74:d6:68:8b:d9:e4:17:7b:b2:60:95:a0:14:
                    f6:28:ae:78:27:08:4f:56:5b:aa:63:de:1d:06:fa:
                    d8:20:a1:de:18:d6:f3:53:61:22:74:63:0d:ef:59:
                    57:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:59:71:84:EF:46:9F:B0:81:82:3C:E1:89:D6:AC:21:A2:2F:49:21
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/l1lxhO9Gn7CBgjzhidasIaIvSSE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.228/32

    Signature Algorithm: sha256WithRSAEncryption
         97:33:44:16:ea:1c:58:c9:fb:77:f5:58:ba:e3:65:f9:25:05:
         5d:b9:e1:2a:bf:d9:24:3d:47:af:1c:1d:43:92:bf:f3:0d:db:
         88:71:0c:b7:e7:0e:cc:b9:6f:e8:03:e1:f3:14:b7:72:d9:34:
         60:12:42:b4:5d:b4:78:56:31:f8:a9:d0:79:cb:96:c9:a8:df:
         75:5b:0e:cc:b0:96:c6:44:30:0e:4c:9f:7c:32:2c:e7:cc:77:
         cc:42:3d:6a:e6:0f:76:26:4f:53:1d:a0:c7:74:7a:a3:50:7c:
         3a:15:79:3b:f4:71:7f:35:e1:76:47:a7:eb:38:69:d0:3b:5e:
         6a:d1:79:f4:19:13:78:19:ef:cf:b7:68:e4:2d:59:d6:ad:df:
         6f:01:7f:d8:79:a1:24:61:9b:f4:19:db:f0:d9:87:f6:15:e9:
         03:2c:56:28:1a:02:61:99:87:e4:31:6e:ba:f5:f5:fa:bc:5b:
         67:30:36:b3:9b:84:8f:20:7a:99:2f:36:55:7d:3e:70:02:80:
         0d:36:c3:65:e2:1e:96:82:72:08:cd:81:0c:9d:f9:9b:23:ef:
         9f:8a:e5:58:72:96:29:7d:ba:50:df:e3:16:16:9f:db:33:68:
         76:f9:96:a9:c1:8a:93:97:94:2c:86:23:51:07:32:18:15:bc:
         85:d8:66:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org