Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/m4bH8HrnBv96MV5YHq5PkTolmCY.roa
File:                     m4bH8HrnBv96MV5YHq5PkTolmCY.roa (raw, json)
Hash identifier:          1MYx77Gulw9p1STwVN9fOqOsF4Nq6BMenvZLLubL/fE=
Subject key identifier:   9B:86:C7:F0:7A:E7:06:FF:7A:31:5E:58:1E:AE:4F:91:3A:25:98:26
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01F6
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/m4bH8HrnBv96MV5YHq5PkTolmCY.roa
Signing time:             Mon 20 Feb 2023 07:57:29 +0000
ROA not before:           Mon 20 Feb 2023 07:57:29 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.25/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:29 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=9B86C7F07AE706FF7A315E581EAE4F913A259826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ad:62:19:96:8c:26:0a:46:b6:cc:a7:bd:54:
                    93:46:2c:5d:13:63:48:23:e4:2e:1d:bf:88:b2:51:
                    b9:ba:90:10:0e:4a:be:59:6f:47:1e:8d:ec:82:5b:
                    d2:47:ec:12:48:3d:ae:57:ec:d9:7d:e0:70:06:ec:
                    b4:67:89:4b:2f:3b:8a:75:0e:56:f5:8d:f0:01:8a:
                    0b:de:59:c9:f8:3d:28:8f:10:84:6a:ed:11:b8:4d:
                    bf:ef:63:69:a5:41:18:91:37:61:3a:9c:b9:36:0b:
                    34:34:29:3a:ee:ae:a3:54:d8:e6:12:58:33:52:ce:
                    6f:3e:57:da:a3:60:02:30:36:80:8b:76:61:87:03:
                    24:41:9a:7d:ff:eb:a8:7e:03:b8:d1:ab:3f:da:65:
                    8b:df:14:88:91:c9:32:25:bd:4a:c7:ad:ce:e5:42:
                    12:59:ce:90:e7:5b:39:fd:75:c2:c6:0b:f5:02:13:
                    68:7d:2a:73:e6:37:64:76:f8:14:fc:d9:d5:0c:a5:
                    dc:9d:05:25:48:45:c2:ef:ff:71:8d:3e:47:22:fb:
                    fa:ad:85:41:35:aa:71:d5:5a:95:80:d1:7c:ce:36:
                    5e:ba:54:16:85:4f:60:d6:b8:4f:17:2e:40:92:b9:
                    1e:46:1d:6e:d0:d2:ab:34:e1:01:7d:96:30:ad:79:
                    2a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:86:C7:F0:7A:E7:06:FF:7A:31:5E:58:1E:AE:4F:91:3A:25:98:26
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/m4bH8HrnBv96MV5YHq5PkTolmCY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.25/32

    Signature Algorithm: sha256WithRSAEncryption
         85:25:68:19:1c:b4:00:8d:e7:0a:67:ff:21:96:33:6a:83:e9:
         24:db:6c:43:f9:ee:32:d9:69:78:95:9c:b1:d1:86:36:de:6f:
         a9:c7:71:44:e1:c2:e6:ea:5d:b7:78:ed:22:ef:6d:1a:d0:85:
         f8:11:4b:18:dc:88:8c:62:f9:d2:96:e4:90:c6:4e:ee:85:1f:
         d7:2e:cf:49:cb:5f:90:08:97:4f:f1:e5:56:f0:25:a0:83:41:
         bb:db:ae:c9:a3:4e:45:08:c8:d4:21:8e:f1:99:fa:37:e0:9f:
         ac:ba:2a:ba:0f:48:de:32:48:49:7b:eb:a0:80:e9:13:5d:a3:
         4f:f9:1f:7f:43:82:d5:4b:75:e8:9d:58:e0:a3:2b:15:8d:75:
         c8:33:b8:dd:4b:06:69:0b:00:01:7e:bd:28:be:4e:f9:d7:bf:
         ca:8f:a1:89:21:96:3c:1c:96:af:99:44:1c:41:99:be:c1:b0:
         f4:6d:e8:2a:ff:f8:74:64:2d:61:1f:28:74:e2:cb:dd:2c:28:
         95:34:fb:6c:3c:39:ad:6e:81:5f:ab:b0:1b:00:ca:19:4e:98:
         be:a4:b5:b8:57:8c:93:22:8d:97:31:46:53:d1:f2:67:14:66:
         cc:08:fb:8b:3e:f1:5a:dd:7c:61:74:b0:ff:ac:97:8b:0e:7f:
         12:87:55:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org