Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/nlNrQPwpNwio3QNcIrMSbM_VZRc.roa
File:                     nlNrQPwpNwio3QNcIrMSbM_VZRc.roa (raw, json)
Hash identifier:          vXr220RF5ZZUGumuqqnIsWw5LA7CdW7FQFUw6+FIOMM=
Subject key identifier:   9E:53:6B:40:FC:29:37:08:A8:DD:03:5C:22:B3:12:6C:CF:D5:65:17
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       028F
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/nlNrQPwpNwio3QNcIrMSbM_VZRc.roa
Signing time:             Mon 20 Feb 2023 08:05:24 +0000
ROA not before:           Mon 20 Feb 2023 08:05:24 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.155/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655 (0x28f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:24 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=9E536B40FC293708A8DD035C22B3126CCFD56517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ca:b0:ca:a0:a1:95:5b:19:2a:df:0b:f4:9a:
                    e3:aa:5f:24:24:49:ad:0d:27:40:77:90:69:40:8d:
                    f7:55:d9:9e:fc:04:26:fe:ff:61:45:e5:d7:56:8a:
                    82:fb:ee:54:e0:8f:7a:ac:78:ac:af:75:46:f2:60:
                    be:bf:a8:bd:79:92:e4:f1:7b:8f:32:4a:d8:89:8d:
                    45:35:f8:de:fa:86:73:66:bb:bb:22:e4:dd:59:68:
                    05:54:a5:ed:8d:28:97:80:09:4c:06:dd:5c:d2:69:
                    14:54:3a:9e:34:79:23:f7:74:e6:43:b1:4f:4a:0b:
                    e6:e8:07:a7:19:9d:08:31:4e:da:7d:fc:6b:eb:a7:
                    6a:3f:7c:bd:7b:53:a8:d6:eb:9b:4d:3e:2f:d4:db:
                    f1:4b:05:90:6e:85:a6:b6:fb:f4:2f:5d:bb:25:3a:
                    21:66:a7:f6:66:5d:6d:e9:8d:21:ef:f6:99:35:ad:
                    60:09:df:a9:de:57:3e:2a:cc:e2:95:e4:54:a6:80:
                    eb:9e:b4:6b:cd:b5:e2:8e:15:a9:e0:ec:f5:0e:3b:
                    80:90:26:94:05:ba:84:1d:30:15:65:2f:54:79:b8:
                    9e:38:75:6a:a8:3b:aa:4b:dd:f5:1b:36:2b:7c:a6:
                    8c:df:71:1e:ac:64:55:9e:02:f5:d3:5a:d9:61:42:
                    21:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:53:6B:40:FC:29:37:08:A8:DD:03:5C:22:B3:12:6C:CF:D5:65:17
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/nlNrQPwpNwio3QNcIrMSbM_VZRc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.155/32

    Signature Algorithm: sha256WithRSAEncryption
         67:f4:b3:b0:9e:5d:1a:fc:2e:1c:1a:44:5e:49:0a:56:f5:ad:
         fe:41:be:a2:1e:53:95:5d:ec:b5:7c:26:62:88:07:52:15:fd:
         0c:9c:3b:57:84:5c:20:30:9a:a1:ac:34:79:4c:60:49:06:66:
         eb:90:1a:b8:ea:c2:11:b7:7f:62:ed:d5:b6:f3:8e:d0:e6:4a:
         08:8f:ae:11:e1:30:5b:5c:99:50:54:f3:ed:f1:4b:42:ee:0d:
         03:0a:95:53:25:16:fd:66:58:68:74:a9:3d:d4:f2:2f:95:18:
         20:ee:14:d5:92:c7:2d:fe:08:08:95:e4:a4:3e:ca:03:b9:5b:
         9b:cd:cd:84:9a:74:ff:63:e3:d1:b1:00:1b:04:20:15:7e:22:
         72:e5:b2:cc:77:40:59:a5:f1:d6:03:50:e5:58:19:c1:1b:2f:
         ec:42:72:39:20:08:3a:fa:f0:90:5b:88:b7:1a:ba:7c:f3:9f:
         17:14:fe:68:e1:55:03:3c:53:2d:19:76:d0:f8:de:1c:5f:59:
         90:47:7e:6d:4b:b3:df:4d:b6:68:d7:70:a0:54:e6:ed:22:3f:
         14:3b:ed:f0:88:2d:f8:eb:ab:ab:18:c5:de:93:4d:a1:67:ac:
         8f:c8:c2:41:26:1f:e7:9d:30:64:8c:93:5c:85:d5:e2:fa:0e:
         8f:55:07:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org