Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/orI5uEzYY5LVEnYLe-0LDzP86bI.roa
File:                     orI5uEzYY5LVEnYLe-0LDzP86bI.roa (raw, json)
Hash identifier:          zttVuEgRWEVAEVpwYeq4LbDvCcxk8bDDdUoyG6ssUBM=
Subject key identifier:   A2:B2:39:B8:4C:D8:63:92:D5:12:76:0B:7B:ED:0B:0F:33:FC:E9:B2
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02BE
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/orI5uEzYY5LVEnYLe-0LDzP86bI.roa
Signing time:             Mon 20 Feb 2023 08:07:23 +0000
ROA not before:           Mon 20 Feb 2023 08:07:23 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.90/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 702 (0x2be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:07:23 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=A2B239B84CD86392D512760B7BED0B0F33FCE9B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:f8:20:48:c9:24:58:69:38:7e:4b:dd:a0:
                    fe:d9:e1:a1:72:37:b1:2c:3e:4f:ba:95:63:4b:1b:
                    fb:57:15:de:b0:c3:17:f6:c1:79:5e:19:ba:68:16:
                    5f:c4:fe:fa:a7:6b:0d:c6:f6:d3:21:31:e0:bc:0d:
                    d0:1b:7c:48:b7:3b:2c:98:50:77:b3:df:04:cd:a2:
                    a5:42:c3:15:11:43:f2:79:c0:3d:25:b2:95:3a:32:
                    39:fc:26:6a:89:cc:bb:22:02:6b:ed:a7:22:4f:2c:
                    b8:26:63:b9:1f:70:db:95:91:3e:88:9e:b5:e2:34:
                    8a:0a:8c:d4:23:70:df:a2:80:06:57:11:7a:ac:22:
                    c6:43:38:a1:11:79:1b:ea:51:b1:9a:2b:b9:14:b6:
                    05:20:b7:cd:ad:f5:67:c8:50:c2:90:9f:99:09:5c:
                    1d:de:a4:c5:94:30:5e:77:a4:73:56:78:54:ae:93:
                    bf:ed:65:e9:f0:df:97:c5:49:e9:2f:38:aa:38:63:
                    38:a7:dc:1a:32:36:70:0b:ed:13:46:15:10:b0:57:
                    37:ea:39:01:c3:a9:66:13:ba:46:43:8e:d3:43:2d:
                    cc:a9:74:d8:cf:c0:2b:aa:c9:98:2d:e3:cc:69:fc:
                    41:f9:85:51:26:3a:2e:f5:7b:35:15:46:c0:9c:bf:
                    84:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B2:39:B8:4C:D8:63:92:D5:12:76:0B:7B:ED:0B:0F:33:FC:E9:B2
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/orI5uEzYY5LVEnYLe-0LDzP86bI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.90/32

    Signature Algorithm: sha256WithRSAEncryption
         83:62:0d:a0:e5:ca:a1:58:dd:3c:2e:b4:91:22:bb:09:65:5a:
         79:74:fc:37:d9:07:8a:75:f1:eb:a6:00:7e:fb:c7:0e:55:2b:
         ef:80:0c:25:db:a1:21:6a:80:c7:5c:4b:5c:d2:5b:8b:3d:2f:
         84:e7:21:c3:34:05:cb:81:9a:43:ab:5d:02:ae:89:52:24:b3:
         df:44:8c:4f:84:0c:10:bb:7a:5a:b7:a2:6b:bd:00:dd:4e:c4:
         c7:b9:69:71:a9:9a:c8:1c:85:44:34:04:b8:f5:10:56:ba:87:
         c1:05:99:72:9b:33:84:4e:f4:d1:39:f1:4c:77:b2:ab:5c:5a:
         ab:b8:db:66:e2:a7:42:96:12:bb:05:a6:41:96:3d:80:e0:91:
         39:dc:96:09:39:b6:f9:32:f3:74:d5:2c:e7:e2:50:2e:4d:9d:
         00:9d:57:de:f2:b9:bb:79:f8:ca:3b:bd:78:a6:05:b6:4b:65:
         54:96:3f:67:42:2e:1b:32:17:45:78:c0:ba:03:dd:b5:05:85:
         21:45:53:6e:46:09:91:ff:63:e7:12:f5:31:d1:96:e1:3e:82:
         f5:b9:46:a6:83:7c:51:36:ea:4f:d7:83:6f:04:77:c6:5e:dc:
         98:03:15:a3:aa:18:a6:47:48:a7:08:95:78:e8:4e:5b:0b:1c:
         33:ec:9b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org