Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ouH_l74JICI671fgSc7G4DA5Oik.roa
File:                     ouH_l74JICI671fgSc7G4DA5Oik.roa (raw, json)
Hash identifier:          ZhrPhna5SVRqClqkQ69/xz3BNGjFh9UVpsfhF2JuQ5o=
Subject key identifier:   A2:E1:FF:97:BE:09:20:22:3A:EF:57:E0:49:CE:C6:E0:30:39:3A:29
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0226
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ouH_l74JICI671fgSc7G4DA5Oik.roa
Signing time:             Mon 20 Feb 2023 07:59:24 +0000
ROA not before:           Mon 20 Feb 2023 07:59:24 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.183/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550 (0x226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:59:24 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=A2E1FF97BE0920223AEF57E049CEC6E030393A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:31:7b:44:44:4a:8d:db:bf:ea:90:fb:a0:93:
                    b0:d0:97:37:87:8b:fd:6d:7c:fe:17:db:69:1d:92:
                    59:84:54:a3:f4:15:5a:ca:fd:7c:2d:e4:1b:94:d1:
                    b6:5d:79:e7:c4:f5:0a:66:b2:f4:6b:7f:0c:68:ec:
                    96:1b:c3:1f:7a:4a:29:99:73:1f:4e:ce:6a:fb:84:
                    29:2e:7a:1c:08:58:27:14:75:87:17:7b:f0:b3:75:
                    44:1d:df:59:5c:94:fd:2b:e8:28:df:7d:c4:37:08:
                    1d:5d:47:fd:c3:c9:c7:55:29:b2:95:95:fb:f6:d9:
                    85:c8:ad:6c:a8:64:be:41:4e:f8:ad:ab:7e:a8:28:
                    cb:95:b0:e7:b4:51:1d:8f:6c:fa:e9:fb:9f:24:54:
                    5f:9b:5b:89:ba:0b:ee:16:3b:2f:e1:d5:3a:f9:94:
                    d2:cd:56:06:23:af:86:45:f2:c4:fd:4b:05:91:a9:
                    fe:b0:37:f7:7a:90:f8:9b:29:fd:fe:22:72:bd:a8:
                    9c:a1:f1:06:ab:f8:53:4a:a0:c6:57:ae:c1:9e:42:
                    fe:19:ae:45:59:32:6c:0b:86:cc:7d:3d:55:76:86:
                    af:d4:ef:fc:22:d9:04:7f:98:ae:77:f8:e8:ad:76:
                    fd:7c:29:22:3d:87:b5:0a:c9:86:ed:66:ea:52:49:
                    7b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E1:FF:97:BE:09:20:22:3A:EF:57:E0:49:CE:C6:E0:30:39:3A:29
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ouH_l74JICI671fgSc7G4DA5Oik.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.183/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:56:5d:b3:6f:31:20:39:67:c3:e4:0a:71:ac:a7:99:47:88:
         48:70:f2:99:04:8f:34:e4:7d:14:59:36:25:14:ad:e2:4b:57:
         c8:e5:d2:4d:91:f5:af:63:32:3a:9f:d8:af:f1:94:ab:dd:7d:
         b8:1d:f3:cc:73:9f:8f:0e:77:db:9c:d4:5b:cf:ea:f2:bd:b8:
         33:d7:86:3d:b8:f5:2b:5c:6d:0f:03:a1:db:be:48:54:27:97:
         ac:c3:8f:d7:84:25:85:7a:15:24:c5:db:cf:65:d4:5d:23:01:
         c2:ac:4d:15:88:71:fb:08:14:b7:e2:56:27:b6:3f:21:42:9f:
         03:4f:33:7a:93:5d:31:d0:2a:f8:1b:57:f8:65:14:70:c3:35:
         e8:29:25:21:71:53:82:4e:9e:33:86:60:d5:93:34:6a:a1:09:
         05:3f:0e:72:24:8c:09:9e:bc:12:43:a7:49:69:cf:60:d5:d4:
         bb:1b:25:ea:5e:92:29:7d:97:4e:ec:2a:a7:e0:08:a1:d6:dd:
         7f:f0:3d:19:5c:67:4a:68:7b:dd:36:1a:8b:84:3e:e8:fb:26:
         82:88:d3:0d:3c:d2:d8:79:23:7a:23:ac:30:dd:72:a9:c9:37:
         a6:a8:9b:a5:7b:d8:b8:11:39:af:73:e7:bb:7f:65:2c:23:c4:
         18:b5:53:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org