Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/pQG6JHkBJzhlOTwkVwQ1vHLRxAE.roa
File:                     pQG6JHkBJzhlOTwkVwQ1vHLRxAE.roa (raw, json)
Hash identifier:          DCTHqGGtUneSxWNQghJF0yBa9EkoIimxl7V4kxnUFJg=
Subject key identifier:   A5:01:BA:24:79:01:27:38:65:39:3C:24:57:04:35:BC:72:D1:C4:01
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0283
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/pQG6JHkBJzhlOTwkVwQ1vHLRxAE.roa
Signing time:             Mon 20 Feb 2023 08:03:36 +0000
ROA not before:           Mon 20 Feb 2023 08:03:36 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.99/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 643 (0x283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:03:36 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=A501BA247901273865393C24570435BC72D1C401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5d:6b:d3:16:df:2a:28:ad:77:1d:4d:6b:cc:
                    69:f1:33:39:01:a6:9e:ec:f5:c8:a5:89:3f:b6:d1:
                    24:ad:fd:dd:d2:ca:b5:62:36:26:43:a3:2f:dd:9a:
                    3b:f3:9f:0f:db:39:7e:4f:e3:cd:98:93:b1:13:38:
                    01:53:e4:20:57:f4:ba:82:b8:db:a0:bd:8f:af:73:
                    35:0a:4a:9c:41:10:b3:c4:19:8c:37:24:7e:77:96:
                    a3:a4:ad:c2:c6:b8:f4:7f:fc:e8:e4:96:79:11:40:
                    2c:8f:b0:bb:09:e4:c1:69:76:ab:2a:a8:1e:92:38:
                    3e:fd:7d:87:98:34:df:85:25:2d:1b:5a:4e:cf:b7:
                    d3:41:de:f8:0a:b8:23:95:f6:4d:1d:b7:b0:fb:1b:
                    dc:a8:72:40:13:e4:73:60:72:4e:9a:77:67:e7:ba:
                    87:f2:25:5b:a6:0c:ee:99:cf:75:d8:be:d5:c4:60:
                    46:70:4b:63:f7:a1:45:8f:bc:85:f7:a1:19:cb:0d:
                    98:5f:1b:eb:b7:20:58:32:23:c3:58:6c:58:cd:cf:
                    55:a8:bc:80:83:1e:5a:06:5d:42:bc:ef:37:f0:0b:
                    b7:d3:40:1d:b4:39:82:ef:6e:ed:07:58:d5:41:ac:
                    fc:50:ff:e7:91:0d:83:5c:6e:74:70:0c:99:29:95:
                    04:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:01:BA:24:79:01:27:38:65:39:3C:24:57:04:35:BC:72:D1:C4:01
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/pQG6JHkBJzhlOTwkVwQ1vHLRxAE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.99/32

    Signature Algorithm: sha256WithRSAEncryption
         14:4c:06:d9:38:86:8d:27:84:4b:c2:d4:21:ba:4e:97:04:80:
         27:fd:41:29:18:0a:15:46:66:0e:d0:d9:8c:2f:cf:f5:82:e9:
         e6:82:35:ce:65:b9:fe:ce:8d:ec:06:03:95:0b:49:fb:f5:c8:
         31:0d:71:d7:09:11:1f:93:f2:37:9c:29:4f:22:13:ba:24:57:
         3e:a6:da:68:f0:16:eb:05:cc:87:8a:16:71:6a:49:65:fa:20:
         be:3f:24:5e:13:1f:5c:b9:c4:9c:17:dd:e6:e3:83:29:ed:5f:
         57:f6:b6:89:b9:5d:5b:c8:4d:30:57:f7:5a:dc:37:a8:5c:bc:
         8e:0a:db:95:38:aa:de:bc:c3:f7:33:3e:68:95:62:92:26:c8:
         b6:c8:d6:6f:e6:36:a2:28:8c:31:48:3c:6e:6b:4d:5d:ec:c5:
         e7:75:48:aa:71:2a:5e:78:6f:d9:90:2d:a7:47:15:f1:42:f9:
         d1:bf:2b:10:af:af:bb:82:7d:5f:46:19:04:02:fd:83:83:a4:
         f8:ef:a7:44:e5:3c:d3:d9:e7:a2:ec:02:8f:e9:39:9e:81:bd:
         2c:94:b7:54:87:86:88:92:91:fb:1f:5b:2b:ac:64:7a:04:4e:
         9d:48:54:3b:c6:57:da:2a:c7:3a:86:f6:f0:03:6a:80:fc:f0:
         d3:a1:c8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org