Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/pVxU0VxDLmNxElx5KxwdYXclrEk.roa
File:                     pVxU0VxDLmNxElx5KxwdYXclrEk.roa (raw, json)
Hash identifier:          ExVxdJeTBm6srOtbSKWBADa9bDpPtJNbKe5jCMTTsjs=
Subject key identifier:   A5:5C:54:D1:5C:43:2E:63:71:12:5C:79:2B:1C:1D:61:77:25:AC:49
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0235
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/pVxU0VxDLmNxElx5KxwdYXclrEk.roa
Signing time:             Mon 20 Feb 2023 07:59:31 +0000
ROA not before:           Mon 20 Feb 2023 07:59:31 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.18/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:59:31 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=A55C54D15C432E6371125C792B1C1D617725AC49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e9:5b:e3:7a:71:49:e3:55:b8:a7:cd:dd:e1:
                    d3:0a:d1:ef:3e:73:4a:78:fe:f9:b5:79:31:dc:63:
                    5a:1c:e3:0e:03:75:75:93:03:51:d2:c5:cd:25:9f:
                    fb:24:3c:14:cc:30:9c:53:ab:0b:e7:10:bf:46:a3:
                    ec:cc:d4:36:8f:ec:3b:4a:71:7b:19:3b:7a:72:d0:
                    b5:ce:96:a7:52:b2:72:7e:34:04:0f:83:5e:18:c3:
                    67:64:2c:62:5d:16:37:0e:5d:ae:f8:10:17:d7:9e:
                    d3:47:9a:13:f3:8e:b6:63:95:34:09:f0:3a:0d:f8:
                    1a:c0:14:ef:b2:38:e8:0c:f6:a2:cd:2a:57:25:3a:
                    82:cc:f6:33:1a:b3:cd:4a:5b:8b:97:34:06:8a:cf:
                    bb:4a:01:8e:73:1a:2b:73:90:6b:de:66:cb:00:a3:
                    12:ad:c1:6e:46:de:81:86:8b:0b:63:b1:94:e8:7b:
                    26:e8:7c:2a:dc:da:38:e5:96:f0:51:3c:60:d8:cc:
                    55:cc:d4:96:ab:d6:fe:12:8a:42:2e:0c:d2:7b:8b:
                    bd:da:8b:7b:49:1d:da:3d:c4:1f:15:08:f5:46:16:
                    e8:d5:98:3b:73:b4:2e:99:ea:9f:cd:20:98:10:6f:
                    9f:8f:37:61:48:5a:e2:0d:b9:10:01:9d:33:f5:ca:
                    23:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5C:54:D1:5C:43:2E:63:71:12:5C:79:2B:1C:1D:61:77:25:AC:49
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/pVxU0VxDLmNxElx5KxwdYXclrEk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.18/32

    Signature Algorithm: sha256WithRSAEncryption
         14:0b:ac:83:a3:ef:9e:05:90:b2:bd:a9:3f:c4:b6:45:dc:e1:
         6a:22:0b:36:2e:d5:8a:40:7d:0e:84:98:19:7e:00:72:6b:60:
         a8:db:f2:e9:68:66:1a:40:b4:82:7a:f5:90:37:9f:43:4a:10:
         09:b4:b1:91:25:6b:7f:67:9a:fd:1c:97:78:88:69:ee:0a:97:
         25:50:38:cd:35:c9:3e:23:b3:e7:0e:c0:d5:c0:0d:e5:9a:7d:
         16:b9:4d:c3:a6:3d:72:51:00:db:1a:5f:f9:e1:d0:98:0d:d1:
         a6:17:ca:a4:9b:4a:54:b8:24:f7:07:86:42:b1:22:74:3a:ef:
         20:7b:f6:1a:9d:6d:57:bd:d7:ea:55:d4:15:f5:0d:39:45:b4:
         56:cb:6c:1b:21:24:2c:38:57:ba:68:0b:09:85:e8:ef:08:39:
         05:f1:18:2b:84:57:37:30:b0:e7:c2:2b:23:ae:81:83:df:b4:
         13:08:e0:64:6c:7a:f3:d8:07:44:e4:8c:88:5d:4f:f1:7b:d5:
         09:ab:c4:bf:42:45:2a:b8:6e:3c:f7:dd:de:a4:25:67:8c:73:
         83:d3:93:f8:00:8b:e6:a8:fc:22:0f:b2:92:d9:d1:ca:ac:47:
         aa:97:98:a0:0b:87:06:de:c8:99:0d:f6:75:9d:50:f5:10:fd:
         0c:a9:65:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org