Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/pmWzQORyJaoVH-oXrxWOPubnBeY.roa
File:                     pmWzQORyJaoVH-oXrxWOPubnBeY.roa (raw, json)
Hash identifier:          VMf59NdDB9kAsoMGGiUMz42pLfqRoc8KLkvOnCtohkQ=
Subject key identifier:   A6:65:B3:40:E4:72:25:AA:15:1F:EA:17:AF:15:8E:3E:E6:E7:05:E6
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       79
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/pmWzQORyJaoVH-oXrxWOPubnBeY.roa
Signing time:             Fri 10 Feb 2023 07:43:43 +0000
ROA not before:           Fri 10 Feb 2023 07:43:43 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.145/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:43:43 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=A665B340E47225AA151FEA17AF158E3EE6E705E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:1a:cf:bc:39:b9:21:fe:d9:5d:c4:da:94:
                    e3:21:74:e7:84:16:53:e7:af:70:dc:c1:fc:4f:97:
                    09:06:06:33:4e:0a:47:36:00:ab:30:8d:ac:ac:f8:
                    54:a7:14:09:b9:c7:92:d2:ac:c8:7e:e0:4e:96:67:
                    55:96:23:d1:0a:f6:3f:d2:6f:b5:25:24:20:b8:13:
                    0d:5b:bd:20:d8:85:f0:52:19:8a:11:06:50:49:d2:
                    57:cb:af:24:8a:f7:5a:55:62:e3:7e:99:e3:21:5f:
                    9c:d2:b0:09:6c:94:23:ea:39:b8:b6:4f:e4:98:41:
                    79:84:c1:d9:87:42:a9:9d:56:83:96:6e:f7:90:7f:
                    cf:7f:e2:79:e2:8b:07:a9:02:18:64:cd:c2:bd:a9:
                    73:91:7c:44:c2:ef:40:0a:81:de:bb:94:2d:67:13:
                    af:a1:ec:99:7b:11:c4:45:41:29:b1:51:19:81:5a:
                    19:7e:95:72:f6:09:ee:84:20:23:75:6d:9e:1b:45:
                    0f:a7:22:b9:1c:d5:e2:59:bc:f5:58:63:a7:e1:0c:
                    88:fa:76:a5:74:79:47:e3:9d:0c:ee:2e:f9:91:c8:
                    7d:51:84:ff:91:95:c9:9d:2a:d5:9f:fb:43:af:5b:
                    f8:ac:89:df:43:ed:5b:20:c5:b3:7e:b3:1f:e5:b7:
                    45:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:65:B3:40:E4:72:25:AA:15:1F:EA:17:AF:15:8E:3E:E6:E7:05:E6
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/pmWzQORyJaoVH-oXrxWOPubnBeY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.145/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:01:c6:4e:52:bc:3d:df:bd:61:c2:b9:b6:e1:24:67:92:dc:
         b0:66:30:3a:b9:8a:ad:ff:e9:e6:03:1e:66:b1:ad:11:ec:f2:
         59:2f:f3:bb:12:7e:ed:e3:aa:9f:dd:c1:fe:39:01:cd:d3:fb:
         1d:dd:67:9a:e7:39:d6:0c:1a:2c:02:0d:9f:4a:ad:41:b7:03:
         16:06:75:4e:bf:be:a8:ee:a5:69:76:d0:4a:01:e3:80:5b:58:
         16:5e:c7:ff:f0:42:82:b4:05:4a:9f:fa:e9:67:7d:38:7d:0f:
         5e:a2:3b:c8:5d:b6:59:fd:0a:0f:9a:1f:db:08:ef:e5:8e:83:
         5a:04:8c:71:a3:06:d2:c6:7f:ff:c8:d0:1c:82:50:ca:e8:10:
         9e:25:44:29:1c:a3:50:46:d2:bb:00:03:21:bf:1c:8f:e2:f1:
         4e:37:7d:b4:c3:72:d4:ec:5f:0c:c7:2e:74:6a:fc:b8:5f:70:
         01:2a:21:45:b4:65:28:00:ff:0a:86:cd:b4:4c:9d:db:7b:83:
         0a:ed:f2:4c:e6:cd:5c:4b:73:3b:0d:68:58:ef:c2:82:47:96:
         e1:ed:75:2e:1d:1b:5a:02:81:28:c9:3b:fb:5c:96:15:c6:97:
         d2:f6:b1:76:ac:e7:00:5b:a8:a9:ba:be:d5:ea:23:04:a1:0d:
         19:d8:ef:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org