Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/r_YIkeGmp5TJKs-LKGwBR3VkI38.roa
File:                     r_YIkeGmp5TJKs-LKGwBR3VkI38.roa (raw, json)
Hash identifier:          xj8rUqqF3qHCE5yjgfZeKwXfuMJzKfpyxxbl8JYDRx4=
Subject key identifier:   AF:F6:08:91:E1:A6:A7:94:C9:2A:CF:8B:28:6C:01:47:75:64:23:7F
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0256
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/r_YIkeGmp5TJKs-LKGwBR3VkI38.roa
Signing time:             Mon 20 Feb 2023 08:01:32 +0000
ROA not before:           Mon 20 Feb 2023 08:01:32 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.199/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598 (0x256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:01:32 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=AFF60891E1A6A794C92ACF8B286C01477564237F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:21:af:bc:62:6f:54:25:5a:a2:97:f5:cb:
                    ef:ec:e2:9c:c0:a5:7a:39:e1:e6:04:c3:c8:a7:17:
                    b0:2a:ad:f1:59:65:ce:09:e3:b2:67:e6:e0:5a:68:
                    97:5b:c5:80:af:56:20:99:b3:33:e5:5c:54:9c:0b:
                    ed:82:84:60:9a:f1:01:86:77:f3:80:5f:58:10:c1:
                    a5:7b:bf:84:55:8b:80:5b:ca:91:8c:1b:1f:41:56:
                    6d:9b:0b:97:43:61:3e:18:8e:f4:e9:d3:ec:29:2b:
                    9e:12:89:6f:06:02:42:16:f5:8a:e6:41:4b:ab:de:
                    03:ba:2a:12:62:48:a8:41:7d:c1:4c:a1:b5:95:df:
                    e3:76:f2:86:40:2c:7a:d8:c8:71:4d:66:77:c6:46:
                    91:e9:33:93:2e:d5:14:88:cb:5f:e7:bc:c2:82:09:
                    89:9b:b8:ef:7d:82:9a:a4:c8:02:fb:97:de:1b:22:
                    1e:91:5b:f4:00:a5:23:ad:12:7e:d9:fb:28:24:a4:
                    18:f2:25:5d:91:10:d6:93:50:4a:9c:ac:64:ee:49:
                    f7:a8:87:c7:0b:1d:91:d4:b8:7e:56:8c:09:80:36:
                    ab:5b:77:17:52:cf:15:fd:e6:dc:f2:7b:d7:15:fd:
                    8b:36:63:37:b4:9c:9a:ff:ad:f2:63:54:45:43:c2:
                    24:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F6:08:91:E1:A6:A7:94:C9:2A:CF:8B:28:6C:01:47:75:64:23:7F
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/r_YIkeGmp5TJKs-LKGwBR3VkI38.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.199/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:a3:59:10:8f:3d:1a:2e:c2:9f:cd:61:93:94:e9:41:82:3e:
         4a:4d:83:ae:21:5e:67:03:ad:ee:c4:db:c8:9b:55:b0:3c:93:
         c0:80:1c:a4:1e:e2:42:f5:49:a4:c6:ea:e4:42:e1:d1:0b:15:
         e7:29:02:fd:8e:38:1a:8d:31:cb:d7:95:14:f0:72:87:e4:06:
         65:8a:98:6c:1a:aa:1c:3c:83:81:3b:52:bc:5a:92:69:98:01:
         5a:4c:1b:c1:b7:50:d5:7a:69:17:3a:4e:22:e4:d8:f8:67:f6:
         36:ec:8b:f8:37:ec:09:7f:72:b0:a1:72:8d:09:63:45:e1:db:
         8f:02:a2:3f:bd:a8:08:23:ab:da:98:d2:c0:51:ec:9a:e8:ac:
         21:b5:94:99:21:96:52:6d:34:24:64:e0:15:ac:cd:b6:6b:15:
         bb:bf:7d:a2:e0:e1:cb:d6:35:d5:a2:47:07:2f:ea:d7:ab:8b:
         09:42:cc:b0:fa:18:37:57:e4:02:ce:83:db:92:63:f7:bc:55:
         d6:26:fc:7a:55:be:0c:74:e5:04:0f:34:48:18:07:fa:e3:d0:
         40:23:a7:b1:9a:e2:a3:5c:23:f3:fa:b0:f2:1f:e9:f1:f3:a9:
         be:0c:ea:4c:c2:1e:4a:f1:d1:26:6f:25:76:d5:42:41:a4:d0:
         8b:94:f6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org