Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ro683gUuOJihV__4jETYjp76r6Y.roa
File:                     ro683gUuOJihV__4jETYjp76r6Y.roa (raw, json)
Hash identifier:          LEH72D0J/Btnib97uYqbfIT4mG1LqE1km5nQsQn5nJ8=
Subject key identifier:   AE:8E:BC:DE:05:2E:38:98:A1:57:FF:F8:8C:44:D8:8E:9E:FA:AF:A6
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0209
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ro683gUuOJihV__4jETYjp76r6Y.roa
Signing time:             Mon 20 Feb 2023 07:57:35 +0000
ROA not before:           Mon 20 Feb 2023 07:57:35 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.89/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:35 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=AE8EBCDE052E3898A157FFF88C44D88E9EFAAFA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:22:98:88:da:9b:03:5b:ea:54:a7:e3:f8:5d:
                    fa:66:dc:70:8a:1c:f7:86:56:2f:a9:0d:34:3a:49:
                    2f:ed:d6:2f:69:34:01:2a:f8:34:86:bd:25:37:21:
                    02:d3:b9:b5:2a:34:d0:02:c8:32:6c:66:32:74:05:
                    9e:2b:8a:c5:5e:cd:01:30:61:7f:af:60:21:38:7d:
                    9d:d0:85:3f:bc:4d:9c:09:f4:f6:20:19:78:2f:c5:
                    e7:1d:a9:bf:b6:69:6d:63:e2:00:a6:44:2d:fe:1b:
                    cc:bb:26:2c:f3:13:18:a9:db:7e:ff:d5:03:8d:ac:
                    bb:9e:1d:8f:e8:3c:e0:b5:41:ee:26:f8:9f:d0:37:
                    81:d1:b6:5e:f6:b4:eb:71:7e:9e:4f:68:26:1a:82:
                    45:d6:29:84:97:70:58:ff:36:b7:ba:99:97:30:ba:
                    10:db:2b:19:09:8b:11:78:19:b7:4e:d1:47:84:69:
                    4e:a1:77:51:0f:1d:22:85:b4:65:11:5a:1c:b7:d5:
                    ec:4e:d2:88:3b:a8:02:97:48:62:09:d0:4a:cc:bc:
                    5f:39:dc:58:54:0b:18:38:61:a6:1d:2b:4b:7b:ba:
                    9b:41:19:7d:91:46:47:e1:19:1f:b2:f7:f1:1d:06:
                    de:79:d7:86:89:4e:6e:df:f6:ae:db:1c:f8:07:2f:
                    9b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8E:BC:DE:05:2E:38:98:A1:57:FF:F8:8C:44:D8:8E:9E:FA:AF:A6
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ro683gUuOJihV__4jETYjp76r6Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.89/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:5f:04:e4:8d:f3:32:7d:08:83:1a:3f:6a:2e:f7:80:ab:e2:
         31:1d:c8:6d:ae:6d:9b:22:94:00:d0:2f:39:41:fb:3f:c9:b5:
         a1:07:5d:15:16:27:3a:e5:7a:50:68:17:49:09:7d:dd:fc:eb:
         97:8b:5d:ff:52:e3:40:b4:36:28:6e:d6:0d:20:11:5a:55:68:
         b0:f2:67:89:3a:ac:05:5a:70:62:81:6d:44:da:96:5f:88:f3:
         ff:30:9d:7e:d4:fe:44:eb:06:b4:e5:4a:65:cf:4c:c1:9a:a1:
         51:fc:6d:8e:8c:ba:e7:40:40:b1:c2:d7:29:b5:3e:bc:59:24:
         c8:41:33:be:0b:3d:bb:d6:d7:a1:f0:e8:af:4e:ab:8b:44:44:
         bf:a7:83:19:41:b8:d4:0a:45:e5:d0:f5:7d:22:15:ec:14:1b:
         ac:63:fd:0e:6d:89:39:44:c6:7a:74:9a:76:bf:fd:4c:fd:e5:
         80:a0:2a:f3:54:e4:a7:85:bf:2f:99:da:29:97:97:a6:e3:fb:
         7a:24:89:6b:01:e2:9a:bb:5c:0c:65:e2:50:fd:e4:64:43:5f:
         f6:8e:c4:38:69:82:e1:9c:07:e9:3a:d9:d7:0b:47:42:29:1a:
         d4:02:f4:00:57:7e:15:9e:cb:09:a7:39:1d:03:fb:08:19:18:
         bb:49:a9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org