Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/sppbvhnlcihFssNR9pzFAOsQzSw.roa
File:                     sppbvhnlcihFssNR9pzFAOsQzSw.roa (raw, json)
Hash identifier:          hcxY3ID4u+tb2veIxXYjUqnwR8I1pBksCr+TOAsk92c=
Subject key identifier:   B2:9A:5B:BE:19:E5:72:28:45:B2:C3:51:F6:9C:C5:00:EB:10:CD:2C
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0151
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/sppbvhnlcihFssNR9pzFAOsQzSw.roa
Signing time:             Wed 15 Feb 2023 02:28:31 +0000
ROA not before:           Wed 15 Feb 2023 02:28:31 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.16/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:28:31 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=B29A5BBE19E5722845B2C351F69CC500EB10CD2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:82:2e:e8:61:8e:d4:9c:f0:db:16:9d:e1:c3:
                    7f:0e:fc:22:ad:4f:34:42:3b:99:4c:f3:e0:15:26:
                    09:39:b1:7f:7a:d6:16:2c:15:ad:96:d6:70:1a:24:
                    e6:44:01:6b:4b:38:6b:e8:81:28:82:8f:cc:ca:63:
                    c7:71:a9:b2:62:61:4d:d1:78:26:04:81:4a:0a:b1:
                    a6:52:0c:f1:ea:70:04:8c:88:2e:40:92:24:97:45:
                    81:c1:c1:a2:e7:2c:da:e7:3d:5d:84:e5:ef:9e:3b:
                    b6:51:78:33:3d:a5:f9:b1:bb:d7:50:c5:0f:5b:e8:
                    40:3d:61:ab:87:8b:7c:e5:ca:e5:e6:1e:9c:d2:a4:
                    b0:6a:75:37:25:af:ac:58:b9:fa:c3:95:04:a2:57:
                    ae:93:92:02:f9:c0:14:19:00:98:f5:c4:e6:d1:b6:
                    02:59:99:46:ff:4d:34:25:2c:e4:39:94:af:ac:83:
                    c5:be:f3:d5:54:b1:c9:fa:ad:b2:9c:d8:dd:a3:3c:
                    f5:6e:62:13:74:ce:33:59:ce:ac:39:bf:70:f6:8d:
                    16:e4:8a:fc:cd:05:be:ca:b5:3a:3d:60:65:3a:4b:
                    94:2c:6a:25:ff:23:0f:cd:ba:72:fb:4d:6f:4a:ee:
                    cd:c4:4e:5f:5f:ce:4e:01:e5:a2:5f:28:2c:13:3d:
                    0f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9A:5B:BE:19:E5:72:28:45:B2:C3:51:F6:9C:C5:00:EB:10:CD:2C
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/sppbvhnlcihFssNR9pzFAOsQzSw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.16/32

    Signature Algorithm: sha256WithRSAEncryption
         99:e6:4b:ee:e3:98:4f:13:71:f2:f6:a1:85:2f:b8:c8:93:5d:
         22:d6:f7:38:a3:8b:fe:2a:36:41:87:ec:fc:33:47:78:b2:87:
         fa:cc:54:ed:67:4d:00:4b:40:13:4b:72:e3:ec:c5:73:7d:71:
         b2:6c:f4:e9:45:ab:e2:cb:8e:7e:38:86:87:81:da:29:1d:9f:
         ec:6c:53:65:de:05:34:ca:a7:b2:27:2f:a4:57:11:a2:49:90:
         d3:11:57:a8:99:c4:48:3f:0a:29:b0:73:aa:cd:fe:1c:68:95:
         68:67:ae:6d:8f:46:f8:4c:be:70:c3:90:24:ca:3c:31:d8:5b:
         ea:89:09:a1:04:07:50:c6:ce:e2:e9:1c:8e:be:d4:97:e3:41:
         ce:4c:1d:96:87:4a:76:1e:51:be:4e:8d:8a:a0:25:7c:97:6c:
         3f:02:c8:e8:8d:85:fc:53:30:17:71:9f:ee:f0:ac:b2:e5:91:
         d8:c6:61:78:70:cb:d7:e1:74:4a:36:b6:41:a4:6f:86:96:66:
         2e:6b:13:4c:6e:1c:db:76:b3:d8:76:76:28:89:00:f8:7b:93:
         63:8e:95:d3:72:34:b5:ec:70:c1:ac:3f:d7:24:60:46:d0:d8:
         75:04:aa:58:bb:43:46:7c:e3:a4:3e:6b:54:bc:d8:cb:2b:27:
         b6:0d:b4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org