Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/syLy9ds3e2xpc0I24HMTeRLNEJw.roa
File:                     syLy9ds3e2xpc0I24HMTeRLNEJw.roa (raw, json)
Hash identifier:          qM1rl90uS+gr6RaRYytPD4gaanor7LBIay+kQOiym6g=
Subject key identifier:   B3:22:F2:F5:DB:37:7B:6C:69:73:42:36:E0:73:13:79:12:CD:10:9C
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01B2
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/syLy9ds3e2xpc0I24HMTeRLNEJw.roa
Signing time:             Mon 20 Feb 2023 07:53:15 +0000
ROA not before:           Mon 20 Feb 2023 07:53:15 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.187/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:15 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=B322F2F5DB377B6C69734236E073137912CD109C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:8e:17:18:44:d8:0d:0e:be:60:3a:ec:7d:
                    86:f0:7b:44:23:b5:e6:b4:54:32:10:7f:9b:4b:e1:
                    0a:7e:f8:ef:d6:10:1c:c4:38:7f:7c:b2:15:48:cf:
                    ea:4c:5e:c5:6f:9f:d2:99:3f:79:40:6e:c6:f2:a9:
                    c5:a6:d9:03:80:0b:a6:b9:bd:db:12:30:0c:53:fe:
                    8d:bf:2b:47:79:e1:7d:1a:8b:fa:07:8a:c0:c4:eb:
                    52:ad:a2:7b:6d:fe:61:70:88:6e:cb:7b:b3:8e:8e:
                    03:33:e6:d0:3b:4d:52:b5:39:78:d5:f6:11:67:35:
                    bf:e8:81:d4:9e:fa:5f:19:b5:c3:d6:96:b5:37:03:
                    c3:33:c0:22:d8:40:70:3a:89:c5:1c:96:d7:07:b8:
                    07:1c:f2:5b:66:84:7f:c7:09:d7:1a:90:a4:ee:31:
                    6f:4b:b0:bb:61:d0:7a:b9:e3:a6:a9:35:14:38:f9:
                    12:b5:86:f9:4b:b3:23:3c:97:f3:9e:09:e9:53:4f:
                    03:54:a2:d2:de:81:8e:e9:ed:3d:29:14:03:f6:1c:
                    e2:3f:fc:80:86:73:82:1f:b1:5b:c2:09:1c:ba:42:
                    72:ed:89:80:81:98:e0:5b:26:9c:e0:bd:71:ba:61:
                    05:b4:ef:1a:49:11:bd:21:e0:82:b2:99:ed:ab:29:
                    f0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:22:F2:F5:DB:37:7B:6C:69:73:42:36:E0:73:13:79:12:CD:10:9C
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/syLy9ds3e2xpc0I24HMTeRLNEJw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.187/32

    Signature Algorithm: sha256WithRSAEncryption
         34:e5:11:55:8d:70:23:95:3d:81:f6:ee:65:4b:95:22:38:be:
         87:9f:f1:ad:af:b9:79:fe:eb:20:1d:ca:ff:82:8c:09:dc:8b:
         e9:2a:a0:3b:5f:20:2e:83:9a:95:db:c7:1c:fe:27:16:c2:c5:
         9c:35:8c:c4:10:e3:a4:8c:ec:0d:f7:dc:3d:14:98:0a:3c:6f:
         40:7f:ad:aa:67:ec:42:b2:46:3b:89:e9:0e:23:21:00:36:5b:
         30:bf:cc:3a:ab:14:27:b4:0e:18:a4:40:ec:21:33:a8:bf:a5:
         79:b1:10:c2:80:29:a9:03:7f:6b:d9:4d:62:18:78:76:c2:5e:
         f5:f2:b9:40:fb:b5:99:15:05:af:fc:4b:38:bb:a0:0b:57:8f:
         ee:6a:f3:d2:e3:49:98:b3:9f:8c:5b:29:72:2d:14:14:e2:f3:
         c3:ac:12:7c:3d:93:e5:87:1e:61:6e:fc:5a:3b:de:7a:82:f3:
         7b:33:e6:e5:63:37:ff:ef:a2:56:b2:9e:54:e7:01:3e:84:42:
         c2:10:2c:9f:ad:e8:92:df:51:fe:6b:27:6c:ec:32:2f:97:38:
         fc:26:9d:3d:95:3b:88:b5:73:1c:25:23:b4:34:3b:70:ec:49:
         f1:dc:74:23:a2:d6:0e:c9:6e:d0:44:4f:5c:9d:45:b3:ea:be:
         8c:8c:7c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org