Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/tCk0kYBna1I6huZd0bkk2vJ7Kr4.roa
File:                     tCk0kYBna1I6huZd0bkk2vJ7Kr4.roa (raw, json)
Hash identifier:          njGaVxRcK4sgVOaTsuk980hBNKztGlw4Roj8b9+5Jl8=
Subject key identifier:   B4:29:34:91:80:67:6B:52:3A:86:E6:5D:D1:B9:24:DA:F2:7B:2A:BE
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01B8
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/tCk0kYBna1I6huZd0bkk2vJ7Kr4.roa
Signing time:             Mon 20 Feb 2023 07:53:17 +0000
ROA not before:           Mon 20 Feb 2023 07:53:17 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.102/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:17 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=B429349180676B523A86E65DD1B924DAF27B2ABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5c:70:48:3d:01:98:05:73:fa:6f:16:ce:09:
                    61:ff:1d:56:bd:35:a5:f8:ee:4e:71:a2:17:9d:76:
                    6c:3d:2d:6f:6c:b1:10:f4:b4:81:8b:31:b8:3d:b4:
                    99:c5:99:08:1b:24:21:78:42:1e:7b:5f:cf:70:6b:
                    d1:2e:8b:82:ab:94:36:7d:81:d4:6a:b2:db:83:a4:
                    c0:e4:46:19:7c:90:49:22:86:ff:c8:25:7c:ad:22:
                    dd:b0:a2:77:bc:a2:d6:c5:bb:67:de:5f:72:70:6d:
                    54:8e:ad:d1:b0:69:5e:98:39:15:a5:b3:06:64:dc:
                    07:de:8d:77:af:31:24:d1:1a:2a:1b:b2:18:7b:ab:
                    06:d9:e5:34:c2:b7:69:3d:b4:36:3f:42:ac:23:3d:
                    d3:64:dc:76:41:1f:2d:2f:fb:44:e3:9f:53:fe:32:
                    2a:23:d3:75:69:ea:3c:b0:11:77:ac:be:40:0f:7c:
                    64:fd:87:41:aa:3b:1f:ff:a9:bc:70:4f:97:b2:51:
                    7c:12:3d:66:01:2c:a1:cd:4b:4f:01:b1:49:77:a4:
                    27:23:97:0d:b1:f8:65:b0:40:19:8c:26:24:73:21:
                    23:29:15:03:a3:51:fe:e8:db:d7:b3:6b:3e:86:32:
                    47:84:eb:ff:17:33:c5:72:bf:f6:9e:cb:ce:05:6e:
                    dc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:29:34:91:80:67:6B:52:3A:86:E6:5D:D1:B9:24:DA:F2:7B:2A:BE
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/tCk0kYBna1I6huZd0bkk2vJ7Kr4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.102/32

    Signature Algorithm: sha256WithRSAEncryption
         93:ba:86:fa:23:73:25:25:1e:aa:df:1f:93:b1:d5:c2:87:31:
         4a:14:88:37:28:c7:46:85:3b:5b:71:07:ad:58:07:e4:47:c3:
         98:cf:8b:2f:8b:08:52:0f:38:10:56:96:61:05:fb:4a:ff:72:
         f5:bd:f4:e3:4d:64:80:17:7c:22:86:42:68:75:bc:ce:92:52:
         40:3a:3f:cc:70:5f:dc:d5:5a:27:de:9e:d3:51:73:0a:ac:53:
         27:8b:6b:9e:cd:3c:4d:6b:2d:36:2e:86:08:61:e4:1c:9f:04:
         50:e7:f1:a1:7e:2c:44:65:6f:81:e2:bf:9b:19:f2:0d:3e:7a:
         68:12:14:05:73:a9:31:76:04:60:14:f4:c1:4a:d4:7b:75:5e:
         ea:31:5e:fb:c1:46:57:35:c7:c1:9d:0f:38:c8:40:d3:ea:b4:
         dd:b7:e0:c9:d6:0d:d9:b6:be:49:bb:24:fd:87:4d:92:f8:10:
         71:36:c7:1a:9a:e8:1f:54:ef:d9:f3:9d:ca:0c:7b:fe:8e:38:
         22:4e:6b:dd:f6:67:1a:1d:cb:04:49:63:75:f5:5e:9f:95:2b:
         83:e6:65:45:32:c2:a5:53:da:87:cc:a1:15:8e:c7:c4:75:de:
         cf:1e:ee:d9:58:09:c1:bb:e3:d6:68:be:86:97:18:44:ab:8e:
         a4:ee:a0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org