Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/tjkxuwMZ3qr1x4zWOA2yIb7Mvgc.roa
File:                     tjkxuwMZ3qr1x4zWOA2yIb7Mvgc.roa (raw, json)
Hash identifier:          WAXtecJelU4zQwMWShMSqW9pMTllkWkgquA0FdWyvgc=
Subject key identifier:   B6:39:31:BB:03:19:DE:AA:F5:C7:8C:D6:38:0D:B2:21:BE:CC:BE:07
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       29
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/tjkxuwMZ3qr1x4zWOA2yIb7Mvgc.roa
Signing time:             Fri 10 Feb 2023 07:39:07 +0000
ROA not before:           Fri 10 Feb 2023 07:39:07 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.102/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:39:07 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=B63931BB0319DEAAF5C78CD6380DB221BECCBE07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:39:1b:a4:83:49:4d:09:79:b0:1c:80:be:5f:
                    75:65:da:01:b6:b9:3b:00:cf:c1:2c:5d:6c:3e:92:
                    19:47:49:7b:e2:56:84:f7:a2:34:f0:d3:95:fc:13:
                    3c:62:e7:fd:48:c4:26:d1:34:dd:26:f0:61:97:82:
                    ad:3e:25:77:7c:a6:e7:8b:fd:78:71:13:b6:c9:6a:
                    64:32:07:9a:95:6e:6d:d4:2e:73:0b:69:80:dc:71:
                    6f:8a:f5:2a:4e:96:cd:d8:cc:1b:06:c4:6d:c7:50:
                    8c:fc:23:a8:6f:34:75:10:9e:1d:af:9e:d5:35:c5:
                    c6:16:ae:89:a6:0c:4b:fd:83:cb:a5:14:bf:fe:9c:
                    fc:1b:87:88:b6:88:f8:03:af:3a:77:e9:72:51:80:
                    11:e0:49:60:20:fb:9c:94:12:c9:56:39:ca:e1:37:
                    2d:fb:78:1c:3c:9f:da:dd:50:96:ee:72:ba:97:81:
                    84:2a:91:33:17:7e:92:95:65:24:75:1c:1c:0b:a7:
                    9c:42:26:82:ee:ff:53:d6:86:f9:f5:24:33:c1:42:
                    94:12:12:df:d5:70:4d:11:ce:95:a0:ce:12:91:d4:
                    ff:62:ad:0f:6b:74:de:3c:cb:b5:d1:40:bb:9e:62:
                    0a:f4:ca:2e:d8:36:dd:8e:a1:3e:09:2f:c1:e9:fc:
                    ee:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:39:31:BB:03:19:DE:AA:F5:C7:8C:D6:38:0D:B2:21:BE:CC:BE:07
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/tjkxuwMZ3qr1x4zWOA2yIb7Mvgc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.102/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:56:9f:0e:65:98:2e:06:af:ae:95:4b:19:0a:84:27:23:15:
         d2:b0:f1:13:de:64:7c:a9:4b:5f:a0:cd:db:f4:0b:7f:fe:af:
         e6:88:82:20:db:46:a4:c9:81:78:6f:e1:d7:6a:56:90:7d:42:
         76:6c:ef:e6:05:c5:5b:77:a1:a0:a3:72:5d:0a:03:e6:dd:a8:
         92:7a:57:f0:9e:88:7e:ab:da:30:14:3c:de:e6:b1:0d:46:1e:
         47:3b:9b:18:99:3c:66:7c:11:eb:44:62:87:0b:6c:4d:5d:04:
         b8:f8:4f:7c:dd:b0:44:a8:47:de:a1:48:15:96:38:af:f2:77:
         e2:f2:25:03:8a:b0:35:d7:b1:ec:4d:09:06:04:ec:74:8f:ed:
         c8:5f:bd:f9:46:a8:67:01:ca:0c:a2:64:79:0f:bf:2e:59:cb:
         f5:ef:23:5e:b2:db:eb:96:d2:53:d8:37:1c:b4:fd:f4:88:1b:
         a8:1a:46:c3:36:ff:71:40:8b:ca:30:57:0f:6f:38:8a:a9:9d:
         25:fe:32:c8:cf:36:6e:ef:ad:f6:7f:16:99:a4:ae:29:3e:00:
         a5:71:c5:d4:83:5e:af:b2:aa:46:ff:8d:41:20:ab:d1:7d:86:
         8e:80:cb:44:df:d0:0c:05:17:36:bc:16:db:14:35:2f:9c:5a:
         e3:40:7b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org