Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/u96t4yDkKWFj5dadsgxPHg0Az90.roa
File:                     u96t4yDkKWFj5dadsgxPHg0Az90.roa (raw, json)
Hash identifier:          Jfa7upS8fqCwJiGN9AHyTUwVpVj+3b5ixkAlFyB30G8=
Subject key identifier:   BB:DE:AD:E3:20:E4:29:61:63:E5:D6:9D:B2:0C:4F:1E:0D:00:CF:DD
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       027A
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/u96t4yDkKWFj5dadsgxPHg0Az90.roa
Signing time:             Mon 20 Feb 2023 08:03:33 +0000
ROA not before:           Mon 20 Feb 2023 08:03:33 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.7/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:03:33 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=BBDEADE320E4296163E5D69DB20C4F1E0D00CFDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:05:9c:41:4e:4c:5b:eb:45:74:af:a0:e8:cb:
                    a1:ef:5b:ed:0f:f5:de:0e:45:f1:f4:e5:3c:c8:42:
                    69:fa:a7:e0:81:d2:05:fb:05:50:a4:62:69:d2:26:
                    0b:70:c6:08:ad:cd:77:f6:96:8c:61:af:fe:45:af:
                    f5:d1:73:a8:ce:d7:88:ff:3c:0b:f4:20:5b:6d:97:
                    36:10:96:95:ae:05:c9:e5:e4:4e:71:83:6b:8a:31:
                    4c:17:38:c4:83:61:0d:93:bc:f9:80:7a:69:c8:1d:
                    4e:e5:68:8b:19:87:63:f0:16:a4:8b:9f:53:fa:e2:
                    9d:be:2f:7d:8a:d1:20:8c:8a:ef:0a:61:5f:0c:ab:
                    c1:ad:ae:6a:da:0a:f7:f9:72:05:11:a1:79:ca:3e:
                    5f:08:94:f4:fa:a1:be:55:32:36:42:c8:fb:9a:65:
                    2e:12:57:e9:d2:a1:b1:2f:c8:04:d8:8d:4a:99:14:
                    13:65:3a:b3:9f:86:ad:ff:31:6f:88:d7:bc:b8:c6:
                    9b:bd:69:9b:aa:6d:2b:4b:25:bb:fa:d3:c6:9e:3e:
                    4b:d4:29:2d:28:c1:9f:61:8e:2f:0e:84:3e:5e:67:
                    63:79:56:5e:94:c4:c9:a8:dd:37:53:f7:46:b7:f0:
                    87:33:66:3a:63:c6:2d:ba:b8:5a:6a:bc:61:4d:3c:
                    19:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DE:AD:E3:20:E4:29:61:63:E5:D6:9D:B2:0C:4F:1E:0D:00:CF:DD
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/u96t4yDkKWFj5dadsgxPHg0Az90.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.7/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:65:b4:8a:f8:09:11:dd:b4:3b:d6:c9:54:23:eb:d3:14:7b:
         24:b1:4d:a8:fc:de:ff:3b:7b:59:18:db:40:03:fa:46:21:28:
         b6:8c:bc:50:79:22:17:3d:ae:fa:20:4d:30:de:64:4a:21:a0:
         a2:de:f4:51:a8:cd:b1:bd:46:75:64:84:53:10:88:01:84:8e:
         80:de:2a:0a:f5:0d:84:a9:34:7a:9c:1c:21:35:a5:52:3d:05:
         11:b7:ef:08:8d:75:3d:52:ff:fe:ff:64:c5:9f:c0:8d:c7:de:
         e0:78:3a:d6:f4:45:62:89:1e:ef:0f:e3:7d:ad:50:2b:45:a3:
         e2:0c:81:36:f7:6b:e0:e4:50:93:ed:c7:62:67:3c:41:01:e5:
         e5:c5:87:ee:7a:11:7c:ef:5c:ae:eb:43:ad:23:5d:c9:91:8c:
         18:52:1e:53:e4:7f:71:52:9b:ed:4b:28:bf:67:d2:0d:31:3a:
         0b:77:54:ff:9f:5e:76:e4:d3:1c:f4:73:7b:6f:4a:c4:43:d2:
         42:15:05:93:8f:3f:d9:86:fa:ca:e6:27:bc:fc:88:e0:78:03:
         62:7a:91:e1:d0:00:4b:8a:ab:3e:1d:38:4c:7a:77:82:2c:98:
         0d:38:79:5c:e3:f9:1f:26:39:c4:99:9b:08:6d:42:16:83:99:
         22:c7:73:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org