Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/venUpkXNWZC_7ke1efi2UHubiFg.roa
File:                     venUpkXNWZC_7ke1efi2UHubiFg.roa (raw, json)
Hash identifier:          M8EC8LUATMRGiKo4nt23lC2U5so2ggsupdlsWQ2xZK4=
Subject key identifier:   BD:E9:D4:A6:45:CD:59:90:BF:EE:47:B5:79:F8:B6:50:7B:9B:88:58
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       94
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/venUpkXNWZC_7ke1efi2UHubiFg.roa
Signing time:             Fri 10 Feb 2023 07:45:39 +0000
ROA not before:           Fri 10 Feb 2023 07:45:39 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.93/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:45:39 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=BDE9D4A645CD5990BFEE47B579F8B6507B9B8858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3f:37:3a:17:be:e6:ec:70:5d:f4:9a:01:70:
                    09:a7:4d:8c:a9:4b:84:d4:17:ae:9c:05:a7:4c:d5:
                    83:1b:9c:78:9e:43:7f:5f:5d:32:41:5f:10:94:13:
                    56:1a:b2:cc:b3:b3:90:b0:c6:65:69:b6:0d:45:86:
                    9d:51:97:fe:2f:d3:ab:21:57:20:f8:9d:1e:5e:f8:
                    c9:cd:d1:6f:6e:74:b2:16:37:32:8d:df:7f:d3:ac:
                    5b:6e:2a:63:3c:ea:55:5b:48:f2:af:da:4b:62:80:
                    98:43:8c:38:7e:f3:a3:24:8d:3e:fa:09:72:c9:67:
                    2c:b5:fd:6f:db:f9:c5:10:8e:59:3b:ef:4a:37:d3:
                    52:de:39:37:e9:ea:56:42:b5:4a:19:8a:e5:e5:d1:
                    cf:b1:22:50:9d:d3:df:2b:5f:0c:37:f7:52:d0:9a:
                    8d:94:0a:f9:50:4a:77:9f:c5:4c:73:51:3b:ca:7b:
                    84:56:2f:c6:30:45:77:71:99:70:18:f9:6f:3d:96:
                    c2:c0:11:a2:47:52:1c:65:95:47:4e:c4:6f:58:f2:
                    b2:bf:b0:cd:2f:55:86:11:25:78:bd:e5:67:08:ea:
                    e7:2e:13:1f:6b:7c:53:9b:96:63:57:7f:19:e3:d2:
                    c3:6a:c4:3c:c9:04:46:96:21:02:6f:5b:9f:ca:a1:
                    fb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E9:D4:A6:45:CD:59:90:BF:EE:47:B5:79:F8:B6:50:7B:9B:88:58
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/venUpkXNWZC_7ke1efi2UHubiFg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.93/32

    Signature Algorithm: sha256WithRSAEncryption
         09:59:69:3d:15:a4:bb:df:d2:48:c3:c7:a4:55:55:8b:68:50:
         81:56:71:65:6c:5f:ae:2c:56:ed:97:64:b4:02:be:0f:bb:03:
         9e:b1:d8:da:06:40:cd:17:75:d6:eb:0b:df:a1:96:a6:b6:ed:
         62:cb:b0:d6:26:c0:dd:f4:71:c8:48:90:39:a8:a6:d5:5e:05:
         ea:b6:62:25:aa:52:39:96:77:d8:3b:3d:a3:13:ac:0c:64:b4:
         b1:4c:82:17:9e:70:60:42:b3:ff:10:34:90:4b:1a:be:72:61:
         85:5f:82:8d:2a:8c:d5:5d:bc:b4:21:38:a9:76:8d:9e:3e:0e:
         98:bf:55:2f:ab:d7:f1:f7:2d:24:a8:af:41:eb:c5:33:58:23:
         f1:27:c9:a9:c4:0f:7e:24:94:f1:35:d8:f8:09:b4:0f:bd:77:
         ec:77:a8:29:8e:37:74:21:42:81:c2:25:bc:d5:f1:18:44:cf:
         7c:9e:95:96:c5:a3:9e:7c:a2:68:bc:42:ae:cc:37:9f:5e:0e:
         82:42:57:d9:ab:84:0e:39:a6:11:1e:26:c0:2d:2e:1f:fc:d3:
         cc:e6:c4:82:19:9c:88:93:46:a3:05:5c:e0:5c:74:cb:e9:bb:
         69:b9:da:f9:e9:0b:e9:0a:3a:0c:fb:7e:d2:b9:d6:d0:5b:a4:
         76:4d:4f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org