Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/wavktiNFRaeWcPTty-cyWAzbaKg.roa
File:                     wavktiNFRaeWcPTty-cyWAzbaKg.roa (raw, json)
Hash identifier:          l2SvAJ3vJcf9+frwJhG+lki/O424a7+x8Y0UPWSYsLE=
Subject key identifier:   C1:AB:E4:B6:23:45:45:A7:96:70:F4:ED:CB:E7:32:58:0C:DB:68:A8
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       025A
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/wavktiNFRaeWcPTty-cyWAzbaKg.roa
Signing time:             Mon 20 Feb 2023 08:01:34 +0000
ROA not before:           Mon 20 Feb 2023 08:01:34 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.131/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:01:34 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=C1ABE4B6234545A79670F4EDCBE732580CDB68A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d5:44:6c:5f:be:b4:c4:f6:b9:cd:86:a3:f3:
                    65:23:55:d2:1e:7f:11:15:23:82:66:d0:9b:01:3a:
                    ef:89:cd:84:3a:ce:62:96:89:25:f2:ad:d8:85:55:
                    9e:75:cb:fa:50:e9:44:22:75:88:4c:86:83:eb:ff:
                    35:80:39:ad:11:2e:58:4c:f7:3b:7b:45:c0:08:fe:
                    7f:e3:16:09:49:3f:73:3b:9c:cb:c9:a9:4b:79:29:
                    0a:fc:56:0c:c5:fc:3d:de:93:84:7a:90:42:2b:e8:
                    d0:04:a0:39:b9:5c:76:20:88:67:0c:07:64:4d:88:
                    4a:18:1a:18:cc:7a:28:97:61:2c:a8:23:97:1b:3f:
                    66:93:7e:6c:e8:73:a2:cf:f7:31:e7:bd:05:de:61:
                    8c:e4:c8:19:71:5e:f9:32:3b:d3:88:4b:10:8d:5c:
                    12:5d:fd:bb:8d:69:94:95:c5:9f:44:62:9f:ed:f7:
                    5f:41:30:f9:ab:2a:09:37:61:82:d8:52:d0:dc:b4:
                    d0:b1:2e:9d:0f:cb:05:a1:5a:91:47:d0:c1:af:98:
                    58:d0:d1:40:90:c7:30:5f:a9:af:10:f5:5f:c1:0e:
                    7c:21:f7:79:eb:63:5f:77:db:f3:fd:c1:3b:47:94:
                    20:f0:11:ab:af:5e:aa:53:2e:8f:6b:62:7c:eb:b0:
                    f1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AB:E4:B6:23:45:45:A7:96:70:F4:ED:CB:E7:32:58:0C:DB:68:A8
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/wavktiNFRaeWcPTty-cyWAzbaKg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.131/32

    Signature Algorithm: sha256WithRSAEncryption
         64:2e:b5:3d:6d:fa:a0:e8:9e:48:bd:db:e4:77:66:a3:63:00:
         74:fe:97:ff:65:82:70:66:8f:be:ac:b3:3b:73:b1:9e:c0:a3:
         9c:76:4d:ad:2d:2a:3f:82:ab:c9:a0:de:8c:2a:53:c1:cb:12:
         88:de:fc:12:92:77:1c:39:5f:ed:8d:42:be:5e:49:d8:20:46:
         3f:dc:09:02:29:b9:55:13:6e:ec:67:a3:40:76:8c:d0:81:85:
         3e:aa:0f:62:bd:34:e0:d6:cc:a2:fd:84:17:dd:05:19:4d:44:
         19:41:dd:0f:ea:fb:20:51:36:f7:31:2f:79:d8:d8:d8:39:13:
         78:8c:cc:39:45:6f:e5:96:b9:20:e8:70:2b:ef:5a:9b:cc:31:
         2b:80:3b:a1:df:c0:bc:bd:35:88:fe:cc:42:c9:15:64:e8:15:
         95:38:1d:c7:02:05:29:40:55:e0:32:43:b0:96:f0:40:f4:c8:
         7d:ce:e6:ad:63:02:7c:ea:43:d0:78:a9:91:34:bf:af:cc:28:
         77:79:5f:13:09:b8:2e:08:05:4a:a9:fb:0a:36:b3:38:99:2b:
         0c:00:9e:97:61:a7:06:82:dc:13:bd:17:f9:15:b0:da:08:c3:
         4b:99:b5:9d:64:84:db:ad:2f:14:b8:4a:5d:ca:1d:b6:44:f1:
         a8:a9:76:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org