Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/xTTTeCPgE--zoJJEkO7NOkoat2E.roa
File:                     xTTTeCPgE--zoJJEkO7NOkoat2E.roa (raw, json)
Hash identifier:          pLDU+yiXJ0mdFwyP6RI2I6uKbR9mOkxfL0cAIExSz4M=
Subject key identifier:   C5:34:D3:78:23:E0:13:EF:B3:A0:92:44:90:EE:CD:3A:4A:1A:B7:61
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02B1
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/xTTTeCPgE--zoJJEkO7NOkoat2E.roa
Signing time:             Mon 20 Feb 2023 08:05:36 +0000
ROA not before:           Mon 20 Feb 2023 08:05:36 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.190/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 689 (0x2b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:36 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=C534D37823E013EFB3A0924490EECD3A4A1AB761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:a8:69:92:a1:8d:e6:82:d9:a5:1c:77:70:
                    8c:97:bd:3e:0b:f1:74:68:2b:f5:85:71:86:30:f7:
                    2b:85:e1:71:84:08:96:43:c3:f8:27:c3:12:91:a9:
                    98:2b:b7:a2:e8:95:95:49:3b:f7:f0:17:ce:13:ef:
                    e2:57:ba:93:1a:bd:4c:cd:54:f8:d8:bd:43:29:0b:
                    ea:09:59:08:78:1f:5f:61:69:dd:2e:96:c9:f3:ea:
                    cd:8c:b0:e1:ef:e4:32:35:ea:84:5c:e5:5a:9c:84:
                    ce:d1:c7:fe:12:f9:d6:5d:f3:0c:32:0b:56:a0:b9:
                    a9:c7:82:15:79:1e:45:bf:b2:66:29:2e:c9:44:be:
                    6b:93:37:e0:32:1f:d8:e7:50:2c:d6:11:11:6d:3d:
                    80:7f:a9:22:07:74:dd:3b:ef:ff:b7:57:75:64:2d:
                    df:54:b6:e0:bc:10:62:f3:72:8d:04:aa:3d:0a:fd:
                    28:c5:c2:02:37:78:16:a4:10:e8:46:2f:97:b7:a2:
                    b7:7b:06:ff:29:89:54:4d:14:91:e9:a6:a4:56:62:
                    6a:46:da:f4:dd:44:e3:9b:c8:89:bc:9d:45:c6:2d:
                    95:7d:b4:84:06:58:15:09:5b:ae:ab:e5:94:b0:e2:
                    e2:63:4d:55:ca:35:6f:84:a3:dd:01:39:0f:05:af:
                    27:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:34:D3:78:23:E0:13:EF:B3:A0:92:44:90:EE:CD:3A:4A:1A:B7:61
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/xTTTeCPgE--zoJJEkO7NOkoat2E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.190/32

    Signature Algorithm: sha256WithRSAEncryption
         53:00:a5:61:4b:1f:ee:40:73:ab:be:ae:e1:17:99:a3:88:29:
         71:cf:44:30:1c:91:06:e3:70:39:18:40:d6:da:63:f9:87:7d:
         44:f4:06:ef:39:a2:5c:cf:53:f1:65:ce:3f:db:3f:75:ec:f6:
         24:93:21:51:46:0b:25:b0:a1:53:88:56:b3:9b:9a:d8:dc:59:
         fc:d5:10:32:75:02:7c:47:e9:0f:b7:be:61:a8:88:a9:33:02:
         12:f7:b1:91:78:d7:1a:a8:1f:be:69:ad:14:f0:2c:33:f3:80:
         ed:14:a1:53:c0:06:f4:83:9a:df:25:ec:01:43:b8:c0:84:97:
         ea:09:8d:cb:25:9f:e6:62:c7:c1:af:87:8d:6e:46:e3:8a:62:
         3c:21:91:0b:a7:b6:20:cb:6d:d3:05:2f:74:4e:d4:35:9e:fa:
         44:ee:ab:00:d8:17:82:50:3a:cc:c2:02:c1:7a:1e:43:4d:8d:
         d3:7d:21:a2:62:01:5e:a6:e0:f5:07:71:e7:aa:c1:ec:56:ad:
         c4:f4:65:0e:25:65:48:d7:94:06:95:9b:2f:c8:d0:f4:00:4a:
         b0:80:e7:8a:8c:7f:a1:48:e0:5c:7d:48:cd:ba:6f:1b:e4:cc:
         c6:d6:d1:a3:e4:e1:b1:56:ac:49:63:ac:a0:b7:0d:b1:2f:31:
         69:e6:e9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org