Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/xk2D4rbJLh1EwHFJqN5JHS_qhGg.roa
File:                     xk2D4rbJLh1EwHFJqN5JHS_qhGg.roa (raw, json)
Hash identifier:          R+4TEW4yw1opi6t/BWCtfmxr+W9B4xJKSY0wH2msgco=
Subject key identifier:   C6:4D:83:E2:B6:C9:2E:1D:44:C0:71:49:A8:DE:49:1D:2F:EA:84:68
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0198
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/xk2D4rbJLh1EwHFJqN5JHS_qhGg.roa
Signing time:             Mon 20 Feb 2023 07:50:59 +0000
ROA not before:           Mon 20 Feb 2023 07:50:59 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.113/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:50:59 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=C64D83E2B6C92E1D44C07149A8DE491D2FEA8468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ed:44:22:68:20:bc:a0:0b:15:e7:c8:80:c2:
                    67:72:f4:fa:3f:42:62:96:66:de:1d:74:ca:0a:ae:
                    12:01:28:0b:cd:17:8f:30:e2:0a:12:a9:4e:00:66:
                    a1:77:e5:fe:f8:89:c3:5a:5c:fc:73:08:3b:63:cb:
                    4b:ad:c1:60:dd:f3:ac:c1:87:c7:90:72:f6:29:b4:
                    92:cb:23:1a:f0:f0:a8:a0:43:d6:37:f2:d4:a5:41:
                    b4:4c:55:c3:55:cb:55:ac:30:f8:b9:74:97:7f:a4:
                    00:bf:eb:bf:92:05:a9:43:97:aa:ec:20:91:8e:67:
                    46:06:ba:94:3c:4c:63:19:86:9a:a3:1f:76:2d:6c:
                    c8:b9:f4:e6:1c:64:5b:ec:92:0b:6a:31:0f:e8:f2:
                    33:25:6f:4f:e5:87:0b:18:2a:34:e9:94:16:b5:b2:
                    9e:dd:0f:ab:40:d8:c3:17:ed:71:08:44:fa:86:1d:
                    d6:27:40:7e:c8:2e:27:c0:66:47:50:cd:28:b2:4d:
                    50:7e:4d:39:23:49:48:dd:11:76:01:e3:64:22:82:
                    ed:4d:bc:6b:08:7e:5c:e2:e4:a3:da:78:76:27:9a:
                    66:0c:02:57:3d:b5:3e:34:15:c6:d3:4a:9e:72:20:
                    cf:ae:94:b0:90:19:a0:c1:d4:66:58:dd:e1:94:12:
                    42:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4D:83:E2:B6:C9:2E:1D:44:C0:71:49:A8:DE:49:1D:2F:EA:84:68
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/xk2D4rbJLh1EwHFJqN5JHS_qhGg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.113/32

    Signature Algorithm: sha256WithRSAEncryption
         95:91:a6:ea:bd:30:94:de:4d:ce:fe:7d:10:38:99:d3:cc:6c:
         cf:1b:0a:74:34:a0:07:e9:8b:5c:83:1d:c3:53:aa:9a:4c:67:
         01:5e:11:3c:5d:88:05:7d:71:5f:b8:cc:6f:a3:f6:a2:0b:80:
         84:b6:88:c0:2b:11:a0:56:61:08:81:be:58:18:49:05:e1:9c:
         b2:f4:9f:9a:2a:d3:be:9b:26:4b:bd:28:64:74:9d:fc:c9:0c:
         2d:61:bb:90:68:29:9d:c7:40:e4:6d:e8:7c:38:c3:ae:92:76:
         af:c7:47:98:2c:f4:0d:65:8d:4a:fb:74:41:a1:ce:90:90:11:
         b0:b1:db:08:c9:ad:cf:3c:47:bc:22:b1:67:f6:30:59:56:a5:
         68:69:8b:e7:44:f9:2d:56:52:f8:d3:e2:9a:50:db:12:47:b2:
         47:1f:99:bb:5e:bb:a4:84:61:8c:c2:80:da:80:50:d0:92:8d:
         e2:bb:f8:c3:35:db:ce:07:62:dd:56:10:ca:e3:49:15:61:5b:
         0c:21:50:79:fa:d3:ad:bd:1b:f4:a6:91:a2:f5:af:44:61:17:
         47:86:f4:43:68:fd:c7:56:36:6d:84:f1:9c:55:dd:14:f0:9c:
         c1:9e:1a:f9:22:e5:07:db:8b:78:ca:e9:25:c2:bf:6d:5d:d8:
         17:9f:a5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org