Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/yWalHjLM5kcJzkUW1siYXpPaHcQ.roa
File:                     yWalHjLM5kcJzkUW1siYXpPaHcQ.roa (raw, json)
Hash identifier:          z80EyslfFXIYfvccg7RmDp3+TWES64xIuOCs1gIIvWs=
Subject key identifier:   C9:66:A5:1E:32:CC:E6:47:09:CE:45:16:D6:C8:98:5E:93:DA:1D:C4
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       44
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/yWalHjLM5kcJzkUW1siYXpPaHcQ.roa
Signing time:             Fri 10 Feb 2023 07:41:22 +0000
ROA not before:           Fri 10 Feb 2023 07:41:22 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.162/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:41:22 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=C966A51E32CCE64709CE4516D6C8985E93DA1DC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a8:52:7c:8e:99:94:5d:34:78:bc:8c:46:b9:
                    ed:15:ac:e1:02:3a:6e:6b:18:4c:ce:ed:a4:0c:77:
                    36:3c:33:f1:9b:04:20:1b:5f:f3:9d:93:af:9e:fd:
                    fd:6e:e8:db:38:bf:83:bc:73:62:d8:b4:49:67:90:
                    14:74:57:a0:54:34:fd:96:06:86:91:d2:8c:ea:ab:
                    79:e8:1e:f2:fb:af:f3:74:5a:94:94:28:15:c8:1d:
                    f9:37:ad:4f:2b:f6:5c:a9:11:3f:c4:23:6a:3b:cc:
                    75:eb:96:a0:39:8b:9e:3f:9c:69:48:54:03:ef:95:
                    5d:11:c5:ab:ab:53:63:b9:39:b2:e3:b6:2e:4c:e9:
                    db:5d:0f:d0:3a:59:f7:91:93:34:18:af:63:b4:0d:
                    56:f6:9b:fa:1c:50:c6:10:1c:da:80:87:ec:09:96:
                    8b:2e:48:4f:f2:cb:22:a8:39:c5:fb:ea:0d:6a:46:
                    9b:87:b1:16:a0:60:be:05:28:db:07:71:18:3a:dc:
                    19:33:14:5c:64:8e:20:bb:e6:2e:ff:36:d0:ed:33:
                    0e:88:d1:d6:b2:be:14:93:50:cc:d0:52:e6:81:38:
                    26:05:77:7c:6b:c2:ec:0d:f3:c9:8f:c8:2b:4f:a5:
                    4d:0c:95:9b:9e:4a:3e:11:2d:36:74:d6:2a:be:d9:
                    4d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:66:A5:1E:32:CC:E6:47:09:CE:45:16:D6:C8:98:5E:93:DA:1D:C4
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/yWalHjLM5kcJzkUW1siYXpPaHcQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.162/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:61:b3:89:ef:83:f4:53:48:91:23:6d:8c:60:ab:e4:64:f7:
         d0:3e:78:1a:24:42:b0:9b:23:19:b2:a8:70:28:43:15:0a:9d:
         e8:1a:6d:f9:21:2b:84:51:c9:84:78:da:dd:cf:c0:b0:fd:0d:
         bd:79:ae:01:e4:41:32:d9:a0:d2:f2:9d:2d:81:e7:2c:7d:4b:
         ea:8f:4d:55:b0:b4:8a:2d:b0:76:98:27:7f:66:4b:76:cc:b3:
         ce:10:28:ca:cb:9f:78:b4:25:d7:f5:08:f2:17:18:95:f8:48:
         1d:75:0d:b5:cd:2b:ab:6f:e9:6e:05:0b:5e:a1:40:e3:9c:3c:
         9e:e2:89:0c:42:f1:23:f5:69:52:94:da:42:dc:41:18:7d:32:
         e5:3d:19:05:1e:b2:e2:41:fe:47:d8:8d:21:78:b9:cb:1b:7e:
         24:2a:79:6f:5a:a0:0f:16:d0:c3:1c:d8:e0:92:4c:1a:48:b5:
         a8:cb:bd:a4:ce:eb:df:50:8f:80:6a:5d:d6:ed:02:f9:a1:2f:
         dd:ad:16:a5:eb:a8:26:8e:ce:f9:23:85:ea:65:eb:26:c7:5f:
         b6:ee:00:a5:d9:60:3d:a6:d6:7f:8c:4e:7b:62:a4:5b:56:5f:
         00:9b:48:58:ce:e1:d3:7c:38:01:47:5f:9f:59:fd:3f:b1:b4:
         72:ea:6c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org