Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/zWGf9iIUC1TKcFsZh5-bEue41rM.roa
File:                     zWGf9iIUC1TKcFsZh5-bEue41rM.roa (raw, json)
Hash identifier:          svImVJ7JTIK2Yq/uHJur7Ad97NM81DaNcNpHhwpUdPE=
Subject key identifier:   CD:61:9F:F6:22:14:0B:54:CA:70:5B:19:87:9F:9B:12:E7:B8:D6:B3
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02C7
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/zWGf9iIUC1TKcFsZh5-bEue41rM.roa
Signing time:             Mon 20 Feb 2023 08:07:26 +0000
ROA not before:           Mon 20 Feb 2023 08:07:26 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.74/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 711 (0x2c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:07:26 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=CD619FF622140B54CA705B19879F9B12E7B8D6B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b8:ac:d2:79:85:73:c1:65:a2:da:53:ab:f3:
                    f0:d5:4c:98:73:7f:94:0e:5f:48:72:30:cf:66:e6:
                    e2:1c:ce:4e:fa:16:9e:df:50:22:ae:7b:ed:6f:b4:
                    7d:37:af:42:f2:1f:71:16:c6:ed:68:9b:7c:20:dc:
                    51:ac:ab:12:55:00:2c:e8:1f:78:82:f8:f0:80:92:
                    52:c7:f3:e6:4e:31:ab:77:ab:70:74:35:bb:3c:81:
                    9e:0b:24:70:86:34:e1:ee:81:16:6b:c2:48:54:0f:
                    9b:f8:99:a0:74:d8:2f:3c:e9:e8:6c:bf:55:93:72:
                    62:14:90:bf:dc:2e:b0:e5:57:2d:f3:32:d9:45:b9:
                    5e:42:74:56:64:fc:f4:61:27:3b:6a:a8:2b:5b:b8:
                    ab:12:50:cf:4f:ab:59:77:d0:10:e7:81:b9:82:11:
                    0f:06:a3:0d:87:72:2a:10:15:42:b9:bc:3d:b8:f1:
                    e3:a9:cd:33:be:da:1c:3b:5a:57:f2:13:ff:c7:a4:
                    71:c6:64:31:5f:7b:32:f7:7d:ee:b0:d1:a5:62:1c:
                    19:66:d6:4d:a6:19:b5:3f:7e:01:71:47:9e:f1:e0:
                    4d:f4:33:cb:1b:8f:1b:d2:21:2d:c1:0d:68:d6:73:
                    bb:3c:c4:7b:05:25:e4:f8:31:52:de:7f:3f:c7:8f:
                    3d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:61:9F:F6:22:14:0B:54:CA:70:5B:19:87:9F:9B:12:E7:B8:D6:B3
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/zWGf9iIUC1TKcFsZh5-bEue41rM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.74/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:f8:3f:6f:26:d6:c6:3f:1e:5d:84:60:30:df:b7:51:ef:8c:
         e7:ab:bb:4f:d3:59:a8:e8:2d:c2:20:e1:96:a1:36:a8:8a:5f:
         27:3d:e1:f5:e7:52:6b:bf:9d:dd:92:6f:67:43:2c:a2:43:24:
         d9:f9:be:46:86:f3:05:2f:b9:08:59:72:1f:a0:e9:47:7b:70:
         b0:bc:cf:eb:82:48:1e:43:13:82:f4:e1:72:7c:d3:40:48:5c:
         be:8a:0a:ab:cd:ee:f0:20:67:61:be:f5:3c:bf:8e:03:54:dd:
         78:cb:7d:58:3e:ef:0a:55:e4:b6:94:5b:a2:2f:08:c0:28:b2:
         27:02:b8:d8:87:7d:8e:90:a0:67:42:06:19:e0:16:71:ba:7a:
         63:f3:b3:6d:b0:29:eb:66:8a:04:d4:c1:cd:e9:f3:b9:96:f9:
         b4:47:bb:14:fc:d8:19:02:71:b6:0d:60:40:4e:3e:04:9d:b8:
         0d:59:82:85:6e:cb:bd:ac:2e:f3:5f:91:6d:45:cb:4e:cb:86:
         9e:0d:4e:1e:a1:f2:4b:59:fd:ad:d5:d4:c0:e3:70:25:9e:a1:
         07:c3:15:95:1c:b1:d5:a4:db:fb:c9:cf:d8:38:00:99:c4:40:
         aa:6d:6b:e0:c6:22:c0:0b:b9:66:4c:bb:76:4a:9a:a1:b7:62:
         97:8f:16:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org