Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/06A-479PA60biCoicLW0miA7rlc.roa
File:                     06A-479PA60biCoicLW0miA7rlc.roa (raw, json)
Hash identifier:          IVi4b6DF0f7SATlOgwmvtoDVqpzVAQ5hbYKR+sUWq3o=
Subject key identifier:   D3:A0:3E:E3:BF:4F:03:AD:1B:88:2A:22:70:B5:B4:9A:20:3B:AE:57
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       029B
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/06A-479PA60biCoicLW0miA7rlc.roa
Signing time:             Mon 20 Feb 2023 08:05:27 +0000
ROA not before:           Mon 20 Feb 2023 08:05:27 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.159/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 667 (0x29b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:27 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=D3A03EE3BF4F03AD1B882A2270B5B49A203BAE57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fe:da:73:c8:63:46:1a:68:cd:76:61:d7:b8:
                    c2:cd:e7:bd:88:47:19:ae:34:af:fd:34:26:25:7a:
                    30:a3:19:04:5f:fc:89:9a:bc:3a:01:a0:f5:64:b0:
                    88:1d:96:03:18:f1:eb:ea:a3:d8:5f:86:cc:5d:27:
                    00:97:e0:d1:79:e7:75:d3:52:55:ac:5e:3e:bf:ba:
                    2d:1c:06:9f:2f:13:4e:6a:ae:b5:cc:7c:56:5d:8e:
                    92:09:fd:8c:b1:f0:cf:0a:a8:4f:01:48:78:90:a1:
                    76:bf:72:73:76:49:b2:c3:e1:6f:5a:41:ef:3f:92:
                    4f:c0:61:d8:52:fd:c4:69:2b:2d:2a:1a:f7:f0:5e:
                    00:5b:73:79:d2:b4:bc:01:35:61:71:9c:c7:3c:78:
                    48:3a:c1:08:40:c9:97:77:f6:e1:4a:9c:b7:e2:66:
                    06:53:e9:a0:74:45:4a:62:6c:0f:81:0e:47:a1:2d:
                    b1:c9:e8:7e:6c:33:cf:b2:28:f3:cd:fd:ed:49:62:
                    d3:ab:47:d7:d8:1d:1b:6d:b1:4d:17:e1:0a:93:f2:
                    9d:84:5d:cb:68:c4:4a:a7:05:22:03:57:75:f9:e7:
                    23:4f:f0:d3:4f:ad:49:5f:ef:39:62:88:d6:c9:82:
                    9d:ac:4d:51:a9:de:71:5b:f4:ac:27:a2:f2:89:2c:
                    0f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A0:3E:E3:BF:4F:03:AD:1B:88:2A:22:70:B5:B4:9A:20:3B:AE:57
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/06A-479PA60biCoicLW0miA7rlc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.159/32

    Signature Algorithm: sha256WithRSAEncryption
         49:38:65:ed:7c:fb:48:30:6f:7a:ac:ab:1e:37:f7:ca:58:59:
         8f:f1:5c:cd:d6:12:c0:0e:ef:e9:d0:e2:6f:b8:93:5b:8a:0d:
         46:62:98:e9:73:f8:dc:66:a1:69:af:0e:da:db:fc:2d:16:83:
         5d:4a:c8:e3:1f:b0:c2:54:fb:45:cc:d5:fe:93:c7:14:9b:85:
         ee:38:7f:1f:34:17:d5:ff:50:73:04:55:29:09:fb:f0:35:6e:
         17:24:ff:ab:5f:e9:6a:77:f4:0e:98:dd:86:82:4e:4a:d7:18:
         6c:6b:7c:6b:26:91:6c:66:ea:38:ea:8b:60:d3:15:d2:2b:3c:
         9b:61:f4:47:fe:d4:15:e2:d8:b4:19:5a:f6:d0:da:1a:f5:e7:
         a9:b8:dd:73:f2:85:01:05:e1:8a:31:dd:4a:48:82:c5:f3:5a:
         a8:b3:09:2d:13:45:17:59:90:9a:40:98:2a:95:06:b1:77:6f:
         07:30:b9:63:6c:1e:b8:77:37:49:45:97:c8:eb:37:c3:a6:06:
         61:cf:77:ae:32:8f:28:f1:57:29:89:0c:3b:97:58:e6:66:a8:
         52:12:92:e1:f9:36:14:f3:38:d3:dd:08:3b:cb:b6:31:56:c5:
         c0:d1:a3:a4:c4:c4:a6:8a:29:29:82:6e:83:be:5d:a0:f8:a7:
         80:f4:bf:64
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICApswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODA1MjdaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEQzQTAzRUUzQkY0RjAz
QUQxQjg4MkEyMjcwQjVCNDlBMjAzQkFFNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDq/tpzyGNGGmjNdmHXuMLN572IRxmuNK/9NCYlejCjGQRf/Ima
vDoBoPVksIgdlgMY8evqo9hfhsxdJwCX4NF553XTUlWsXj6/ui0cBp8vE05qrrXM
fFZdjpIJ/Yyx8M8KqE8BSHiQoXa/cnN2SbLD4W9aQe8/kk/AYdhS/cRpKy0qGvfw
XgBbc3nStLwBNWFxnMc8eEg6wQhAyZd39uFKnLfiZgZT6aB0RUpibA+BDkehLbHJ
6H5sM8+yKPPN/e1JYtOrR9fYHRttsU0X4QqT8p2EXctoxEqnBSIDV3X55yNP8NNP
rUlf7zliiNbJgp2sTVGp3nFb9KwnovKJLA8zAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQU06A+479PA60biCoicLW0miA7rlcwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My8wNkEtNDc5UEE2MGJpQ29pY0xXMG1pQTdybGMu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxcnzANBgkqhkiG9w0BAQsFAAOCAQEASThl7Xz7SDBveqyrHjf3
ylhZj/FczdYSwA7v6dDib7iTW4oNRmKY6XP43Gahaa8O2tv8LRaDXUrI4x+wwlT7
RczV/pPHFJuF7jh/HzQX1f9QcwRVKQn78DVuFyT/q1/panf0DpjdhoJOStcYbGt8
ayaRbGbqOOqLYNMV0is8m2H0R/7UFeLYtBla9tDaGvXnqbjdc/KFAQXhijHdSkiC
xfNaqLMJLRNFF1mQmkCYKpUGsXdvBzC5Y2weuHc3SUWXyOs3w6YGYc93rjKPKPFX
KYkMO5dY5maoUhKS4fk2FPM4090IO8u2MVbFwNGjpMTEpoopKYJug75doPingPS/
ZA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:45 2024 by rpki-client on console-fra.rpki-client.org