Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/2phRyoB3_ZLryjMJe6HBkF1VXms.roa
File:                     2phRyoB3_ZLryjMJe6HBkF1VXms.roa (raw, json)
Hash identifier:          cXTZLzv2GM+4Mo9zocb3CrwMsdIvuH5SJBWA1yaZTUI=
Subject key identifier:   DA:98:51:CA:80:77:FD:92:EB:CA:33:09:7B:A1:C1:90:5D:55:5E:6B
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       013B
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/2phRyoB3_ZLryjMJe6HBkF1VXms.roa
Signing time:             Wed 15 Feb 2023 02:28:24 +0000
ROA not before:           Wed 15 Feb 2023 02:28:24 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.17/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:28:24 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=DA9851CA8077FD92EBCA33097BA1C1905D555E6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:13:3c:e3:87:5b:72:5a:65:4e:3b:4c:8f:de:
                    c1:19:a3:71:1d:63:eb:3c:c6:d3:8d:bb:58:ac:25:
                    81:66:88:71:e3:42:9c:c5:72:aa:78:e6:bb:40:8d:
                    c8:44:7e:e3:a0:ae:d4:fd:90:64:1c:73:69:2e:27:
                    78:20:20:48:07:4c:fe:09:d1:99:2d:28:cd:c4:51:
                    5d:2d:43:9b:34:a2:8f:a9:24:4a:06:30:31:12:6c:
                    b8:6a:76:ee:c7:ca:cf:5f:c9:d9:1e:86:a1:fc:1c:
                    b5:15:9a:a2:ab:1d:95:af:f1:2c:4b:51:73:a9:4d:
                    11:bd:34:0c:6e:66:55:86:11:d9:b0:28:b1:a0:6d:
                    ef:90:ac:73:27:ce:69:a0:c8:d7:30:d3:a8:9c:06:
                    57:d9:e8:ac:43:c9:b2:ca:bd:fd:49:48:ef:f8:78:
                    cb:24:3e:b0:16:12:42:fb:46:67:c6:a0:c6:85:15:
                    38:c1:8b:ed:e7:d2:de:02:4e:fc:e7:f0:71:64:f0:
                    15:cd:12:45:1b:1a:de:26:11:9e:f1:f7:19:4f:9c:
                    72:63:fc:a2:8a:91:09:c4:db:94:59:70:72:d8:01:
                    65:74:e2:c8:76:ff:8e:8e:7f:e2:1d:21:d9:9b:a3:
                    c0:5a:26:db:3f:0d:ce:f4:7a:9b:ee:3f:b7:0b:a7:
                    19:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:98:51:CA:80:77:FD:92:EB:CA:33:09:7B:A1:C1:90:5D:55:5E:6B
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/2phRyoB3_ZLryjMJe6HBkF1VXms.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.17/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:5f:5a:c2:5a:01:a9:f8:4c:aa:f0:8f:95:5d:c9:9a:24:bc:
         66:db:2a:f0:92:e7:5c:a3:53:d6:c8:22:d7:23:44:b1:82:f6:
         41:70:eb:e3:46:83:91:e3:3f:b6:02:55:38:08:fa:e1:72:85:
         bd:5d:68:6b:27:80:47:a1:cd:a9:51:fc:05:0f:ae:24:ae:f3:
         a1:97:4c:74:64:78:9a:a2:8d:26:73:5c:be:48:7a:96:bc:99:
         b8:48:c9:ca:88:9d:7a:20:1c:f3:89:b7:6c:7c:71:8d:a1:ca:
         71:f8:30:71:a2:b9:4d:4e:c8:00:34:b5:66:81:83:db:64:d3:
         13:f5:cd:82:36:bc:89:38:01:20:01:9b:58:74:b1:4a:f4:04:
         ff:28:1c:74:1d:10:56:58:33:9f:68:a5:e5:c0:22:47:b5:29:
         f2:f5:3a:0c:ad:9e:66:e7:11:70:89:b7:04:73:9a:e0:12:d6:
         4c:ea:1f:53:72:ba:aa:30:98:a8:8a:07:46:91:4a:51:de:51:
         ee:b4:65:a0:f2:52:18:17:b3:62:f2:50:6a:45:ff:94:3e:cd:
         11:a0:3e:8a:f0:d9:e8:eb:1c:8d:e9:4a:28:ab:1e:f8:0d:56:
         9f:59:d0:37:1c:c9:38:e4:b1:2e:04:ce:c5:ec:d0:42:60:5f:
         95:4b:d3:b3
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICATswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMTUw
MjI4MjRaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKERBOTg1MUNBODA3N0ZE
OTJFQkNBMzMwOTdCQTFDMTkwNUQ1NTVFNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgEzzjh1tyWmVOO0yP3sEZo3EdY+s8xtONu1isJYFmiHHjQpzF
cqp45rtAjchEfuOgrtT9kGQcc2kuJ3ggIEgHTP4J0ZktKM3EUV0tQ5s0oo+pJEoG
MDESbLhqdu7Hys9fydkehqH8HLUVmqKrHZWv8SxLUXOpTRG9NAxuZlWGEdmwKLGg
be+QrHMnzmmgyNcw06icBlfZ6KxDybLKvf1JSO/4eMskPrAWEkL7RmfGoMaFFTjB
i+3n0t4CTvzn8HFk8BXNEkUbGt4mEZ7x9xlPnHJj/KKKkQnE25RZcHLYAWV04sh2
/46Of+IdIdmbo8BaJts/Dc70epvuP7cLpxlVAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQU2phRyoB3/ZLryjMJe6HBkF1VXmswHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My8ycGhSeW9CM19aTHJ5ak1KZTZIQmtGMVZYbXMu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxaETANBgkqhkiG9w0BAQsFAAOCAQEAG19awloBqfhMqvCPlV3J
miS8Ztsq8JLnXKNT1sgi1yNEsYL2QXDr40aDkeM/tgJVOAj64XKFvV1oayeAR6HN
qVH8BQ+uJK7zoZdMdGR4mqKNJnNcvkh6lryZuEjJyoideiAc84m3bHxxjaHKcfgw
caK5TU7IADS1ZoGD22TTE/XNgja8iTgBIAGbWHSxSvQE/ygcdB0QVlgzn2il5cAi
R7Up8vU6DK2eZucRcIm3BHOa4BLWTOofU3K6qjCYqIoHRpFKUd5R7rRloPJSGBez
YvJQakX/lD7NEaA+ivDZ6OscjelKKKse+A1Wn1nQNxzJOOSxLgTOxezQQmBflUvT
sw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:45 2024 by rpki-client on console-fra.rpki-client.org