Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/3gr1rpM9vRxjOhLser1TkHRKU-M.roa
File:                     3gr1rpM9vRxjOhLser1TkHRKU-M.roa (raw, json)
Hash identifier:          6fO4pURoANKTjstZdvD2p3HPlUOWqWSl9oBDxmvwNp4=
Subject key identifier:   DE:0A:F5:AE:93:3D:BD:1C:63:3A:12:EC:7A:BD:53:90:74:4A:53:E3
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       99
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/3gr1rpM9vRxjOhLser1TkHRKU-M.roa
Signing time:             Fri 10 Feb 2023 07:45:41 +0000
ROA not before:           Fri 10 Feb 2023 07:45:41 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.229/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:45:41 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=DE0AF5AE933DBD1C633A12EC7ABD5390744A53E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c7:cc:0b:c8:48:a8:90:49:7a:54:a2:fa:b5:
                    1c:8c:a5:29:a1:eb:f9:de:b0:69:92:d8:ec:3a:6e:
                    42:49:24:90:f0:be:d6:4f:6c:c6:1d:01:ff:c8:3f:
                    0a:15:70:fa:90:b2:d3:f1:23:2b:51:56:e6:6a:43:
                    29:1f:17:ed:5a:72:0a:d0:2f:fc:69:ca:b0:67:17:
                    56:df:56:1d:36:32:62:06:14:14:54:de:6c:59:d2:
                    0e:cb:8d:15:6a:b5:85:4b:c8:29:f2:11:88:db:48:
                    92:ce:e3:c2:77:18:d2:ec:8a:76:36:6b:ea:bc:ca:
                    79:7e:39:24:cf:b8:26:09:0b:2a:bd:40:98:06:d3:
                    b9:99:10:67:68:43:35:24:78:c0:49:a7:d1:9f:04:
                    9f:06:58:19:fa:54:dd:df:7c:11:36:de:75:8c:7a:
                    56:bb:28:46:58:8f:40:a2:ea:13:e6:56:1c:45:9b:
                    ef:7b:92:46:8d:08:c4:f8:44:77:85:8a:73:25:ee:
                    6c:c8:4e:6c:79:3f:6f:0a:09:e5:4d:28:eb:98:07:
                    2c:d2:90:62:8d:2f:3e:1c:f8:77:b3:95:a4:2a:c3:
                    1e:19:22:13:dc:69:6e:3b:04:f8:0a:7d:b1:27:a6:
                    45:0b:64:da:59:47:1d:d2:9b:fb:ab:56:3a:aa:f3:
                    75:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0A:F5:AE:93:3D:BD:1C:63:3A:12:EC:7A:BD:53:90:74:4A:53:E3
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/3gr1rpM9vRxjOhLser1TkHRKU-M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.229/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:9c:21:5f:bf:81:de:eb:c1:97:b6:38:9d:69:b3:97:8b:01:
         87:4c:25:96:ad:4e:8f:ed:d6:d5:03:83:d8:9e:c8:e7:e2:0c:
         cb:e8:9e:c2:0c:15:35:0a:a5:90:d7:ce:8f:25:2f:60:9e:09:
         49:a7:a6:9b:b5:32:a5:59:47:8f:42:49:f5:41:f9:52:0b:95:
         ae:ac:86:81:4d:65:74:0d:1b:5c:80:e8:48:fb:1c:fb:bc:78:
         b5:04:6b:f4:a8:81:5d:9b:1b:e0:e5:fe:a9:4e:ee:81:4e:cd:
         5c:39:9c:80:36:77:6c:d8:0c:12:ff:7d:e6:d2:e1:d5:84:6b:
         80:3e:30:06:a7:38:8a:14:15:d3:fc:7e:b1:96:87:55:c3:98:
         df:3e:82:01:3e:49:a6:3d:a6:62:da:52:f7:64:22:79:a9:d9:
         34:78:41:e8:da:fe:b1:0a:b9:73:7f:05:54:40:c0:ba:e4:59:
         e1:be:7c:c3:d2:d2:2f:0e:8c:c1:13:57:0f:e5:ce:48:1b:a9:
         cd:eb:e5:73:95:aa:7c:06:23:b1:46:14:fc:31:21:63:d9:f9:
         11:7e:36:c3:b9:a8:af:d4:c9:f6:39:36:ad:04:fe:77:fe:02:
         55:01:b5:bb:98:6a:12:f5:cc:77:c0:04:11:02:79:98:ab:fb:
         f4:de:4d:85
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMTAw
NzQ1NDFaFw0yNDAxMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERFMEFGNUFFOTMzREJE
MUM2MzNBMTJFQzdBQkQ1MzkwNzQ0QTUzRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpx8wLyEiokEl6VKL6tRyMpSmh6/nesGmS2Ow6bkJJJJDwvtZP
bMYdAf/IPwoVcPqQstPxIytRVuZqQykfF+1acgrQL/xpyrBnF1bfVh02MmIGFBRU
3mxZ0g7LjRVqtYVLyCnyEYjbSJLO48J3GNLsinY2a+q8ynl+OSTPuCYJCyq9QJgG
07mZEGdoQzUkeMBJp9GfBJ8GWBn6VN3ffBE23nWMela7KEZYj0Ci6hPmVhxFm+97
kkaNCMT4RHeFinMl7mzITmx5P28KCeVNKOuYByzSkGKNLz4c+HezlaQqwx4ZIhPc
aW47BPgKfbEnpkULZNpZRx3Sm/urVjqq83VhAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQU3gr1rpM9vRxjOhLser1TkHRKU+MwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My8zZ3IxcnBNOXZSeGpPaExzZXIxVGtIUktVLU0u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxa5TANBgkqhkiG9w0BAQsFAAOCAQEAppwhX7+B3uvBl7Y4nWmz
l4sBh0wllq1Oj+3W1QOD2J7I5+IMy+iewgwVNQqlkNfOjyUvYJ4JSaemm7UypVlH
j0JJ9UH5UguVrqyGgU1ldA0bXIDoSPsc+7x4tQRr9KiBXZsb4OX+qU7ugU7NXDmc
gDZ3bNgMEv995tLh1YRrgD4wBqc4ihQV0/x+sZaHVcOY3z6CAT5Jpj2mYtpS92Qi
eanZNHhB6Nr+sQq5c38FVEDAuuRZ4b58w9LSLw6MwRNXD+XOSBupzevlc5WqfAYj
sUYU/DEhY9n5EX42w7mor9TJ9jk2rQT+d/4CVQG1u5hqEvXMd8AEEQJ5mKv79N5N
hQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:12 2025 by rpki-client