Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/8U6OYcLocITUcU-Qlqi0GrnHly4.roa
File:                     8U6OYcLocITUcU-Qlqi0GrnHly4.roa (raw, json)
Hash identifier:          UYCyUEnkrVpVs0igLKUdW3gNqlcS37OuDjUJPdtrs4g=
Subject key identifier:   F1:4E:8E:61:C2:E8:70:84:D4:71:4F:90:96:A8:B4:1A:B9:C7:97:2E
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01FF
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/8U6OYcLocITUcU-Qlqi0GrnHly4.roa
Signing time:             Mon 20 Feb 2023 07:57:33 +0000
ROA not before:           Mon 20 Feb 2023 07:57:33 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.138/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:33 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=F14E8E61C2E87084D4714F9096A8B41AB9C7972E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5d:b7:3f:0f:d0:e9:2d:40:89:f4:db:f6:79:
                    0b:83:d3:22:4f:a1:ff:df:3e:f0:f0:4a:e9:30:62:
                    3b:a8:68:69:f6:a6:fd:dc:91:8d:7a:f5:28:a7:55:
                    35:70:27:e6:ed:ee:8c:ba:bb:85:8c:9c:80:cb:9a:
                    30:ba:ef:05:72:13:20:e4:2c:33:56:93:65:58:cd:
                    2c:23:c9:5a:c9:70:ff:47:38:f5:65:0d:45:a4:6c:
                    f0:58:8d:74:fb:0c:c3:35:d5:88:94:cb:1f:5d:8f:
                    98:69:bb:d6:97:78:ed:a1:be:19:e5:e5:b2:14:17:
                    ac:9b:22:a2:e3:4d:53:80:60:fe:03:b9:11:b8:3f:
                    9c:6d:5d:38:62:0d:ee:81:0c:91:cc:8d:a4:b7:31:
                    7b:f0:db:ce:b5:5c:72:0c:ff:50:b5:8d:f7:46:ac:
                    e1:e3:4f:e3:69:a6:02:cb:a2:41:51:ec:e8:43:52:
                    11:03:74:ab:4b:bc:6f:8f:52:da:67:0f:93:61:93:
                    c9:9a:d0:f0:01:0d:e6:6d:c1:26:81:80:64:8c:fd:
                    00:43:89:ed:5b:8b:90:a8:c6:9e:06:6d:b0:72:3d:
                    bd:87:9a:6c:df:d6:26:cc:f4:f1:82:90:46:2a:c5:
                    ea:38:94:a8:40:01:6f:f9:83:7e:62:82:ee:14:39:
                    35:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4E:8E:61:C2:E8:70:84:D4:71:4F:90:96:A8:B4:1A:B9:C7:97:2E
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/8U6OYcLocITUcU-Qlqi0GrnHly4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.138/32

    Signature Algorithm: sha256WithRSAEncryption
         56:ea:3f:79:d5:02:72:af:f4:c1:dd:3c:f4:68:70:51:c8:c6:
         21:64:a5:8a:c7:9f:24:9d:e1:38:7a:11:8c:37:c6:2e:c3:59:
         f3:af:c9:63:b8:a8:12:0a:e2:84:d3:78:8d:36:f7:51:b1:8e:
         79:35:30:97:f2:2b:94:05:da:f3:d6:a1:f7:52:eb:41:ad:48:
         50:5e:fd:a9:fb:d3:5e:dc:d5:e8:a2:88:7d:00:e0:ab:c2:7a:
         df:da:8a:01:2a:35:b7:41:9e:c6:f8:5d:fd:c5:d9:29:6d:ca:
         88:42:4b:d7:12:81:b5:40:cb:98:6c:f9:22:0e:73:9d:1b:01:
         fa:76:67:0e:f0:81:e5:7d:8f:81:56:a4:cd:18:59:54:c6:f6:
         7e:2e:39:32:9a:fb:3a:fe:1e:47:c5:b2:15:d8:51:b3:35:2b:
         7a:63:67:4d:d6:d9:27:74:43:36:f4:41:ef:03:12:19:95:1e:
         8d:1b:20:92:a8:8d:68:c9:27:5b:67:4d:f8:0e:ee:5e:28:21:
         7d:67:ad:70:3e:4d:9e:a5:08:42:fc:e6:96:68:3d:ce:09:ef:
         3c:27:c9:28:14:a6:c2:52:11:d4:0d:ca:0b:ee:83:f6:e9:32:
         4b:38:8e:d7:ec:eb:2a:cb:20:10:f1:97:2e:8e:b7:23:67:3b:
         53:18:75:0e
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
NzU3MzNaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEYxNEU4RTYxQzJFODcw
ODRENDcxNEY5MDk2QThCNDFBQjlDNzk3MkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7Xbc/D9DpLUCJ9Nv2eQuD0yJPof/fPvDwSukwYjuoaGn2pv3c
kY169SinVTVwJ+bt7oy6u4WMnIDLmjC67wVyEyDkLDNWk2VYzSwjyVrJcP9HOPVl
DUWkbPBYjXT7DMM11YiUyx9dj5hpu9aXeO2hvhnl5bIUF6ybIqLjTVOAYP4DuRG4
P5xtXThiDe6BDJHMjaS3MXvw2861XHIM/1C1jfdGrOHjT+NppgLLokFR7OhDUhED
dKtLvG+PUtpnD5Nhk8ma0PABDeZtwSaBgGSM/QBDie1bi5Coxp4GbbByPb2Hmmzf
1ibM9PGCkEYqxeo4lKhAAW/5g35igu4UOTWJAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQU8U6OYcLocITUcU+Qlqi0GrnHly4wHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My84VTZPWWNMb2NJVFVjVS1RbHFpMEdybkhseTQu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxaijANBgkqhkiG9w0BAQsFAAOCAQEAVuo/edUCcq/0wd089Ghw
UcjGIWSlisefJJ3hOHoRjDfGLsNZ86/JY7ioEgrihNN4jTb3UbGOeTUwl/IrlAXa
89ah91LrQa1IUF79qfvTXtzV6KKIfQDgq8J639qKASo1t0Gexvhd/cXZKW3KiEJL
1xKBtUDLmGz5Ig5znRsB+nZnDvCB5X2PgVakzRhZVMb2fi45Mpr7Ov4eR8WyFdhR
szUremNnTdbZJ3RDNvRB7wMSGZUejRsgkqiNaMknW2dN+A7uXighfWetcD5NnqUI
Qvzmlmg9zgnvPCfJKBSmwlIR1A3KC+6D9ukySziO1+zrKssgEPGXLo63I2c7Uxh1
Dg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org