Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/8XcxNmO4bEbWtV8PjzDEBhfMjXw.roa
File:                     8XcxNmO4bEbWtV8PjzDEBhfMjXw.roa (raw, json)
Hash identifier:          NEXHrVOXkJhnpE0YhzJtSZ1iSIJsxGZBq7PgrujGnDU=
Subject key identifier:   F1:77:31:36:63:B8:6C:46:D6:B5:5F:0F:8F:30:C4:06:17:CC:8D:7C
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02A5
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/8XcxNmO4bEbWtV8PjzDEBhfMjXw.roa
Signing time:             Mon 20 Feb 2023 08:05:31 +0000
ROA not before:           Mon 20 Feb 2023 08:05:31 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.95/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:31 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=F177313663B86C46D6B55F0F8F30C40617CC8D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0b:33:ab:4f:1b:29:5a:f3:36:79:6e:f3:dc:
                    9b:af:2f:6c:d3:fe:d6:c2:1d:69:87:60:b9:6b:e3:
                    f0:5d:27:81:d1:4b:46:37:e4:8e:40:40:21:7b:94:
                    05:31:95:ed:2c:bc:e8:49:ce:36:45:5d:26:f2:16:
                    73:46:4b:36:90:5b:57:8e:93:96:64:6d:42:61:a9:
                    d1:d6:19:8a:47:f4:a0:f7:6f:5b:ec:60:44:8b:ea:
                    dc:9c:d4:2b:5c:05:4d:99:2d:f9:3a:40:cf:eb:47:
                    00:94:5b:2b:01:c7:a5:ac:48:ab:a2:13:59:d7:ec:
                    f6:79:df:6c:ed:ed:09:da:4e:13:38:06:ac:bd:49:
                    66:cb:dd:f7:41:f0:9b:16:84:c9:8e:b9:e1:a9:cc:
                    ce:4a:b6:c1:4f:d5:ce:95:8d:be:76:1f:e7:de:ab:
                    14:f0:41:bd:50:dc:4a:64:18:e9:02:30:9a:23:96:
                    03:9d:aa:f2:32:88:52:d4:d8:ed:9b:3b:ec:5b:48:
                    67:9c:0e:d5:e1:bb:7a:4e:5a:d0:ce:a7:32:4f:48:
                    95:f4:f7:fc:5f:f6:1e:aa:1e:34:4f:f2:3a:73:f3:
                    f2:73:8e:ac:55:9a:ba:53:17:0b:7e:80:33:7d:38:
                    e3:43:bf:0a:b7:c5:1b:72:12:e7:1b:1b:12:1d:51:
                    d2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:77:31:36:63:B8:6C:46:D6:B5:5F:0F:8F:30:C4:06:17:CC:8D:7C
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/8XcxNmO4bEbWtV8PjzDEBhfMjXw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.95/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:1b:16:e3:de:12:a1:75:9b:e4:0c:88:45:30:9f:6f:da:23:
         b4:82:37:98:78:7c:98:29:de:e8:37:c9:d6:29:af:5a:f2:f5:
         ec:b0:f6:c3:bf:da:89:83:51:7f:4b:ea:43:45:88:c9:38:ff:
         d6:5a:0e:89:5a:bf:50:a0:94:87:37:d5:6e:37:71:f6:94:7b:
         27:c3:02:f7:35:05:f7:c7:6b:95:76:21:a7:df:da:22:29:35:
         a4:39:2c:df:80:c4:b9:0b:ba:6f:0e:a0:40:a0:8f:7b:40:11:
         63:2e:97:15:85:a4:bd:f6:64:c0:a0:bd:dd:43:fd:af:82:d1:
         1f:ea:f2:b4:6a:90:8d:b6:21:57:9b:ed:a8:10:34:4d:7a:1b:
         c7:5c:d8:a9:62:6b:1b:7e:91:3b:28:be:61:fa:c5:d8:7d:66:
         43:8b:83:7e:65:b7:9f:93:1c:7b:88:76:72:34:b7:b0:8f:a2:
         d7:58:08:d3:91:e2:6d:14:99:7a:c8:a5:b2:42:d5:ba:89:c1:
         e7:a4:44:5d:da:f8:11:64:82:b2:f6:c6:e8:b9:e1:4b:01:9c:
         cd:13:ab:ec:e7:46:ed:c5:0a:d7:ab:fc:e8:64:00:e9:5d:38:
         28:7a:3f:31:71:7b:b4:dc:80:31:2d:31:dc:cb:00:a9:00:84:
         60:9c:c8:f4
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODA1MzFaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEYxNzczMTM2NjNCODZD
NDZENkI1NUYwRjhGMzBDNDA2MTdDQzhEN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLCzOrTxspWvM2eW7z3JuvL2zT/tbCHWmHYLlr4/BdJ4HRS0Y3
5I5AQCF7lAUxle0svOhJzjZFXSbyFnNGSzaQW1eOk5ZkbUJhqdHWGYpH9KD3b1vs
YESL6tyc1CtcBU2ZLfk6QM/rRwCUWysBx6WsSKuiE1nX7PZ532zt7QnaThM4Bqy9
SWbL3fdB8JsWhMmOueGpzM5KtsFP1c6Vjb52H+feqxTwQb1Q3EpkGOkCMJojlgOd
qvIyiFLU2O2bO+xbSGecDtXhu3pOWtDOpzJPSJX09/xf9h6qHjRP8jpz8/JzjqxV
mrpTFwt+gDN9OONDvwq3xRtyEucbGxIdUdJJAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQU8XcxNmO4bEbWtV8PjzDEBhfMjXwwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My84WGN4Tm1PNGJFYld0VjhQanpERUJoZk1qWHcu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxcXzANBgkqhkiG9w0BAQsFAAOCAQEAohsW494SoXWb5AyIRTCf
b9ojtII3mHh8mCne6DfJ1imvWvL17LD2w7/aiYNRf0vqQ0WIyTj/1loOiVq/UKCU
hzfVbjdx9pR7J8MC9zUF98drlXYhp9/aIik1pDks34DEuQu6bw6gQKCPe0ARYy6X
FYWkvfZkwKC93UP9r4LRH+rytGqQjbYhV5vtqBA0TXobx1zYqWJrG36ROyi+YfrF
2H1mQ4uDfmW3n5Mce4h2cjS3sI+i11gI05HibRSZesilskLVuonB56REXdr4EWSC
svbG6LnhSwGczROr7OdG7cUK16v86GQA6V04KHo/MXF7tNyAMS0x3MsAqQCEYJzI
9A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org