Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Cht1eXwfWvXlThS6tssVo38_u5o.roa
File:                     Cht1eXwfWvXlThS6tssVo38_u5o.roa (raw, json)
Hash identifier:          f3JuMNzoQMrawHmpEQdRwprEPdn1FTMp84Ho34W2ucs=
Subject key identifier:   0A:1B:75:79:7C:1F:5A:F5:E5:4E:14:BA:B6:CB:15:A3:7F:3F:BB:9A
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01D0
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Cht1eXwfWvXlThS6tssVo38_u5o.roa
Signing time:             Mon 20 Feb 2023 07:55:24 +0000
ROA not before:           Mon 20 Feb 2023 07:55:24 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.26/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:55:24 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=0A1B75797C1F5AF5E54E14BAB6CB15A37F3FBB9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:7a:aa:cb:39:a6:55:ee:ce:70:6c:3d:a7:
                    91:e2:ef:4f:0f:c4:97:51:71:74:40:b8:0a:20:53:
                    1a:85:bc:13:81:0f:26:1d:ee:2e:18:61:7d:2e:7e:
                    0d:ec:9e:da:54:b9:57:44:5c:e4:28:06:6c:cd:f2:
                    1d:04:e8:fd:32:ba:8e:04:e7:3b:ed:3e:df:69:3d:
                    fa:63:50:d0:b0:fd:03:e4:a6:5c:11:3d:8c:e6:4f:
                    10:1d:71:b9:15:7f:49:74:37:d8:64:32:b7:3e:b8:
                    45:f9:3a:ae:51:e5:87:1b:b4:68:89:c1:1c:63:8c:
                    a7:c6:37:40:48:1a:83:df:99:3e:df:62:b9:03:64:
                    f0:4e:80:e3:bf:cf:f4:e1:70:fa:11:b7:c0:08:d5:
                    f2:a4:6e:f1:0e:4b:45:64:72:93:25:1f:43:61:e3:
                    31:3e:17:f4:80:56:bb:f6:8e:03:7f:1e:04:2e:c5:
                    7f:20:90:31:07:9d:bc:f8:9e:46:f2:47:69:c6:d5:
                    69:6c:91:46:c9:a4:a0:ac:2f:86:96:09:93:8f:cd:
                    83:3a:cc:5b:a9:fa:78:a2:16:82:e2:8b:7b:5f:f6:
                    38:1e:42:2f:d2:a3:45:5b:73:2b:c7:e2:45:30:d1:
                    2c:86:df:8f:f7:77:04:6d:02:3c:66:cc:a6:e2:6e:
                    cc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1B:75:79:7C:1F:5A:F5:E5:4E:14:BA:B6:CB:15:A3:7F:3F:BB:9A
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Cht1eXwfWvXlThS6tssVo38_u5o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.26/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:60:89:1a:20:09:18:7e:2c:a6:86:df:45:50:b5:14:59:cf:
         4a:d7:ae:35:e6:77:0b:da:6c:52:8e:fe:56:0e:af:28:20:5b:
         ab:79:c0:ee:4d:c5:b1:ce:3b:6e:45:b7:ec:d7:f6:e4:4c:15:
         e5:53:62:3b:69:af:2b:7b:d9:76:e7:e3:a5:07:16:54:e4:02:
         28:60:7c:94:a8:e9:38:60:0e:56:31:d6:f8:15:61:94:94:b1:
         56:7e:35:80:54:8d:7d:b3:63:07:c0:e6:10:59:05:10:19:ff:
         44:05:1b:23:b7:48:be:65:4f:66:b6:e8:33:6c:25:9b:6a:de:
         ba:25:a6:51:7e:05:24:52:d0:52:b9:d9:2d:cf:8a:5f:32:26:
         47:66:01:86:e3:52:d5:02:03:f8:be:a0:45:e7:d1:cb:63:cd:
         64:18:4c:8e:2a:a7:7a:e6:28:5e:4a:83:14:43:6f:1d:00:88:
         8e:b9:a2:c2:2b:fd:01:b1:f3:fc:40:d0:4f:39:de:f9:c8:5e:
         60:bf:5c:6d:7f:8f:6a:41:96:0e:79:de:3e:59:ef:93:86:e4:
         a5:6c:18:37:49:ed:85:32:c9:18:28:ff:8f:5e:96:f3:c1:90:
         f4:a4:63:72:dd:5c:db:03:a2:d8:a2:b7:d1:95:04:26:6f:2a:
         87:be:cb:1d
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
NzU1MjRaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBBMUI3NTc5N0MxRjVB
RjVFNTRFMTRCQUI2Q0IxNUEzN0YzRkJCOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCziHqqyzmmVe7OcGw9p5Hi708PxJdRcXRAuAogUxqFvBOBDyYd
7i4YYX0ufg3sntpUuVdEXOQoBmzN8h0E6P0yuo4E5zvtPt9pPfpjUNCw/QPkplwR
PYzmTxAdcbkVf0l0N9hkMrc+uEX5Oq5R5YcbtGiJwRxjjKfGN0BIGoPfmT7fYrkD
ZPBOgOO/z/ThcPoRt8AI1fKkbvEOS0VkcpMlH0Nh4zE+F/SAVrv2jgN/HgQuxX8g
kDEHnbz4nkbyR2nG1WlskUbJpKCsL4aWCZOPzYM6zFup+niiFoLii3tf9jgeQi/S
o0VbcyvH4kUw0SyG34/3dwRtAjxmzKbibswJAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUCht1eXwfWvXlThS6tssVo38/u5owHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9DaHQxZVh3Zld2WGxUaFM2dHNzVm8zOF91NW8u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxcGjANBgkqhkiG9w0BAQsFAAOCAQEAL2CJGiAJGH4spobfRVC1
FFnPSteuNeZ3C9psUo7+Vg6vKCBbq3nA7k3Fsc47bkW37Nf25EwV5VNiO2mvK3vZ
dufjpQcWVOQCKGB8lKjpOGAOVjHW+BVhlJSxVn41gFSNfbNjB8DmEFkFEBn/RAUb
I7dIvmVPZrboM2wlm2reuiWmUX4FJFLQUrnZLc+KXzImR2YBhuNS1QID+L6gRefR
y2PNZBhMjiqneuYoXkqDFENvHQCIjrmiwiv9AbHz/EDQTzne+cheYL9cbX+PakGW
DnnePlnvk4bkpWwYN0nthTLJGCj/j16W88GQ9KRjct1c2wOi2KK30ZUEJm8qh77L
HQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org