Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/DETWn-TbnkwnXWQN_PtYw4O7hr4.roa
File:                     DETWn-TbnkwnXWQN_PtYw4O7hr4.roa (raw, json)
Hash identifier:          Z6GUKjVyASRkRQeg6C5FIjP7X0Mj5AXNq7U8XB3soSw=
Subject key identifier:   0C:44:D6:9F:E4:DB:9E:4C:27:5D:64:0D:FC:FB:58:C3:83:BB:86:BE
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       026C
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/DETWn-TbnkwnXWQN_PtYw4O7hr4.roa
Signing time:             Mon 20 Feb 2023 08:03:28 +0000
ROA not before:           Mon 20 Feb 2023 08:03:28 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.179/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620 (0x26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:03:28 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=0C44D69FE4DB9E4C275D640DFCFB58C383BB86BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f5:30:2b:82:ee:46:9f:f3:76:ad:12:0f:b9:
                    ed:24:b1:86:74:37:38:ff:ea:18:e8:8e:0e:d8:ce:
                    f6:36:c4:82:b7:9f:be:ec:22:3e:17:f6:b9:79:4f:
                    cd:63:02:39:38:b1:95:ec:82:c7:8a:5b:12:72:02:
                    e6:25:ee:72:a5:4b:b5:41:69:05:17:d0:7d:53:36:
                    28:82:de:81:d7:41:05:7f:f4:0a:1f:9c:e1:84:af:
                    78:b6:73:5d:41:87:de:e6:39:22:00:d4:e1:64:ea:
                    8d:ff:36:28:ec:73:be:41:84:30:07:61:95:80:47:
                    35:55:76:e5:9d:f1:95:f0:8d:eb:03:e7:53:0e:13:
                    77:be:3a:9b:98:a1:18:19:a7:12:b6:9c:fa:e2:38:
                    77:5d:54:aa:5f:03:ba:e9:09:93:61:93:ad:1b:32:
                    78:95:70:22:fd:2b:ce:c3:19:4c:30:86:e3:12:e2:
                    d2:d9:2f:fd:b0:68:af:21:a4:98:98:a2:b3:51:b8:
                    e3:81:cd:97:fd:f4:b8:c7:21:31:bf:25:f9:b8:39:
                    86:0c:07:41:39:97:51:77:dd:ff:3f:3a:62:3b:87:
                    7d:8d:9b:2f:08:1c:9a:94:53:04:ef:8b:35:73:cc:
                    73:48:31:72:e8:33:6d:84:55:17:d7:eb:01:af:68:
                    c5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:44:D6:9F:E4:DB:9E:4C:27:5D:64:0D:FC:FB:58:C3:83:BB:86:BE
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/DETWn-TbnkwnXWQN_PtYw4O7hr4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.179/32

    Signature Algorithm: sha256WithRSAEncryption
         31:70:b3:fd:c6:eb:2c:ae:c4:cf:46:c9:92:08:58:1a:9d:77:
         2f:9b:e4:b7:ae:99:1f:29:a0:07:7b:60:0b:10:90:25:29:89:
         c6:1a:6c:c0:da:06:1a:e8:38:5f:f9:b4:bc:34:39:4e:b7:be:
         b8:0f:d8:8c:7c:b4:e1:18:d7:d8:ee:30:47:94:45:4c:54:2e:
         5f:57:f6:e1:c4:27:14:b4:d9:c1:90:f0:03:4c:f1:2e:ff:f1:
         c0:f4:f0:5e:b5:ce:13:25:3f:ad:4a:31:4a:35:ae:de:a3:2a:
         b4:ff:32:fe:24:04:c4:ef:33:c7:99:6a:c9:fb:f7:fa:f9:7d:
         f6:be:7a:32:ca:9e:e1:29:24:80:ae:b7:d7:af:80:b9:5a:eb:
         cd:a1:06:f4:06:7b:42:27:26:f6:48:67:bc:4d:0f:9f:84:b1:
         49:93:9a:4f:09:27:02:77:8e:82:cd:28:0c:00:3d:8b:50:23:
         87:c4:bf:2f:94:78:62:4f:1b:92:e0:43:83:c0:1a:21:1d:89:
         a7:21:9e:0e:e6:75:d0:e0:65:a5:ae:bc:e9:58:e5:bc:31:2d:
         76:9e:8f:4c:1d:c3:b6:59:e7:d5:08:85:11:28:2a:32:ec:9a:
         e6:21:2c:79:71:70:bb:00:83:9d:ae:d2:0e:06:e3:cb:26:de:
         37:d2:ab:6a
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODAzMjhaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBDNDRENjlGRTREQjlF
NEMyNzVENjQwREZDRkI1OEMzODNCQjg2QkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDt9TArgu5Gn/N2rRIPue0ksYZ0Nzj/6hjojg7YzvY2xIK3n77s
Ij4X9rl5T81jAjk4sZXsgseKWxJyAuYl7nKlS7VBaQUX0H1TNiiC3oHXQQV/9Aof
nOGEr3i2c11Bh97mOSIA1OFk6o3/Nijsc75BhDAHYZWARzVVduWd8ZXwjesD51MO
E3e+OpuYoRgZpxK2nPriOHddVKpfA7rpCZNhk60bMniVcCL9K87DGUwwhuMS4tLZ
L/2waK8hpJiYorNRuOOBzZf99LjHITG/Jfm4OYYMB0E5l1F33f8/OmI7h32Nmy8I
HJqUUwTvizVzzHNIMXLoM22EVRfX6wGvaMVHAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUDETWn+TbnkwnXWQN/PtYw4O7hr4wHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9ERVRXbi1UYm5rd25YV1FOX1B0WXc0TzdocjQu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxaszANBgkqhkiG9w0BAQsFAAOCAQEAMXCz/cbrLK7Ez0bJkghY
Gp13L5vkt66ZHymgB3tgCxCQJSmJxhpswNoGGug4X/m0vDQ5Tre+uA/YjHy04RjX
2O4wR5RFTFQuX1f24cQnFLTZwZDwA0zxLv/xwPTwXrXOEyU/rUoxSjWu3qMqtP8y
/iQExO8zx5lqyfv3+vl99r56Msqe4SkkgK6316+AuVrrzaEG9AZ7Qicm9khnvE0P
n4SxSZOaTwknAneOgs0oDAA9i1Ajh8S/L5R4Yk8bkuBDg8AaIR2JpyGeDuZ10OBl
pa686VjlvDEtdp6PTB3Dtlnn1QiFESgqMuya5iEseXFwuwCDna7SDgbjyybeN9Kr
ag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org