Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ES88qpvvau0fvUXo6gd0UXVUGgk.roa
File:                     ES88qpvvau0fvUXo6gd0UXVUGgk.roa (raw, json)
Hash identifier:          pHT1C1zu8fhlSF+n+tPZiE/B3Tad4drxbdgmaHp3/Fc=
Subject key identifier:   11:2F:3C:AA:9B:EF:6A:ED:1F:BD:45:E8:EA:07:74:51:75:54:1A:09
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02B3
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ES88qpvvau0fvUXo6gd0UXVUGgk.roa
Signing time:             Mon 20 Feb 2023 08:05:37 +0000
ROA not before:           Mon 20 Feb 2023 08:05:37 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.145/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 691 (0x2b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:37 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=112F3CAA9BEF6AED1FBD45E8EA07745175541A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:60:29:ae:93:9a:a8:59:b3:99:0d:3f:0a:20:
                    3f:f5:8a:fa:c5:4a:8e:fe:18:16:36:c8:4d:8c:d8:
                    0d:22:b4:3a:2d:b0:a3:f5:66:97:9a:99:f1:bb:3a:
                    ca:44:f1:91:37:1c:f9:6e:74:5e:2c:7d:62:64:a3:
                    02:8f:95:a2:66:a2:25:fa:e7:09:99:c7:53:52:b7:
                    89:ee:f3:44:b0:b0:7b:b8:8e:e5:e4:53:44:33:06:
                    4b:95:5f:0a:1c:ca:21:34:01:4b:c2:5b:46:e9:af:
                    e4:37:0d:49:a8:ea:0b:9b:d2:99:c6:2c:94:95:51:
                    fa:16:90:e1:e3:26:ad:0c:87:6f:fd:3f:dd:ec:0b:
                    46:30:a8:fd:75:a7:c9:0b:96:9b:25:24:b3:58:ea:
                    a2:74:e3:83:4a:8e:c3:65:62:e3:8b:04:ad:df:de:
                    57:55:22:5b:ce:c1:28:a4:c9:5f:20:df:4f:05:a8:
                    81:ba:29:21:c0:90:ae:42:58:99:07:28:99:92:e2:
                    30:e4:6d:eb:60:5e:3f:8b:87:f9:88:1c:36:02:e2:
                    b8:74:14:b9:b4:db:9e:5d:09:69:b3:94:51:42:60:
                    df:66:32:a6:18:12:99:62:84:34:e3:2f:34:ed:e3:
                    7b:ce:c3:7b:43:53:44:a5:c2:85:7b:9a:e3:f9:f8:
                    5b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2F:3C:AA:9B:EF:6A:ED:1F:BD:45:E8:EA:07:74:51:75:54:1A:09
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ES88qpvvau0fvUXo6gd0UXVUGgk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.145/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:82:ae:b5:ef:75:4d:1b:b2:cd:c2:dd:33:a5:14:21:cf:9c:
         73:52:4c:8b:1f:3e:e7:ec:77:37:6e:8e:75:bb:70:70:83:5d:
         d8:87:be:32:b9:46:12:4a:38:47:e3:41:23:a8:35:b0:de:09:
         6b:6d:90:48:92:6f:44:c4:3a:24:50:92:50:ff:0c:02:c2:f4:
         01:68:9f:2e:c6:e2:82:a9:48:66:df:24:2b:8a:9c:d6:ff:51:
         46:9f:89:4b:f0:af:6f:ef:ef:c3:43:6c:55:a2:43:6f:52:ae:
         bd:f6:86:23:23:2e:ea:65:f4:50:6f:10:54:1f:c4:5c:71:76:
         8b:b0:d8:00:2d:cb:75:50:74:40:eb:c9:c8:e3:b1:e0:00:97:
         c7:e1:a8:dc:10:73:3e:49:4c:c2:94:44:d5:c7:ad:28:97:83:
         82:ed:18:5b:b8:98:27:c1:ec:59:7c:b5:de:a1:37:e2:e7:9a:
         01:ad:e5:c5:9c:f3:f9:b9:a8:89:d7:8b:fe:79:f2:8f:cb:6e:
         3e:cb:6d:64:e7:a8:1c:d8:24:87:03:7e:25:2b:ab:eb:57:6d:
         8a:d5:cf:18:a9:3f:a0:05:4c:ae:ce:53:e9:7b:d9:b6:01:ef:
         cb:13:4c:94:56:10:a9:61:8f:4c:0d:ad:f4:da:ea:11:21:93:
         d1:7f:a4:95
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICArMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODA1MzdaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDExMkYzQ0FBOUJFRjZB
RUQxRkJENDVFOEVBMDc3NDUxNzU1NDFBMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDuYCmuk5qoWbOZDT8KID/1ivrFSo7+GBY2yE2M2A0itDotsKP1
ZpeamfG7OspE8ZE3HPludF4sfWJkowKPlaJmoiX65wmZx1NSt4nu80SwsHu4juXk
U0QzBkuVXwocyiE0AUvCW0bpr+Q3DUmo6gub0pnGLJSVUfoWkOHjJq0Mh2/9P93s
C0YwqP11p8kLlpslJLNY6qJ044NKjsNlYuOLBK3f3ldVIlvOwSikyV8g308FqIG6
KSHAkK5CWJkHKJmS4jDkbetgXj+Lh/mIHDYC4rh0FLm0255dCWmzlFFCYN9mMqYY
EplihDTjLzTt43vOw3tDU0SlwoV7muP5+FtRAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUES88qpvvau0fvUXo6gd0UXVUGgkwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9FUzg4cXB2dmF1MGZ2VVhvNmdkMFVYVlVHZ2su
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxakTANBgkqhkiG9w0BAQsFAAOCAQEAD4Kute91TRuyzcLdM6UU
Ic+cc1JMix8+5+x3N26OdbtwcINd2Ie+MrlGEko4R+NBI6g1sN4Ja22QSJJvRMQ6
JFCSUP8MAsL0AWifLsbigqlIZt8kK4qc1v9RRp+JS/Cvb+/vw0NsVaJDb1KuvfaG
IyMu6mX0UG8QVB/EXHF2i7DYAC3LdVB0QOvJyOOx4ACXx+Go3BBzPklMwpRE1cet
KJeDgu0YW7iYJ8HsWXy13qE34ueaAa3lxZzz+bmoideL/nnyj8tuPsttZOeoHNgk
hwN+JSur61dtitXPGKk/oAVMrs5T6XvZtgHvyxNMlFYQqWGPTA2t9NrqESGT0X+k
lQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org