Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/LQyhcQ1R7sqpnkN9hsqSIpwZq8Q.roa
File:                     LQyhcQ1R7sqpnkN9hsqSIpwZq8Q.roa (raw, json)
Hash identifier:          dmLKg0KXMODvozqCn4bAMo51DB0RPB3ABeN63kgRQA8=
Subject key identifier:   2D:0C:A1:71:0D:51:EE:CA:A9:9E:43:7D:86:CA:92:22:9C:19:AB:C4
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       019D
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/LQyhcQ1R7sqpnkN9hsqSIpwZq8Q.roa
Signing time:             Mon 20 Feb 2023 07:53:07 +0000
ROA not before:           Mon 20 Feb 2023 07:53:07 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.182/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:53:07 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=2D0CA1710D51EECAA99E437D86CA92229C19ABC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d2:58:48:46:c7:68:ea:9c:f4:b0:3a:20:6d:
                    9d:08:f2:69:d7:d3:03:11:f3:9d:5f:a0:9b:64:06:
                    31:ac:6c:ee:d0:3d:73:f1:ce:3e:bc:e4:65:5f:f1:
                    8d:ed:98:27:43:94:ba:c7:56:cf:16:14:56:33:d4:
                    b3:03:a4:62:74:97:13:7c:df:86:d2:98:63:66:9d:
                    46:c7:96:f8:2e:ad:82:02:39:d7:54:43:79:d7:50:
                    e3:3d:ee:bc:75:8b:70:9b:ac:c9:8a:ba:6b:ed:35:
                    88:74:9e:df:a8:c0:13:22:0e:18:e3:1d:d7:af:95:
                    98:37:51:20:ec:ce:13:04:fe:79:be:96:02:a2:11:
                    86:b6:c3:12:9f:00:10:f8:e1:b9:14:eb:0a:0a:bb:
                    51:35:38:df:a9:6f:05:48:ad:1f:78:2d:b3:d4:1f:
                    7b:e3:d5:e0:ce:a8:03:73:fd:94:fd:05:9a:a5:01:
                    ab:3c:0e:d6:5d:33:55:ea:19:1e:04:d1:0b:90:01:
                    94:dd:da:aa:41:34:ae:6e:db:9e:6a:ec:fd:7a:49:
                    f6:ee:d1:01:72:03:02:27:95:ff:1c:8f:ea:9b:af:
                    08:bb:ed:63:27:fe:39:a4:8a:e1:8e:75:bb:43:a0:
                    39:1e:7f:cc:ef:4b:d5:80:8b:d9:0f:6c:c5:94:33:
                    ed:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0C:A1:71:0D:51:EE:CA:A9:9E:43:7D:86:CA:92:22:9C:19:AB:C4
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/LQyhcQ1R7sqpnkN9hsqSIpwZq8Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.182/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:97:7a:91:0a:e3:e5:6f:c7:1f:ec:02:da:17:04:8c:23:da:
         34:95:62:3b:65:a7:31:19:f4:b5:56:c0:2e:d2:be:f8:05:b4:
         38:d1:20:26:24:86:b7:db:ab:4c:6b:fd:19:c0:d5:4f:aa:10:
         d7:46:de:6a:9b:44:51:4c:9a:7e:70:9c:95:ad:bb:67:5d:10:
         aa:94:1d:ed:26:1b:8a:eb:cc:61:9d:9e:db:8c:92:5e:a0:28:
         30:7a:80:d3:54:7e:0e:ce:23:90:95:49:6c:8c:fd:ac:0e:01:
         b5:44:4c:26:1b:8d:8b:7d:db:55:44:b2:33:49:2a:01:0e:96:
         82:e2:ba:80:38:30:97:06:2c:b3:24:20:2a:c2:37:78:ca:a5:
         fc:95:fa:a2:bf:17:16:36:b3:55:6d:af:27:7f:f3:59:3f:23:
         08:2e:dd:c6:65:55:51:5a:20:93:b5:77:e0:62:33:d2:b8:a9:
         d0:56:37:51:60:35:0d:39:44:bc:58:66:3d:25:7d:d0:28:b4:
         e6:5b:80:1e:96:0e:55:74:2a:d3:bc:c2:93:10:9a:56:98:0c:
         3b:f1:7b:bd:16:35:4f:ed:f7:0e:4e:9f:da:c4:32:76:5e:a3:
         fe:a0:e8:2c:99:1c:be:19:0d:fb:68:48:03:de:1e:67:53:70:
         90:8c:f4:38
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
NzUzMDdaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJEMENBMTcxMEQ1MUVF
Q0FBOTlFNDM3RDg2Q0E5MjIyOUMxOUFCQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDV0lhIRsdo6pz0sDogbZ0I8mnX0wMR851foJtkBjGsbO7QPXPx
zj685GVf8Y3tmCdDlLrHVs8WFFYz1LMDpGJ0lxN834bSmGNmnUbHlvgurYICOddU
Q3nXUOM97rx1i3CbrMmKumvtNYh0nt+owBMiDhjjHdevlZg3USDszhME/nm+lgKi
EYa2wxKfABD44bkU6woKu1E1ON+pbwVIrR94LbPUH3vj1eDOqANz/ZT9BZqlAas8
DtZdM1XqGR4E0QuQAZTd2qpBNK5u255q7P16Sfbu0QFyAwInlf8cj+qbrwi77WMn
/jmkiuGOdbtDoDkef8zvS9WAi9kPbMWUM+3TAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQULQyhcQ1R7sqpnkN9hsqSIpwZq8QwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9MUXloY1ExUjdzcXBua045aHNxU0lwd1pxOFEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxatjANBgkqhkiG9w0BAQsFAAOCAQEAq5d6kQrj5W/HH+wC2hcE
jCPaNJViO2WnMRn0tVbALtK++AW0ONEgJiSGt9urTGv9GcDVT6oQ10beaptEUUya
fnCcla27Z10QqpQd7SYbiuvMYZ2e24ySXqAoMHqA01R+Ds4jkJVJbIz9rA4BtURM
JhuNi33bVUSyM0kqAQ6WguK6gDgwlwYssyQgKsI3eMql/JX6or8XFjazVW2vJ3/z
WT8jCC7dxmVVUVogk7V34GIz0rip0FY3UWA1DTlEvFhmPSV90Ci05luAHpYOVXQq
07zCkxCaVpgMO/F7vRY1T+33Dk6f2sQydl6j/qDoLJkcvhkN+2hIA94eZ1NwkIz0
OA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org