Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/MvrBYPjqAVV21jlxzh18PuHHzsg.roa
File:                     MvrBYPjqAVV21jlxzh18PuHHzsg.roa (raw, json)
Hash identifier:          r/4pZsF4JJgNERDMaFRJYLr39y3nrGIB0woW3E54xyU=
Subject key identifier:   32:FA:C1:60:F8:EA:01:55:76:D6:39:71:CE:1D:7C:3E:E1:C7:CE:C8
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0220
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/MvrBYPjqAVV21jlxzh18PuHHzsg.roa
Signing time:             Mon 20 Feb 2023 07:59:22 +0000
ROA not before:           Mon 20 Feb 2023 07:59:22 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.118/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:59:22 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=32FAC160F8EA015576D63971CE1D7C3EE1C7CEC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c7:59:73:ac:12:ed:39:ce:20:a9:a3:9e:3b:
                    84:47:e6:a3:b8:2e:eb:3e:88:d2:9f:cb:0b:bd:23:
                    50:e9:45:d0:b2:5a:b7:8a:31:83:6c:37:5b:2e:39:
                    35:e0:b6:5b:91:2b:ec:30:fd:ac:70:26:b8:ec:0d:
                    53:1b:e4:31:5c:9c:87:ad:fe:21:04:f9:3b:2c:f2:
                    e6:6f:42:55:d0:16:2b:a3:f8:52:86:83:9d:30:f0:
                    46:08:a1:08:d2:66:e8:00:16:65:00:34:ee:fe:9d:
                    72:99:ce:5c:62:7d:d2:1a:03:e6:8a:49:51:83:cb:
                    2f:21:79:a4:b7:07:7f:85:8d:85:43:f8:40:30:36:
                    af:e4:d2:a5:e6:31:78:bc:36:9e:0b:a9:5b:e3:81:
                    df:18:46:54:24:0c:f3:e7:39:89:d3:fa:80:5c:4b:
                    23:e7:44:25:bf:43:f2:71:03:4f:58:83:f2:5c:7b:
                    25:7f:bb:78:24:11:d2:2b:60:7a:f3:f8:94:03:d7:
                    bd:14:77:92:a4:9f:b5:f0:a7:dd:9d:4e:31:8e:a1:
                    cb:df:5c:23:c0:f6:11:61:4b:73:48:6c:72:84:5d:
                    04:81:3c:32:e8:3a:df:f1:17:54:ee:a6:b7:db:a3:
                    ff:72:c4:89:7e:14:03:60:ba:a8:a2:64:45:12:5f:
                    4c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FA:C1:60:F8:EA:01:55:76:D6:39:71:CE:1D:7C:3E:E1:C7:CE:C8
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/MvrBYPjqAVV21jlxzh18PuHHzsg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.118/32

    Signature Algorithm: sha256WithRSAEncryption
         29:17:dc:c3:c7:0d:45:a0:d6:13:5c:31:d2:c4:95:78:a8:b7:
         48:6b:3b:a7:94:01:e0:96:db:35:85:88:56:5c:85:6d:20:7d:
         3c:84:af:dd:3d:b2:7f:11:de:c7:ad:59:a8:16:88:d1:22:c9:
         1e:fb:5e:65:99:62:27:6d:b5:5f:83:63:d9:32:aa:a5:7c:2e:
         a9:41:ee:cd:4f:8d:f1:32:ef:ca:1c:56:b9:d5:c7:cf:b9:c0:
         72:a1:83:0e:ee:91:73:fd:64:b0:99:93:85:0e:44:ec:73:a4:
         2f:72:22:26:b3:eb:ef:64:6c:c1:a4:6c:3a:3a:08:28:39:ce:
         d5:0f:c0:f9:74:fb:3f:0f:90:8c:25:c4:6a:08:9f:4e:2a:40:
         34:2e:c7:d0:3f:ce:dd:a5:b2:a1:f9:53:55:e5:b4:bc:52:a2:
         70:38:0d:71:d0:78:73:07:5d:c4:cc:2a:bd:ba:11:2a:c3:2a:
         a2:e8:0f:36:4c:e5:40:d9:f5:45:64:05:04:5e:29:a3:83:19:
         15:08:2c:72:f2:e8:ae:8d:7e:c8:43:d2:ae:98:9f:62:59:91:
         8d:79:90:9f:42:2e:57:9b:3b:7f:2f:23:3f:e6:3c:43:53:44:
         91:43:ae:28:89:34:60:f5:86:91:15:15:cf:b7:cb:98:47:79:
         3f:92:0b:f1
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
NzU5MjJaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDMyRkFDMTYwRjhFQTAx
NTU3NkQ2Mzk3MUNFMUQ3QzNFRTFDN0NFQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEx1lzrBLtOc4gqaOeO4RH5qO4Lus+iNKfywu9I1DpRdCyWreK
MYNsN1suOTXgtluRK+ww/axwJrjsDVMb5DFcnIet/iEE+Tss8uZvQlXQFiuj+FKG
g50w8EYIoQjSZugAFmUANO7+nXKZzlxifdIaA+aKSVGDyy8heaS3B3+FjYVD+EAw
Nq/k0qXmMXi8Np4LqVvjgd8YRlQkDPPnOYnT+oBcSyPnRCW/Q/JxA09Yg/JceyV/
u3gkEdIrYHrz+JQD170Ud5Kkn7Xwp92dTjGOocvfXCPA9hFhS3NIbHKEXQSBPDLo
Ot/xF1Tuprfbo/9yxIl+FANguqiiZEUSX0wrAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUMvrBYPjqAVV21jlxzh18PuHHzsgwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9NdnJCWVBqcUFWVjIxamx4emgxOFB1SEh6c2cu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxadjANBgkqhkiG9w0BAQsFAAOCAQEAKRfcw8cNRaDWE1wx0sSV
eKi3SGs7p5QB4JbbNYWIVlyFbSB9PISv3T2yfxHex61ZqBaI0SLJHvteZZliJ221
X4Nj2TKqpXwuqUHuzU+N8TLvyhxWudXHz7nAcqGDDu6Rc/1ksJmThQ5E7HOkL3Ii
JrPr72RswaRsOjoIKDnO1Q/A+XT7Pw+QjCXEagifTipANC7H0D/O3aWyoflTVeW0
vFKicDgNcdB4cwddxMwqvboRKsMqougPNkzlQNn1RWQFBF4po4MZFQgscvLoro1+
yEPSrpifYlmRjXmQn0IuV5s7fy8jP+Y8Q1NEkUOuKIk0YPWGkRUVz7fLmEd5P5IL
8Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org