Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/PTjGsrZOSdONE6d8LdXj7-Vz544.roa
File:                     PTjGsrZOSdONE6d8LdXj7-Vz544.roa (raw, json)
Hash identifier:          K0Sqbdk6gokXWTJBO6FoskoYQXLETLnFRVtaE8pJqj4=
Subject key identifier:   3D:38:C6:B2:B6:4E:49:D3:8D:13:A7:7C:2D:D5:E3:EF:E5:73:E7:8E
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0215
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/PTjGsrZOSdONE6d8LdXj7-Vz544.roa
Signing time:             Mon 20 Feb 2023 07:59:18 +0000
ROA not before:           Mon 20 Feb 2023 07:59:18 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.173/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:59:18 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=3D38C6B2B64E49D38D13A77C2DD5E3EFE573E78E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:90:f1:b2:01:c5:95:39:2c:f6:5c:82:24:da:
                    25:80:d4:cc:ba:23:8b:dc:fc:69:1e:ff:e9:de:3d:
                    ef:e5:70:0d:88:f4:d3:2c:3d:00:ed:c4:aa:64:dd:
                    5f:af:5c:70:93:ad:21:8f:e6:62:16:4e:51:32:e5:
                    e3:dc:c4:b6:14:80:e9:1d:4c:28:b0:ca:ba:05:58:
                    bb:25:f8:8c:a9:eb:3f:16:c6:d7:a4:fd:86:b0:d1:
                    d5:01:5f:b7:e2:71:01:1e:5b:18:55:63:48:93:de:
                    98:04:a8:a6:82:ac:50:50:49:37:99:73:8b:3a:ed:
                    80:b1:cf:28:6f:e3:a4:ad:1a:ab:d0:e6:8c:fa:4c:
                    ec:54:80:e3:8d:f6:7a:67:23:fd:f1:aa:68:06:bb:
                    20:4f:24:bf:2f:f8:18:90:b3:e6:1a:9d:3c:41:70:
                    5e:92:f0:3a:7d:82:06:61:2d:7e:98:bd:3f:4e:70:
                    c8:41:fe:1a:80:c1:45:76:98:98:82:70:3f:28:5d:
                    94:48:b7:29:ef:21:af:3b:64:c9:58:0b:9f:f8:16:
                    71:eb:65:2b:6f:ce:ff:19:04:cb:c3:e5:de:39:ef:
                    20:3a:5c:c5:21:4e:ae:f8:5e:fc:fb:95:a9:27:63:
                    7f:ec:46:bf:ca:7c:23:8d:98:1b:7b:fe:fa:24:12:
                    e0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:38:C6:B2:B6:4E:49:D3:8D:13:A7:7C:2D:D5:E3:EF:E5:73:E7:8E
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/PTjGsrZOSdONE6d8LdXj7-Vz544.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.173/32

    Signature Algorithm: sha256WithRSAEncryption
         36:49:79:5d:b1:f8:bf:45:01:2c:54:24:fd:27:be:37:7d:c9:
         13:eb:5d:12:26:54:99:7b:8f:b2:d0:37:51:3c:f1:25:f0:db:
         a8:5e:49:a1:2f:09:5d:b5:0c:40:d4:64:04:bf:f8:dc:97:90:
         23:18:b4:b6:b7:4b:e2:6c:ab:19:b9:95:1b:d3:0e:41:4c:71:
         b1:dc:44:79:58:ff:06:56:f4:94:50:2d:19:74:3b:84:19:86:
         ff:46:94:f9:87:f2:d5:44:fe:0a:cd:f2:74:be:ae:b9:33:6b:
         8a:6b:4c:84:db:bc:27:e3:5c:e6:5c:2d:1c:ea:b7:45:ee:ad:
         ce:d5:e7:76:2a:92:7a:34:c2:70:84:67:95:6c:bc:8a:97:46:
         b5:d4:3e:65:09:24:0a:38:9a:64:1c:49:3c:0f:4c:85:34:09:
         a5:7a:a3:ee:d5:4f:db:81:c9:39:9e:c9:87:d7:94:06:2f:a8:
         ab:2d:da:a5:20:5f:54:41:84:b2:7a:1d:f9:98:d7:51:85:31:
         c1:4e:b0:9c:bd:9a:9a:51:c7:3b:16:60:46:e0:b6:3b:8d:11:
         db:0c:25:43:bc:de:93:61:5e:63:ef:53:66:39:ad:a8:78:85:
         2d:06:e5:be:ca:44:0d:82:2b:24:a2:07:91:4d:04:5a:56:5e:
         3f:f1:78:b1
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
NzU5MThaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNEMzhDNkIyQjY0RTQ5
RDM4RDEzQTc3QzJERDVFM0VGRTU3M0U3OEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4kPGyAcWVOSz2XIIk2iWA1My6I4vc/Gke/+nePe/lcA2I9NMs
PQDtxKpk3V+vXHCTrSGP5mIWTlEy5ePcxLYUgOkdTCiwyroFWLsl+Iyp6z8Wxtek
/Yaw0dUBX7ficQEeWxhVY0iT3pgEqKaCrFBQSTeZc4s67YCxzyhv46StGqvQ5oz6
TOxUgOON9npnI/3xqmgGuyBPJL8v+BiQs+YanTxBcF6S8Dp9ggZhLX6YvT9OcMhB
/hqAwUV2mJiCcD8oXZRItynvIa87ZMlYC5/4FnHrZStvzv8ZBMvD5d457yA6XMUh
Tq74Xvz7laknY3/sRr/KfCONmBt7/vokEuDvAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUPTjGsrZOSdONE6d8LdXj7+Vz544wHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9QVGpHc3JaT1NkT05FNmQ4TGRYajctVno1NDQu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxarTANBgkqhkiG9w0BAQsFAAOCAQEANkl5XbH4v0UBLFQk/Se+
N33JE+tdEiZUmXuPstA3UTzxJfDbqF5JoS8JXbUMQNRkBL/43JeQIxi0trdL4myr
GbmVG9MOQUxxsdxEeVj/Blb0lFAtGXQ7hBmG/0aU+Yfy1UT+Cs3ydL6uuTNrimtM
hNu8J+Nc5lwtHOq3Re6tztXndiqSejTCcIRnlWy8ipdGtdQ+ZQkkCjiaZBxJPA9M
hTQJpXqj7tVP24HJOZ7Jh9eUBi+oqy3apSBfVEGEsnod+ZjXUYUxwU6wnL2amlHH
OxZgRuC2O40R2wwlQ7zek2FeY+9TZjmtqHiFLQblvspEDYIrJKIHkU0EWlZeP/F4
sQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org