Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/TXKJsaNEU6ZWVvSeFR6YynkV8tE.roa
File:                     TXKJsaNEU6ZWVvSeFR6YynkV8tE.roa (raw, json)
Hash identifier:          PZlxmzWqC7YZmOMlXgVEUG/om8+/gY5l1y1fefOvxVE=
Subject key identifier:   4D:72:89:B1:A3:44:53:A6:56:56:F4:9E:15:1E:98:CA:79:15:F2:D1
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       9F
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/TXKJsaNEU6ZWVvSeFR6YynkV8tE.roa
Signing time:             Fri 10 Feb 2023 07:45:43 +0000
ROA not before:           Fri 10 Feb 2023 07:45:43 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.171/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:45:43 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=4D7289B1A34453A65656F49E151E98CA7915F2D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e3:30:79:ab:5b:21:a9:96:8e:af:5c:fd:73:
                    aa:4f:88:30:bb:73:f8:28:a2:c2:aa:2d:e3:65:bf:
                    c9:6a:46:c7:38:1e:94:65:63:63:ef:42:c8:01:34:
                    14:77:e5:47:34:28:e5:54:aa:27:04:3f:cd:ad:b8:
                    c8:5d:9e:98:cd:36:83:0e:95:1a:23:a4:03:3f:25:
                    cd:f6:57:a8:f2:3c:68:d1:b7:e8:43:9d:79:14:92:
                    47:33:a0:a4:b4:93:7b:05:0b:d1:6c:52:1a:1c:4d:
                    22:19:ea:88:40:64:3e:58:d7:60:fc:ed:87:cf:56:
                    7d:c1:76:9b:fc:f0:c7:cb:09:50:10:92:68:0b:62:
                    66:b7:cf:cd:db:ac:58:db:a5:be:04:cb:94:4b:98:
                    bb:6f:84:e1:35:e7:3e:4f:19:5e:5e:53:3b:d5:4c:
                    ff:7d:7b:fa:3a:50:19:b7:17:b6:11:f8:ae:19:41:
                    fb:bd:07:b7:bd:cb:88:d5:08:51:0f:ae:71:de:53:
                    f8:9b:e8:e7:f6:c4:a7:0d:e1:05:2d:3c:31:ab:a2:
                    1c:65:32:76:4f:8a:43:44:65:b7:1c:c1:26:cc:8b:
                    50:18:29:a5:fb:46:ec:59:8b:44:d1:79:62:6e:64:
                    3d:ef:cc:be:31:c9:60:98:3f:24:8a:6b:65:8c:69:
                    40:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:72:89:B1:A3:44:53:A6:56:56:F4:9E:15:1E:98:CA:79:15:F2:D1
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/TXKJsaNEU6ZWVvSeFR6YynkV8tE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.171/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:20:00:ee:39:8b:ed:a5:29:ca:84:9e:a8:e6:90:88:c1:89:
         b2:03:01:5c:58:8e:27:6a:8f:3f:d8:97:aa:63:ca:21:e0:9a:
         8e:a3:bd:c9:a1:f9:64:fd:6c:9d:0f:fa:65:47:06:98:f3:2e:
         31:18:81:64:95:b1:44:b6:fd:da:aa:dc:0c:63:d2:a0:d2:b9:
         b7:6a:e2:d0:18:65:da:7e:e5:58:2a:1e:5b:f2:23:5e:f7:6f:
         c4:5d:e8:9e:79:ca:62:f1:ea:bd:95:76:79:81:f6:c1:8e:f3:
         69:dd:e1:91:6b:1e:1f:4c:10:4d:5a:32:8c:48:15:ae:f7:e5:
         8d:43:3d:d6:b4:66:54:fd:2a:a4:c3:53:e4:72:7e:36:06:01:
         98:56:44:97:a5:a2:bf:ed:20:73:62:5b:51:79:68:5e:86:5e:
         31:a4:5f:a1:81:12:56:08:12:34:ea:59:57:2a:f2:53:31:f4:
         90:fd:f9:c0:b0:1e:b6:31:1e:fd:a6:d4:87:66:09:62:30:26:
         71:89:d6:77:25:91:d9:9e:cf:2b:10:30:d1:65:a7:a4:1d:92:
         57:b2:fc:29:45:b1:5d:13:9b:25:06:16:ca:40:83:00:4e:9a:
         b4:ba:1c:4d:bf:96:cb:c3:3c:ac:81:a9:0b:70:2a:71:63:bd:
         5f:56:0e:d3
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMTAw
NzQ1NDNaFw0yNDAxMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRENzI4OUIxQTM0NDUz
QTY1NjU2RjQ5RTE1MUU5OENBNzkxNUYyRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDT4zB5q1shqZaOr1z9c6pPiDC7c/goosKqLeNlv8lqRsc4HpRl
Y2PvQsgBNBR35Uc0KOVUqicEP82tuMhdnpjNNoMOlRojpAM/Jc32V6jyPGjRt+hD
nXkUkkczoKS0k3sFC9FsUhocTSIZ6ohAZD5Y12D87YfPVn3Bdpv88MfLCVAQkmgL
Yma3z83brFjbpb4Ey5RLmLtvhOE15z5PGV5eUzvVTP99e/o6UBm3F7YR+K4ZQfu9
B7e9y4jVCFEPrnHeU/ib6Of2xKcN4QUtPDGrohxlMnZPikNEZbccwSbMi1AYKaX7
RuxZi0TReWJuZD3vzL4xyWCYPySKa2WMaUDJAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUTXKJsaNEU6ZWVvSeFR6YynkV8tEwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9UWEtKc2FORVU2WldWdlNlRlI2WXlua1Y4dEUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxaqzANBgkqhkiG9w0BAQsFAAOCAQEAbyAA7jmL7aUpyoSeqOaQ
iMGJsgMBXFiOJ2qPP9iXqmPKIeCajqO9yaH5ZP1snQ/6ZUcGmPMuMRiBZJWxRLb9
2qrcDGPSoNK5t2ri0Bhl2n7lWCoeW/IjXvdvxF3onnnKYvHqvZV2eYH2wY7zad3h
kWseH0wQTVoyjEgVrvfljUM91rRmVP0qpMNT5HJ+NgYBmFZEl6Wiv+0gc2JbUXlo
XoZeMaRfoYESVggSNOpZVyryUzH0kP35wLAetjEe/abUh2YJYjAmcYnWdyWR2Z7P
KxAw0WWnpB2SV7L8KUWxXRObJQYWykCDAE6atLocTb+Wy8M8rIGpC3AqcWO9X1YO
0w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org