Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/UTuMEWm9WHob-ecXX7O2hy4X0GE.roa
File:                     UTuMEWm9WHob-ecXX7O2hy4X0GE.roa (raw, json)
Hash identifier:          ojUG9OOhncW61zfQa+rdgjFagrLarO0uE8zyDrhF5iA=
Subject key identifier:   51:3B:8C:11:69:BD:58:7A:1B:F9:E7:17:5F:B3:B6:87:2E:17:D0:61
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01F4
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/UTuMEWm9WHob-ecXX7O2hy4X0GE.roa
Signing time:             Mon 20 Feb 2023 07:57:28 +0000
ROA not before:           Mon 20 Feb 2023 07:57:28 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.31/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:28 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=513B8C1169BD587A1BF9E7175FB3B6872E17D061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:03:8b:7b:6c:e8:5e:45:f7:d8:49:4f:da:a9:
                    a4:c8:66:22:38:b8:25:cd:8e:1e:6c:da:b3:b2:31:
                    bb:b7:d9:c7:5f:d4:e9:82:e7:6d:19:6d:6b:14:80:
                    59:3c:cb:2b:eb:6c:41:af:61:5d:8d:ab:0f:10:a7:
                    4f:22:8b:45:03:d2:67:6d:8e:e1:ef:3d:98:64:2f:
                    c3:4d:cb:15:62:b2:86:ba:c9:c4:b4:df:a4:e0:c7:
                    95:37:df:e2:87:96:7e:29:c1:fd:5c:66:fe:f3:d4:
                    f3:ee:3c:0e:a3:e2:50:22:48:d5:d9:19:72:03:d3:
                    b7:40:2b:1d:a4:e3:8d:d7:dd:9f:81:e7:db:51:71:
                    66:2a:68:6d:d2:25:57:a4:5b:3b:4c:2c:e3:30:51:
                    3b:1a:64:74:30:02:33:57:ac:72:b7:b8:6a:ae:f5:
                    63:b4:e9:cb:1b:79:0e:27:64:4c:3a:44:e6:6d:89:
                    fd:3f:a5:6e:e1:d1:0d:47:7b:4e:1c:e6:89:c4:38:
                    23:fa:13:42:ab:d1:26:ba:7a:98:73:21:b3:71:1e:
                    c3:7f:4d:76:c8:aa:83:ab:a9:33:f9:b0:ef:93:3e:
                    31:60:4b:18:a9:34:51:11:72:bf:1a:f8:64:7e:44:
                    06:cf:f2:89:30:41:ee:2b:5e:40:b8:b6:71:fe:db:
                    6b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3B:8C:11:69:BD:58:7A:1B:F9:E7:17:5F:B3:B6:87:2E:17:D0:61
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/UTuMEWm9WHob-ecXX7O2hy4X0GE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.31/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:8e:4b:6b:a9:88:e5:83:6d:f4:f0:44:f3:d5:0e:ff:a0:62:
         9e:91:64:66:4e:c8:97:72:ca:57:bb:9c:85:ff:64:43:dc:b7:
         15:36:e9:c0:38:a4:62:ac:4d:b8:5c:97:5e:01:2c:c2:8b:a5:
         0a:18:87:1d:0b:74:4c:7d:ce:1c:11:0a:c4:8b:b4:22:61:65:
         6e:73:97:55:5e:bc:8a:51:75:18:98:8f:d2:f5:86:a6:76:c1:
         a2:de:44:81:d3:15:ee:5c:13:73:9a:3b:65:32:60:e7:c7:47:
         38:fc:77:e5:66:48:3c:41:e1:d2:26:b3:a3:b5:6f:84:56:a2:
         d2:ff:54:39:81:57:00:c3:3b:84:d3:7c:9f:66:f8:10:d4:6d:
         b7:33:83:3f:67:6c:18:45:a9:f8:86:d4:91:3e:ee:62:45:2e:
         b8:f7:2e:2e:3a:f2:d8:8c:a1:14:e0:6a:f0:fd:b0:26:46:09:
         28:4f:89:88:ca:2e:e1:ab:c5:9e:c2:86:f6:55:56:28:a5:2f:
         2f:aa:71:f9:21:fb:13:5c:c8:ad:af:2f:a3:89:40:33:e4:2c:
         e4:79:82:6b:20:14:ea:09:6c:af:72:8b:ce:5d:f9:1f:1d:82:
         41:04:6b:67:17:76:08:9f:05:41:17:db:1d:a7:3d:11:bb:eb:
         8e:ab:31:53
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
NzU3MjhaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDUxM0I4QzExNjlCRDU4
N0ExQkY5RTcxNzVGQjNCNjg3MkUxN0QwNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRA4t7bOheRffYSU/aqaTIZiI4uCXNjh5s2rOyMbu32cdf1OmC
520ZbWsUgFk8yyvrbEGvYV2Nqw8Qp08ii0UD0mdtjuHvPZhkL8NNyxVisoa6ycS0
36Tgx5U33+KHln4pwf1cZv7z1PPuPA6j4lAiSNXZGXID07dAKx2k443X3Z+B59tR
cWYqaG3SJVekWztMLOMwUTsaZHQwAjNXrHK3uGqu9WO06csbeQ4nZEw6ROZtif0/
pW7h0Q1He04c5onEOCP6E0Kr0Sa6ephzIbNxHsN/TXbIqoOrqTP5sO+TPjFgSxip
NFERcr8a+GR+RAbP8okwQe4rXkC4tnH+22tzAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUUTuMEWm9WHob+ecXX7O2hy4X0GEwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9VVHVNRVdtOVdIb2ItZWNYWDdPMmh5NFgwR0Uu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxaHzANBgkqhkiG9w0BAQsFAAOCAQEAXo5La6mI5YNt9PBE89UO
/6BinpFkZk7Il3LKV7uchf9kQ9y3FTbpwDikYqxNuFyXXgEswoulChiHHQt0TH3O
HBEKxIu0ImFlbnOXVV68ilF1GJiP0vWGpnbBot5EgdMV7lwTc5o7ZTJg58dHOPx3
5WZIPEHh0iazo7VvhFai0v9UOYFXAMM7hNN8n2b4ENRttzODP2dsGEWp+IbUkT7u
YkUuuPcuLjry2IyhFOBq8P2wJkYJKE+JiMou4avFnsKG9lVWKKUvL6px+SH7E1zI
ra8vo4lAM+Qs5HmCayAU6glsr3KLzl35Hx2CQQRrZxd2CJ8FQRfbHac9Ebvrjqsx
Uw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:43 2025 by rpki-client