Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/UkdgWC_bvWOPgCga_hywod6S42A.roa
File:                     UkdgWC_bvWOPgCga_hywod6S42A.roa (raw, json)
Hash identifier:          qmCas8PQKif7J39AwsA7YNuGA3J3iGb3X69tgdCGvYs=
Subject key identifier:   52:47:60:58:2F:DB:BD:63:8F:80:28:1A:FE:1C:B0:A1:DE:92:E3:60
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       1C
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/UkdgWC_bvWOPgCga_hywod6S42A.roa
Signing time:             Mon 26 Dec 2022 05:08:12 +0000
ROA not before:           Mon 26 Dec 2022 05:08:12 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.88.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Dec 26 05:08:12 2022 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=524760582FDBBD638F80281AFE1CB0A1DE92E360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:86:7a:e9:04:47:b1:a6:6f:53:42:4d:51:fa:
                    e0:a1:55:ac:57:5a:c8:ed:b2:83:34:ef:58:ac:e4:
                    dc:2c:b4:3a:b1:22:4a:32:1d:a8:f2:8f:41:c4:bd:
                    49:75:7f:20:66:df:0f:f9:3a:b9:e7:cb:ec:a3:dd:
                    7d:af:d0:bf:b6:3e:c8:a3:40:9f:26:f9:48:d1:3a:
                    da:14:64:cd:80:74:05:5f:25:90:30:c2:c3:7f:95:
                    16:6c:ea:45:d0:73:00:47:55:36:85:4f:47:84:93:
                    09:1d:52:c8:b5:65:09:ac:d6:c7:19:e5:0e:38:d4:
                    07:6a:da:76:f1:af:ce:3e:d5:85:22:b3:cf:f6:17:
                    45:7b:31:f4:3f:08:b3:4f:4d:66:b1:d0:c2:51:e5:
                    90:43:c3:be:73:b8:7e:66:4b:f1:d4:73:f8:3b:3a:
                    07:50:a8:aa:0e:de:37:d5:68:d4:3a:b4:a9:b4:35:
                    11:ed:9d:b1:62:c4:8d:d5:54:38:8d:ed:ff:37:64:
                    e1:31:68:81:7e:ef:40:8c:a9:2e:d4:7e:15:ba:a7:
                    51:8b:83:4b:cb:26:e8:8d:1e:7e:8d:a2:bc:ac:8c:
                    dc:7b:18:db:27:9a:2f:b6:14:1a:b2:8b:8f:a4:3c:
                    3e:3f:6a:c4:22:a9:68:f8:68:f2:67:62:51:c7:aa:
                    49:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:47:60:58:2F:DB:BD:63:8F:80:28:1A:FE:1C:B0:A1:DE:92:E3:60
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/UkdgWC_bvWOPgCga_hywod6S42A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:10:32:65:c6:07:46:19:9c:3e:c7:6a:fd:de:08:c6:08:ff:
         d6:ef:c8:ab:bc:bd:8b:ee:34:2a:eb:41:4a:d7:78:99:4b:40:
         6a:c6:84:73:45:57:33:c1:64:c7:16:1a:f2:91:a3:a3:7f:c7:
         cd:a9:d6:0e:44:80:92:90:44:68:6a:eb:54:ec:4e:aa:9c:0f:
         bd:3d:b8:9d:ca:5a:6c:20:63:fb:3f:93:9a:09:2a:cf:20:25:
         88:c8:14:5e:bf:93:58:80:45:30:7d:34:ba:2f:41:94:91:df:
         de:d3:9b:2c:09:d5:b2:2f:58:bc:94:1c:8a:3b:2f:23:1b:53:
         2f:5b:fc:42:27:bf:27:4e:58:c4:b5:0f:45:3a:4a:bb:04:71:
         0c:6f:67:61:63:81:e8:8e:26:2e:0b:40:fb:93:56:55:4c:e9:
         4e:1e:bf:34:d0:99:1a:9b:aa:b5:15:50:80:6c:12:b1:7d:15:
         8d:54:d1:c0:1f:1f:8c:e3:ca:0a:ec:b2:eb:9e:da:0f:fa:a1:
         f7:bb:2d:05:30:80:28:3c:61:19:f9:25:00:2f:4e:e8:e8:02:
         f4:7d:67:3f:eb:fc:5b:86:f3:fc:08:b3:42:95:fe:a0:5f:b2:
         1a:03:ac:31:90:0f:cf:94:8b:16:de:05:31:4e:6d:7b:e1:a8:
         44:a2:17:a0
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNjA2
QkVCMTM3Qjg4REJCRUVCQTc4NTFBMEE4RjhEN0QxODI5NEFGMB4XDTIyMTIyNjA1
MDgxMloXDTIzMTIxNTAxMzAwMlowMzExMC8GA1UEAxMoNTI0NzYwNTgyRkRCQkQ2
MzhGODAyODFBRkUxQ0IwQTFERTkyRTM2MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMWGeukER7Gmb1NCTVH64KFVrFdayO2ygzTvWKzk3Cy0OrEiSjId
qPKPQcS9SXV/IGbfD/k6uefL7KPdfa/Qv7Y+yKNAnyb5SNE62hRkzYB0BV8lkDDC
w3+VFmzqRdBzAEdVNoVPR4STCR1SyLVlCazWxxnlDjjUB2radvGvzj7VhSKzz/YX
RXsx9D8Is09NZrHQwlHlkEPDvnO4fmZL8dRz+Ds6B1Coqg7eN9Vo1Dq0qbQ1Ee2d
sWLEjdVUOI3t/zdk4TFogX7vQIypLtR+FbqnUYuDS8sm6I0efo2ivKyM3HsY2yea
L7YUGrKLj6Q8Pj9qxCKpaPho8mdiUceqScECAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRSR2BYL9u9Y4+AKBr+HLCh3pLjYDAfBgNVHSMEGDAWgBQWBr6xN7iNu+66eFGg
qPjX0YKUrzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxODMvRmdhLXNUZTRqYnZ1dW5oUm9LajQxOUdDbEs4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRmdhLXNUZTRqYnZ1dW5oUm9LajQx
OUdDbEs4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTgzL1VrZGdXQ19idldPUGdDZ2FfaHl3b2Q2UzQyQS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADK7FgwDQYJKoZIhvcNAQELBQADggEBAFIQMmXGB0YZnD7Hav3eCMYI
/9bvyKu8vYvuNCrrQUrXeJlLQGrGhHNFVzPBZMcWGvKRo6N/x82p1g5EgJKQRGhq
61TsTqqcD709uJ3KWmwgY/s/k5oJKs8gJYjIFF6/k1iARTB9NLovQZSR397TmywJ
1bIvWLyUHIo7LyMbUy9b/EInvydOWMS1D0U6SrsEcQxvZ2FjgeiOJi4LQPuTVlVM
6U4evzTQmRqbqrUVUIBsErF9FY1U0cAfH4zjygrssuue2g/6ofe7LQUwgCg8YRn5
JQAvTujoAvR9Zz/r/FuG8/wIs0KV/qBfshoDrDGQD8+UixbeBTFObXvhqESiF6A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org