Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/WYPyeKYQFHA0Z7hNzisdsvF5qeY.roa
File:                     WYPyeKYQFHA0Z7hNzisdsvF5qeY.roa (raw, json)
Hash identifier:          IFXlhPZ9fi1pprr8s2NYN3iQDzBdJbTyyPlhAoztynk=
Subject key identifier:   59:83:F2:78:A6:10:14:70:34:67:B8:4D:CE:2B:1D:B2:F1:79:A9:E6
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02DD
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/WYPyeKYQFHA0Z7hNzisdsvF5qeY.roa
Signing time:             Mon 20 Feb 2023 08:07:35 +0000
ROA not before:           Mon 20 Feb 2023 08:07:35 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.202/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733 (0x2dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:07:35 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=5983F278A61014703467B84DCE2B1DB2F179A9E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d2:dc:ea:bc:5f:b1:13:48:25:c9:aa:a0:61:
                    c3:78:ea:8a:54:7f:fc:a3:2e:fa:71:ff:4c:fe:20:
                    7b:73:f6:1e:74:27:70:4b:fe:f3:03:e6:35:f2:ea:
                    e9:c1:05:4b:09:74:94:b4:32:2a:90:5f:47:ca:04:
                    a9:f2:06:28:01:3d:d4:8b:10:26:ff:af:f9:76:cb:
                    ba:bc:c1:f3:dc:41:0f:a0:21:20:43:61:d6:4b:81:
                    14:94:4a:e8:0b:2d:dc:05:71:b9:d0:42:53:59:29:
                    b1:35:78:69:b0:62:a9:48:6c:df:41:2f:d8:89:ba:
                    48:70:6b:66:a3:d0:77:e5:3b:6f:05:5b:1e:80:e0:
                    bd:4f:cb:63:42:20:6d:48:9d:55:64:15:12:64:33:
                    7e:33:f1:d7:b7:61:5b:29:5a:54:41:e4:59:f2:11:
                    ed:16:90:19:92:2a:b4:44:6d:a7:6b:91:e2:42:c9:
                    ee:32:76:b6:ca:07:63:b8:23:a9:9e:b4:a7:f3:35:
                    77:2e:90:d1:32:dc:3d:5b:e3:72:c8:36:2d:c8:0c:
                    b7:39:c5:80:d6:e6:d2:d6:7b:d3:ef:6a:b7:b9:ea:
                    f2:64:72:74:4e:34:f3:9d:15:23:bc:3e:a1:95:23:
                    8f:34:18:49:be:f1:be:b0:4f:9a:7f:31:61:d6:25:
                    69:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:83:F2:78:A6:10:14:70:34:67:B8:4D:CE:2B:1D:B2:F1:79:A9:E6
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/WYPyeKYQFHA0Z7hNzisdsvF5qeY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.202/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:b3:d7:7c:b5:81:6e:0f:f0:19:e0:77:de:45:16:28:f2:e1:
         0f:d6:4d:39:0e:24:97:af:65:fc:c4:e4:9b:5c:7d:37:55:c4:
         78:36:55:3f:9f:d8:4c:52:e9:83:c5:c9:8c:e6:2a:7a:2d:4e:
         79:2d:06:ca:3b:16:e9:01:39:e8:52:0e:c3:79:28:02:5a:cc:
         e7:86:5f:cd:41:52:56:87:76:cc:80:ff:ed:f8:d0:85:d4:8b:
         97:23:ee:cb:5f:06:2b:94:9a:2d:be:56:0d:49:5b:0b:39:61:
         10:d4:07:65:ab:de:71:d1:35:00:12:d5:a1:41:0e:a0:49:b9:
         d1:33:aa:a7:71:5a:ab:7c:b3:d3:20:19:64:b4:7a:1f:18:92:
         d2:f5:9a:f0:64:e7:20:48:1f:b3:cd:e7:64:97:09:ed:ef:45:
         9f:7d:96:29:c1:4c:7b:6e:c9:2e:c9:e4:b3:ae:c8:3e:8d:f3:
         13:db:2f:90:5d:db:e3:56:a6:71:b4:5b:9b:9b:1b:8e:92:2d:
         34:d6:06:e7:54:b6:aa:04:14:18:bf:e0:8c:f7:8d:cf:0a:d6:
         4d:b8:c6:d5:84:bd:01:0a:d1:7a:1c:22:16:86:12:08:23:bd:
         df:42:72:40:82:37:4c:e9:b8:61:99:4c:a1:e8:7f:9c:00:c0:
         70:f7:56:30
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAt0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODA3MzVaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDU5ODNGMjc4QTYxMDE0
NzAzNDY3Qjg0RENFMkIxREIyRjE3OUE5RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDB0tzqvF+xE0glyaqgYcN46opUf/yjLvpx/0z+IHtz9h50J3BL
/vMD5jXy6unBBUsJdJS0MiqQX0fKBKnyBigBPdSLECb/r/l2y7q8wfPcQQ+gISBD
YdZLgRSUSugLLdwFcbnQQlNZKbE1eGmwYqlIbN9BL9iJukhwa2aj0HflO28FWx6A
4L1Py2NCIG1InVVkFRJkM34z8de3YVspWlRB5FnyEe0WkBmSKrREbadrkeJCye4y
drbKB2O4I6metKfzNXcukNEy3D1b43LINi3IDLc5xYDW5tLWe9Pvare56vJkcnRO
NPOdFSO8PqGVI480GEm+8b6wT5p/MWHWJWnnAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUWYPyeKYQFHA0Z7hNzisdsvF5qeYwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9XWVB5ZUtZUUZIQTBaN2hOemlzZHN2RjVxZVku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxcyjANBgkqhkiG9w0BAQsFAAOCAQEAO7PXfLWBbg/wGeB33kUW
KPLhD9ZNOQ4kl69l/MTkm1x9N1XEeDZVP5/YTFLpg8XJjOYqei1OeS0GyjsW6QE5
6FIOw3koAlrM54ZfzUFSVod2zID/7fjQhdSLlyPuy18GK5SaLb5WDUlbCzlhENQH
ZavecdE1ABLVoUEOoEm50TOqp3Faq3yz0yAZZLR6HxiS0vWa8GTnIEgfs83nZJcJ
7e9Fn32WKcFMe27JLsnks67IPo3zE9svkF3b41amcbRbm5sbjpItNNYG51S2qgQU
GL/gjPeNzwrWTbjG1YS9AQrRehwiFoYSCCO930JyQII3TOm4YZlMoeh/nADAcPdW
MA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org