Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/YGKv95-XjrUL1O04mcPzTR_N5KM.roa
File:                     YGKv95-XjrUL1O04mcPzTR_N5KM.roa (raw, json)
Hash identifier:          /ASTUih9XD33i9o2HgBSGz70BrjVAoEtnb5axcYIgDw=
Subject key identifier:   60:62:AF:F7:9F:97:8E:B5:0B:D4:ED:38:99:C3:F3:4D:1F:CD:E4:A3
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       55
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/YGKv95-XjrUL1O04mcPzTR_N5KM.roa
Signing time:             Fri 10 Feb 2023 07:41:29 +0000
ROA not before:           Fri 10 Feb 2023 07:41:29 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.186/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:41:29 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=6062AFF79F978EB50BD4ED3899C3F34D1FCDE4A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:17:7d:e2:92:e4:17:1a:0e:3e:cc:95:b2:cb:
                    34:b3:bb:8d:93:75:ef:80:9b:b6:d6:d7:61:93:82:
                    6a:f9:20:ee:e5:cb:35:35:f9:7c:c1:92:0f:e0:3c:
                    a8:04:d5:3c:8e:9d:25:ea:71:d9:a2:9e:65:54:6a:
                    ec:c1:f7:6c:0d:a7:96:b4:b5:5a:3f:79:96:2f:6f:
                    d5:cb:7f:46:da:76:07:a1:52:61:c0:3b:e7:34:5b:
                    2f:05:d3:98:3b:fb:8a:c4:ae:41:78:58:35:79:f1:
                    d2:b0:42:cd:f8:ac:3e:ce:f2:2a:1d:39:1a:e5:78:
                    69:ba:ed:90:18:82:39:c3:ca:f9:94:93:5f:d1:fc:
                    e9:82:26:9f:52:5d:78:c8:f6:09:8b:b8:1e:8f:61:
                    c4:ba:6a:94:52:66:1c:3e:bb:e2:73:55:4d:47:de:
                    fb:92:3d:c9:06:7d:03:25:17:5d:62:f7:d9:eb:b0:
                    02:cb:11:a2:0c:ec:2a:2b:2b:aa:b9:b3:df:99:e8:
                    e8:be:64:59:99:07:7d:44:f7:50:ae:0a:a3:72:d2:
                    c2:a6:99:47:f0:e6:0a:91:71:09:8f:e4:0a:ee:66:
                    31:d9:1a:f1:f4:81:ed:f4:4a:c9:29:e4:6f:59:cd:
                    d2:52:58:ed:6c:2f:85:47:6c:dc:67:fb:26:e3:99:
                    2c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:62:AF:F7:9F:97:8E:B5:0B:D4:ED:38:99:C3:F3:4D:1F:CD:E4:A3
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/YGKv95-XjrUL1O04mcPzTR_N5KM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.186/32

    Signature Algorithm: sha256WithRSAEncryption
         65:9b:94:d4:9b:c4:f5:ab:af:42:17:10:2a:ff:21:9c:91:b4:
         1e:b1:d4:d3:a4:ef:47:57:1e:c8:76:60:37:93:4e:4d:02:20:
         d9:9f:3a:f4:29:4b:91:40:af:da:9b:f9:52:a2:1b:48:c6:e4:
         43:60:cc:ba:b1:d4:8e:11:5d:cd:9b:5a:5f:7a:57:6a:6e:de:
         a7:3f:03:a7:82:d3:52:af:62:7a:e0:cb:f4:06:54:6d:cd:50:
         8d:f3:7a:85:6b:fc:f3:6a:b8:5b:a7:06:55:78:4e:20:f5:ee:
         fd:c6:5b:81:ff:97:92:a8:ef:8c:ac:f4:9a:ff:aa:c7:86:43:
         98:94:a4:d5:6a:d5:fd:08:13:39:85:98:be:6d:af:df:6d:60:
         e8:67:6f:20:a5:36:a2:e9:59:4b:48:eb:ae:f2:80:33:ff:85:
         d9:77:f3:21:50:8c:36:bc:b0:20:83:e2:11:3e:e7:0b:19:b4:
         2c:ba:d8:41:71:66:bd:08:7b:ef:43:8a:82:98:f2:f6:2f:8e:
         f4:dd:fc:4e:51:6f:e0:6a:22:ab:31:19:cd:7c:d3:71:ce:ee:
         0b:e4:e9:79:e4:5d:e9:c3:51:71:73:18:19:03:be:f1:59:fa:
         9f:a7:ff:cf:1c:e6:54:9a:48:34:70:94:4d:4c:45:a4:29:43:
         4d:c6:5c:df
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNjA2
QkVCMTM3Qjg4REJCRUVCQTc4NTFBMEE4RjhEN0QxODI5NEFGMB4XDTIzMDIxMDA3
NDEyOVoXDTI0MDExNTAxMzAwMlowMzExMC8GA1UEAxMoNjA2MkFGRjc5Rjk3OEVC
NTBCRDRFRDM4OTlDM0YzNEQxRkNERTRBMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN8XfeKS5BcaDj7MlbLLNLO7jZN174CbttbXYZOCavkg7uXLNTX5
fMGSD+A8qATVPI6dJepx2aKeZVRq7MH3bA2nlrS1Wj95li9v1ct/Rtp2B6FSYcA7
5zRbLwXTmDv7isSuQXhYNXnx0rBCzfisPs7yKh05GuV4abrtkBiCOcPK+ZSTX9H8
6YImn1JdeMj2CYu4Ho9hxLpqlFJmHD674nNVTUfe+5I9yQZ9AyUXXWL32euwAssR
ogzsKisrqrmz35no6L5kWZkHfUT3UK4Ko3LSwqaZR/DmCpFxCY/kCu5mMdka8fSB
7fRKySnkb1nN0lJY7WwvhUds3Gf7JuOZLBkCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBRgYq/3n5eOtQvU7TiZw/NNH83kozAfBgNVHSMEGDAWgBQWBr6xN7iNu+66eFGg
qPjX0YKUrzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxODMvRmdhLXNUZTRqYnZ1dW5oUm9LajQxOUdDbEs4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRmdhLXNUZTRqYnZ1dW5oUm9LajQx
OUdDbEs4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTgzL1lHS3Y5NS1YanJVTDFPMDRtY1B6VFJfTjVLTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgABMAcDBQDK7Fq6MA0GCSqGSIb3DQEBCwUAA4IBAQBlm5TUm8T1q69CFxAq/yGc
kbQesdTTpO9HVx7IdmA3k05NAiDZnzr0KUuRQK/am/lSohtIxuRDYMy6sdSOEV3N
m1pfeldqbt6nPwOngtNSr2J64Mv0BlRtzVCN83qFa/zzarhbpwZVeE4g9e79xluB
/5eSqO+MrPSa/6rHhkOYlKTVatX9CBM5hZi+ba/fbWDoZ28gpTai6VlLSOuu8oAz
/4XZd/MhUIw2vLAgg+IRPucLGbQsuthBcWa9CHvvQ4qCmPL2L4703fxOUW/gaiKr
MRnNfNNxzu4L5Ol55F3pw1FxcxgZA77xWfqfp//PHOZUmkg0cJRNTEWkKUNNxlzf
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org