Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Yte7PAmE-iN7_KWUnmK3inFt9_w.roa
File:                     Yte7PAmE-iN7_KWUnmK3inFt9_w.roa (raw, json)
Hash identifier:          AgnuxPyPxV9ee5/uP80DddQ0Y06NeTZZvLfDo3qzKko=
Subject key identifier:   62:D7:BB:3C:09:84:FA:23:7B:FC:A5:94:9E:62:B7:8A:71:6D:F7:FC
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02AE
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Yte7PAmE-iN7_KWUnmK3inFt9_w.roa
Signing time:             Mon 20 Feb 2023 08:05:35 +0000
ROA not before:           Mon 20 Feb 2023 08:05:35 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.207/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 686 (0x2ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:35 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=62D7BB3C0984FA237BFCA5949E62B78A716DF7FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:48:bd:96:cf:fa:70:37:22:22:f3:e3:8a:9e:
                    8b:64:95:f2:67:da:90:e5:85:2b:b4:35:ee:2c:91:
                    97:79:1f:8b:30:3a:99:72:d5:b9:39:b1:2a:bc:c4:
                    53:1b:cd:74:ca:48:2c:04:4d:02:f4:cc:83:d2:c2:
                    47:c2:d6:44:8a:2e:e4:51:30:23:7b:bf:59:30:f3:
                    55:79:a6:a4:8a:8c:64:40:26:96:94:f4:31:b7:06:
                    5c:7f:8b:9f:1a:5b:fb:f9:71:ca:69:7c:79:53:d9:
                    e8:80:6d:7f:aa:08:2a:1c:d4:55:d3:84:d5:96:41:
                    33:d8:b2:47:b2:84:ae:66:c5:2a:04:64:3a:54:3f:
                    b9:20:00:32:bf:40:c4:0a:19:c2:d3:49:5a:0b:7a:
                    a3:9a:9b:c4:e1:8b:69:92:f8:28:e9:a2:3e:47:24:
                    fc:bb:3b:51:02:c4:d6:44:14:ca:3c:61:44:91:ae:
                    68:14:71:4d:0c:af:db:5c:b7:96:93:f7:0a:c6:07:
                    cc:bf:82:ef:a1:b4:ef:cf:0b:d3:8f:ab:5d:8a:bf:
                    ca:2f:7c:da:a1:2c:ed:57:4d:29:1a:52:73:03:10:
                    35:46:0d:25:d3:2b:ea:6e:98:8e:87:f1:48:a8:55:
                    b6:ce:94:2e:9d:59:0f:b8:5d:bc:ac:07:b5:3c:b0:
                    ed:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D7:BB:3C:09:84:FA:23:7B:FC:A5:94:9E:62:B7:8A:71:6D:F7:FC
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Yte7PAmE-iN7_KWUnmK3inFt9_w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.207/32

    Signature Algorithm: sha256WithRSAEncryption
         73:81:d2:ae:04:0d:b7:2b:4b:63:32:73:fe:18:27:c5:b5:8c:
         3e:db:e6:ed:30:b9:8d:c6:7e:7d:c3:14:41:a1:c8:58:e6:1d:
         6d:21:50:d9:db:d2:35:ab:e7:8a:e5:84:4b:35:d4:0e:a6:17:
         91:9c:11:04:e8:e9:84:00:d3:ec:65:27:de:16:0f:e6:03:11:
         48:68:99:17:fe:84:b3:b0:c3:27:ca:22:73:67:20:5d:c2:17:
         6a:63:d7:3c:43:af:c7:8c:27:d5:ce:ff:0e:3a:23:0e:c4:d0:
         75:f3:52:d3:aa:28:8d:2b:39:50:f1:4c:7a:85:fb:51:34:45:
         fd:27:b3:e3:16:5d:16:04:e6:60:6a:1d:77:cc:28:67:f9:06:
         a7:59:63:8f:9e:88:c2:89:cb:f5:19:86:02:ae:bd:68:a0:52:
         4c:25:67:20:98:ef:27:93:66:e0:37:bb:ef:c4:5d:60:96:74:
         9e:91:37:63:79:10:ce:aa:49:63:2f:5a:5a:d6:55:67:79:15:
         55:72:90:5f:76:bb:ed:4e:1e:a9:14:32:f3:83:23:8e:c2:8d:
         83:36:f1:08:f6:16:08:d6:2a:93:fe:e4:b0:f3:81:ce:79:1a:
         95:12:19:1e:c3:bb:06:f6:de:87:c8:34:78:1c:d8:8e:ac:54:
         c6:19:9c:a5
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODA1MzVaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDYyRDdCQjNDMDk4NEZB
MjM3QkZDQTU5NDlFNjJCNzhBNzE2REY3RkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZSL2Wz/pwNyIi8+OKnotklfJn2pDlhSu0Ne4skZd5H4swOply
1bk5sSq8xFMbzXTKSCwETQL0zIPSwkfC1kSKLuRRMCN7v1kw81V5pqSKjGRAJpaU
9DG3Blx/i58aW/v5ccppfHlT2eiAbX+qCCoc1FXThNWWQTPYskeyhK5mxSoEZDpU
P7kgADK/QMQKGcLTSVoLeqOam8Thi2mS+Cjpoj5HJPy7O1ECxNZEFMo8YUSRrmgU
cU0Mr9tct5aT9wrGB8y/gu+htO/PC9OPq12Kv8ovfNqhLO1XTSkaUnMDEDVGDSXT
K+pumI6H8UioVbbOlC6dWQ+4XbysB7U8sO3PAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUYte7PAmE+iN7/KWUnmK3inFt9/wwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9ZdGU3UEFtRS1pTjdfS1dVbm1LM2luRnQ5X3cu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxczzANBgkqhkiG9w0BAQsFAAOCAQEAc4HSrgQNtytLYzJz/hgn
xbWMPtvm7TC5jcZ+fcMUQaHIWOYdbSFQ2dvSNavniuWESzXUDqYXkZwRBOjphADT
7GUn3hYP5gMRSGiZF/6Es7DDJ8oic2cgXcIXamPXPEOvx4wn1c7/DjojDsTQdfNS
06oojSs5UPFMeoX7UTRF/Sez4xZdFgTmYGodd8woZ/kGp1ljj56IwonL9RmGAq69
aKBSTCVnIJjvJ5Nm4De778RdYJZ0npE3Y3kQzqpJYy9aWtZVZ3kVVXKQX3a77U4e
qRQy84MjjsKNgzbxCPYWCNYqk/7ksPOBznkalRIZHsO7Bvbeh8g0eBzYjqxUxhmc
pQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org