Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ZCBDiev-5KPB4VSfL9EawDlcS34.roa
File:                     ZCBDiev-5KPB4VSfL9EawDlcS34.roa (raw, json)
Hash identifier:          ts0s3FS0JFgNijt3snjp+Vq9GlDPDmPed5+Yv3O+N1g=
Subject key identifier:   64:20:43:89:EB:FE:E4:A3:C1:E1:54:9F:2F:D1:1A:C0:39:5C:4B:7E
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       029F
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ZCBDiev-5KPB4VSfL9EawDlcS34.roa
Signing time:             Mon 20 Feb 2023 08:05:29 +0000
ROA not before:           Mon 20 Feb 2023 08:05:29 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.7/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 671 (0x29f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:29 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=64204389EBFEE4A3C1E1549F2FD11AC0395C4B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2c:63:71:55:fc:a9:4f:d0:92:33:c9:e9:7b:
                    d0:4c:b0:86:d1:69:9c:47:18:13:12:4e:7f:d1:70:
                    ba:ab:05:6e:2a:86:66:07:01:21:3e:31:26:e3:f0:
                    39:1f:82:ab:a1:57:ab:02:3f:21:11:ec:e0:80:86:
                    30:94:2a:05:03:3b:ca:42:f4:d6:ba:0f:5d:73:92:
                    2e:0c:07:b4:db:69:c5:99:cd:86:6b:92:89:8f:c3:
                    d6:4f:3c:a2:ce:f2:5c:f3:78:c0:80:5b:37:26:75:
                    20:29:a3:f1:a7:a8:5d:19:3e:b6:c5:02:b8:72:65:
                    4d:f0:e7:a9:85:f9:84:ac:61:4e:70:0c:e8:e6:49:
                    9c:bc:23:0b:09:e3:14:1e:09:b4:b8:ad:d7:c1:62:
                    55:7b:36:b3:f2:d0:5f:a2:f8:31:77:ca:d1:7a:66:
                    40:6f:8f:93:ce:5c:bd:a8:b6:56:4f:55:6f:88:66:
                    d7:c0:5c:06:28:94:e0:0a:8d:c5:bd:ed:2e:ab:56:
                    c2:72:2e:c8:92:96:1a:38:2f:f6:1d:14:18:9c:97:
                    fc:49:f2:c6:a9:2b:8b:39:b7:6d:30:77:af:70:1d:
                    ac:93:78:55:2e:58:66:a5:a1:92:3b:11:fc:45:eb:
                    5c:51:2e:47:bb:a7:eb:4c:37:94:b0:7e:bd:3c:1e:
                    38:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:20:43:89:EB:FE:E4:A3:C1:E1:54:9F:2F:D1:1A:C0:39:5C:4B:7E
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/ZCBDiev-5KPB4VSfL9EawDlcS34.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.7/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:7e:84:3d:b6:33:3c:77:02:f3:ef:fc:cb:6f:52:39:d3:87:
         d6:19:e5:24:57:63:8c:b5:65:4a:b6:f5:6e:59:cb:52:b4:79:
         99:35:d9:2c:b3:04:35:5a:3a:86:bf:85:7c:70:26:80:fe:ee:
         a9:d5:85:7e:36:41:a1:28:66:9f:a1:c1:ce:41:81:b3:1f:98:
         11:be:70:07:c1:a3:e8:79:3b:08:7d:1d:12:35:eb:58:28:b0:
         c3:3f:fc:5d:ba:50:c2:d5:8a:4d:c8:33:6d:51:42:5b:69:f2:
         bb:06:d1:a1:ae:d5:01:86:b7:68:6d:f5:b3:e8:87:bd:77:31:
         23:68:bc:c4:09:13:7e:e1:5b:a9:d7:e3:09:7c:55:d1:24:ef:
         a3:9d:28:b2:0f:93:2d:88:79:2c:0e:11:f6:74:1b:6d:20:1b:
         33:ba:87:64:e9:53:b8:28:5c:50:21:ce:ca:68:0b:b9:45:4a:
         5c:0d:ba:b0:61:14:d8:be:fc:e0:f5:ec:83:38:09:b9:bf:6b:
         f9:3f:1b:70:dd:52:e8:43:f0:09:0b:f9:8f:0f:0d:4f:83:1d:
         9c:a9:cc:76:a2:4f:cf:0b:0b:c2:14:c6:b7:ef:41:d5:6d:19:
         33:28:97:8d:3b:4c:04:ad:67:4d:62:70:d5:f9:8d:ba:34:ad:
         f1:60:82:61
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAp8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODA1MjlaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY0MjA0Mzg5RUJGRUU0
QTNDMUUxNTQ5RjJGRDExQUMwMzk1QzRCN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5LGNxVfypT9CSM8npe9BMsIbRaZxHGBMSTn/RcLqrBW4qhmYH
ASE+MSbj8DkfgquhV6sCPyER7OCAhjCUKgUDO8pC9Na6D11zki4MB7TbacWZzYZr
komPw9ZPPKLO8lzzeMCAWzcmdSApo/GnqF0ZPrbFArhyZU3w56mF+YSsYU5wDOjm
SZy8IwsJ4xQeCbS4rdfBYlV7NrPy0F+i+DF3ytF6ZkBvj5POXL2otlZPVW+IZtfA
XAYolOAKjcW97S6rVsJyLsiSlho4L/YdFBicl/xJ8sapK4s5t20wd69wHayTeFUu
WGaloZI7EfxF61xRLke7p+tMN5Swfr08HjijAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUZCBDiev+5KPB4VSfL9EawDlcS34wHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9aQ0JEaWV2LTVLUEI0VlNmTDlFYXdEbGNTMzQu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxcBzANBgkqhkiG9w0BAQsFAAOCAQEATH6EPbYzPHcC8+/8y29S
OdOH1hnlJFdjjLVlSrb1blnLUrR5mTXZLLMENVo6hr+FfHAmgP7uqdWFfjZBoShm
n6HBzkGBsx+YEb5wB8Gj6Hk7CH0dEjXrWCiwwz/8XbpQwtWKTcgzbVFCW2nyuwbR
oa7VAYa3aG31s+iHvXcxI2i8xAkTfuFbqdfjCXxV0STvo50osg+TLYh5LA4R9nQb
bSAbM7qHZOlTuChcUCHOymgLuUVKXA26sGEU2L784PXsgzgJub9r+T8bcN1S6EPw
CQv5jw8NT4MdnKnMdqJPzwsLwhTGt+9B1W0ZMyiXjTtMBK1nTWJw1fmNujSt8WCC
YQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org