Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/_5K1WliscOIajqbV9ghUIQiPud8.roa
File:                     _5K1WliscOIajqbV9ghUIQiPud8.roa (raw, json)
Hash identifier:          XK8aJJVhEuIuQ2qleKrCCgqfxL00nZAQwk/Ou9hICpM=
Subject key identifier:   FF:92:B5:5A:58:AC:70:E2:1A:8E:A6:D5:F6:08:54:21:08:8F:B9:DF
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02AA
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/_5K1WliscOIajqbV9ghUIQiPud8.roa
Signing time:             Mon 20 Feb 2023 08:05:33 +0000
ROA not before:           Mon 20 Feb 2023 08:05:33 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.182/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 682 (0x2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:33 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=FF92B55A58AC70E21A8EA6D5F6085421088FB9DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5a:ee:19:cc:65:fa:86:5b:ba:58:58:9c:09:
                    ed:94:c3:74:fb:99:64:c2:02:ae:8d:28:5a:a3:46:
                    64:4a:1b:ee:80:92:94:92:e3:11:cd:7b:eb:99:01:
                    93:27:42:9b:a3:8d:fc:d5:98:b5:25:e6:c7:7c:df:
                    56:e8:66:55:1e:ac:f8:2f:3b:d2:4e:a8:04:df:fe:
                    d3:42:6d:c5:55:65:33:5b:f3:c5:e1:5a:ce:a2:fd:
                    6b:bd:31:e1:38:3c:91:a4:9a:dd:3b:2f:cf:6e:41:
                    3a:02:6f:ef:bf:d8:d1:65:18:80:64:b8:63:84:ca:
                    d4:fb:4c:41:13:b5:6c:cf:a1:3f:1c:ad:7f:f5:28:
                    63:78:68:96:a4:6c:fd:50:05:f6:3b:86:32:72:58:
                    99:27:6f:26:17:c9:24:0d:98:15:11:e0:33:69:27:
                    4a:19:69:60:fb:92:22:bc:b5:1e:c8:6e:c3:26:91:
                    d5:cd:50:f9:7b:9d:85:03:5e:7a:3f:d0:79:ad:be:
                    14:60:32:88:29:f0:57:01:e7:98:d3:61:ab:4c:d6:
                    51:8a:d9:cc:df:e2:06:af:13:9d:ef:8c:e8:08:80:
                    34:23:c0:51:55:49:f1:a3:23:e8:a1:72:85:b0:d7:
                    bb:2d:9b:30:4b:86:c4:20:51:4f:2a:2a:bd:29:7d:
                    5d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:92:B5:5A:58:AC:70:E2:1A:8E:A6:D5:F6:08:54:21:08:8F:B9:DF
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/_5K1WliscOIajqbV9ghUIQiPud8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.182/32

    Signature Algorithm: sha256WithRSAEncryption
         06:55:8e:50:95:db:13:36:28:f2:ab:0c:cb:c0:ba:07:a6:c5:
         ea:cf:e7:0f:69:49:83:b4:a9:5f:10:7d:00:23:67:1e:c6:79:
         66:e7:09:d1:90:a8:bb:64:be:fb:a7:d8:55:af:fe:9e:d2:45:
         f4:ea:a8:39:1d:de:79:de:ea:73:62:bb:3e:b9:b2:ad:e9:6b:
         81:78:8e:47:7b:0f:0b:47:23:d4:ef:64:80:d9:1c:b4:72:e9:
         35:6c:08:03:20:6f:0e:e2:17:18:56:a0:3c:87:d0:c4:eb:e4:
         bf:f7:5a:41:3a:42:ae:ab:76:b5:9b:e8:98:63:b8:ca:a3:ad:
         09:f6:09:19:7b:04:a9:f1:64:fd:3f:18:8a:93:5a:c9:9b:5e:
         3f:cc:65:87:23:29:e7:86:c0:c6:4e:ce:64:3e:74:22:56:e6:
         0d:ce:c8:06:d8:ab:f3:e9:34:7a:6d:70:27:c3:88:e3:f6:35:
         80:1a:9c:cc:ef:21:56:5e:db:1a:52:2c:ae:d1:19:94:e7:83:
         c9:6f:fd:c4:3e:26:1d:ae:10:15:e7:3b:6b:8d:c2:13:34:77:
         c5:31:35:dd:75:6d:bb:e9:a4:0c:b6:9a:db:1b:15:84:1f:a4:
         5a:ac:5f:72:f8:b7:04:80:d2:79:a9:6b:d9:4a:53:2b:2b:b7:
         eb:01:c6:e5
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAqowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODA1MzNaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEZGOTJCNTVBNThBQzcw
RTIxQThFQTZENUY2MDg1NDIxMDg4RkI5REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMWu4ZzGX6hlu6WFicCe2Uw3T7mWTCAq6NKFqjRmRKG+6AkpSS
4xHNe+uZAZMnQpujjfzVmLUl5sd831boZlUerPgvO9JOqATf/tNCbcVVZTNb88Xh
Ws6i/Wu9MeE4PJGkmt07L89uQToCb++/2NFlGIBkuGOEytT7TEETtWzPoT8crX/1
KGN4aJakbP1QBfY7hjJyWJknbyYXySQNmBUR4DNpJ0oZaWD7kiK8tR7IbsMmkdXN
UPl7nYUDXno/0HmtvhRgMogp8FcB55jTYatM1lGK2czf4gavE53vjOgIgDQjwFFV
SfGjI+ihcoWw17stmzBLhsQgUU8qKr0pfV1HAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQU/5K1WliscOIajqbV9ghUIQiPud8wHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9fNUsxV2xpc2NPSWFqcWJWOWdoVUlRaVB1ZDgu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxctjANBgkqhkiG9w0BAQsFAAOCAQEABlWOUJXbEzYo8qsMy8C6
B6bF6s/nD2lJg7SpXxB9ACNnHsZ5ZucJ0ZCou2S++6fYVa/+ntJF9OqoOR3eed7q
c2K7PrmyrelrgXiOR3sPC0cj1O9kgNkctHLpNWwIAyBvDuIXGFagPIfQxOvkv/da
QTpCrqt2tZvomGO4yqOtCfYJGXsEqfFk/T8YipNayZteP8xlhyMp54bAxk7OZD50
IlbmDc7IBtir8+k0em1wJ8OI4/Y1gBqczO8hVl7bGlIsrtEZlOeDyW/9xD4mHa4Q
Fec7a43CEzR3xTE13XVtu+mkDLaa2xsVhB+kWqxfcvi3BIDSealr2UpTKyu36wHG
5Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org