Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/d8tJpTPj_cf12m8SMzI63dTipO4.roa
File:                     d8tJpTPj_cf12m8SMzI63dTipO4.roa (raw, json)
Hash identifier:          EFwoigyb0fZHGJE7m8hDfVwqnPIuP88qQ114SRDkYBA=
Subject key identifier:   77:CB:49:A5:33:E3:FD:C7:F5:DA:6F:12:33:32:3A:DD:D4:E2:A4:EE
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0255
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/d8tJpTPj_cf12m8SMzI63dTipO4.roa
Signing time:             Mon 20 Feb 2023 08:01:32 +0000
ROA not before:           Mon 20 Feb 2023 08:01:32 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.171/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:01:32 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=77CB49A533E3FDC7F5DA6F1233323ADDD4E2A4EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e8:f2:05:eb:fc:49:d9:42:95:dd:e5:02:40:
                    3b:a4:d3:a8:d9:ee:f2:0b:e9:90:22:bc:e0:ee:52:
                    da:06:18:1c:5e:2d:8a:dc:59:3e:be:e9:2e:1e:b2:
                    03:24:6c:0f:4c:d0:a6:83:e0:68:63:52:77:c0:6e:
                    db:fa:5d:59:fd:aa:7a:db:b8:d3:f7:14:e6:1f:2f:
                    6a:97:96:b7:1e:24:69:ad:4b:d5:c7:9d:80:c3:e3:
                    a6:8f:ad:da:81:7e:6c:4c:70:7a:85:0b:fa:71:a2:
                    7b:c0:f0:ac:a1:98:dd:34:d5:aa:e4:8f:1c:d3:54:
                    12:a3:e1:bc:8c:36:40:d7:80:29:b6:42:1a:7b:7d:
                    f6:30:dc:14:8f:b7:d7:3e:8e:f6:36:68:ff:17:67:
                    a9:a0:06:86:3d:74:eb:d4:e3:fc:a3:56:94:70:52:
                    56:d1:cc:e9:8f:cd:07:12:bc:f3:ea:f7:ec:b5:27:
                    e8:26:ce:81:f5:0a:6e:ce:70:a7:1e:8f:0f:0d:ac:
                    c8:21:59:65:80:e3:09:f8:16:71:80:1b:bc:1f:ff:
                    10:fa:9f:41:01:7a:69:84:6d:aa:5b:07:35:01:b4:
                    77:e2:b1:c3:f6:6a:45:4e:b8:e1:04:0d:c9:ac:9a:
                    47:eb:45:6b:01:5e:79:c2:da:87:d6:b2:36:77:57:
                    f2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CB:49:A5:33:E3:FD:C7:F5:DA:6F:12:33:32:3A:DD:D4:E2:A4:EE
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/d8tJpTPj_cf12m8SMzI63dTipO4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.171/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:3a:97:d3:d1:4b:60:83:4b:c0:81:ba:8c:e2:1b:bb:c8:06:
         4c:37:6f:f4:29:a6:0e:48:64:5b:ea:ac:35:ec:95:fd:ee:22:
         f8:43:c5:eb:ac:bf:38:f7:fc:fa:c0:fc:5f:07:94:57:86:cd:
         46:62:ac:79:0d:af:2b:f4:c4:15:60:7b:cf:2c:ca:55:1e:d6:
         b3:8e:3b:aa:47:98:0f:e9:23:df:f0:e6:c5:69:8b:36:aa:f5:
         95:d9:4a:eb:52:c7:02:22:8f:ac:38:b4:ff:8b:78:ba:6c:88:
         6f:30:29:21:9d:34:b5:de:5c:43:55:a3:71:2e:95:6a:60:c7:
         9d:99:7c:a1:93:18:78:92:57:81:a7:b7:68:30:9e:5c:c8:c5:
         98:6b:b7:2d:a5:0e:86:98:61:51:23:a7:4f:50:17:35:d3:d4:
         92:8c:4f:8c:5e:a6:36:6c:bc:c3:de:33:fb:19:89:9c:9a:20:
         f9:6f:0b:6f:17:d6:e4:07:4d:c6:72:54:7b:5a:b8:3e:1f:de:
         69:08:f0:28:95:8c:17:1f:27:d1:d8:c4:33:be:e9:cf:df:d6:
         9f:b9:8c:17:20:0b:c5:c3:30:07:38:58:0b:f7:3e:af:88:3f:
         4d:ba:e7:1e:94:8c:8b:34:fd:f6:e4:80:96:b9:51:db:02:e6:
         3e:a8:38:59
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODAxMzJaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc3Q0I0OUE1MzNFM0ZE
QzdGNURBNkYxMjMzMzIzQURERDRFMkE0RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDH6PIF6/xJ2UKV3eUCQDuk06jZ7vIL6ZAivODuUtoGGBxeLYrc
WT6+6S4esgMkbA9M0KaD4GhjUnfAbtv6XVn9qnrbuNP3FOYfL2qXlrceJGmtS9XH
nYDD46aPrdqBfmxMcHqFC/pxonvA8KyhmN001arkjxzTVBKj4byMNkDXgCm2Qhp7
ffYw3BSPt9c+jvY2aP8XZ6mgBoY9dOvU4/yjVpRwUlbRzOmPzQcSvPPq9+y1J+gm
zoH1Cm7OcKcejw8NrMghWWWA4wn4FnGAG7wf/xD6n0EBemmEbapbBzUBtHfiscP2
akVOuOEEDcmsmkfrRWsBXnnC2ofWsjZ3V/KhAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUd8tJpTPj/cf12m8SMzI63dTipO4wHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9kOHRKcFRQal9jZjEybThTTXpJNjNkVGlwTzQu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxcqzANBgkqhkiG9w0BAQsFAAOCAQEAjzqX09FLYINLwIG6jOIb
u8gGTDdv9CmmDkhkW+qsNeyV/e4i+EPF66y/OPf8+sD8XweUV4bNRmKseQ2vK/TE
FWB7zyzKVR7Ws447qkeYD+kj3/DmxWmLNqr1ldlK61LHAiKPrDi0/4t4umyIbzAp
IZ00td5cQ1WjcS6VamDHnZl8oZMYeJJXgae3aDCeXMjFmGu3LaUOhphhUSOnT1AX
NdPUkoxPjF6mNmy8w94z+xmJnJog+W8LbxfW5AdNxnJUe1q4Ph/eaQjwKJWMFx8n
0djEM77pz9/Wn7mMFyALxcMwBzhYC/c+r4g/TbrnHpSMizT99uSAlrlR2wLmPqg4
WQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:55 2024 by rpki-client on console-ams.rpki-client.org