Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/f_Jdy6CfYJhDkiAqghBzSLVhud0.roa
File:                     f_Jdy6CfYJhDkiAqghBzSLVhud0.roa (raw, json)
Hash identifier:          AvZCKL9kAxv0uwinj94fS7fOypcLGCsyrPTtvFNGBJQ=
Subject key identifier:   7F:F2:5D:CB:A0:9F:60:98:43:92:20:2A:82:10:73:48:B5:61:B9:DD
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       12
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/f_Jdy6CfYJhDkiAqghBzSLVhud0.roa
Signing time:             Wed 14 Dec 2022 04:14:22 +0000
ROA not before:           Wed 14 Dec 2022 04:14:22 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     0
IP address blocks:        202.236.91.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Dec 14 04:14:22 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=7FF25DCBA09F60984392202A82107348B561B9DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f7:24:2e:a2:27:cb:e5:9e:90:db:37:4d:ca:
                    57:b8:6e:92:a5:24:49:1a:e7:f6:eb:74:be:0b:6a:
                    84:62:f7:e0:22:5b:e8:05:50:60:ed:a9:f4:b8:16:
                    ac:5b:f9:d5:84:72:f0:32:d4:70:4e:ce:23:a3:96:
                    d0:19:d6:66:e5:98:a3:49:c0:2c:06:a3:0b:5e:93:
                    a7:0f:29:21:40:66:90:3b:3d:a1:cc:06:7d:7b:2b:
                    47:92:1e:ec:fb:90:80:f6:f2:82:2e:ec:10:d9:31:
                    d4:0d:52:09:49:99:73:18:72:82:9a:5c:6e:9e:42:
                    79:d9:ec:6d:e1:cb:07:54:a0:1b:84:65:9a:14:ad:
                    df:4f:c8:62:b4:0d:bd:43:68:e3:62:29:63:96:3e:
                    6b:21:ca:4c:b3:be:49:be:70:9a:e4:fc:4f:e0:83:
                    ca:f4:bc:db:ec:7d:f8:e1:d1:08:f7:46:5f:69:86:
                    e9:9b:b1:86:60:48:b9:86:2d:f6:0a:49:54:30:2f:
                    97:a3:af:27:e2:b5:34:9b:d9:2f:d1:81:b5:3f:60:
                    fd:a0:37:1f:df:44:6a:93:d9:11:bd:58:78:f8:50:
                    36:1d:a2:b1:a9:d5:af:6b:f7:36:e5:eb:8e:7d:d6:
                    d0:a4:57:68:d0:87:b5:dd:ff:e5:71:a7:af:8a:41:
                    55:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F2:5D:CB:A0:9F:60:98:43:92:20:2A:82:10:73:48:B5:61:B9:DD
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/f_Jdy6CfYJhDkiAqghBzSLVhud0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:d5:1c:22:0e:be:1a:ef:8e:96:65:ba:40:b9:e3:07:a7:82:
         d2:dd:72:72:03:0b:ce:6a:f5:29:dc:a0:2e:7e:b5:87:e9:22:
         07:71:05:26:40:f4:54:91:e3:d3:09:09:c4:9e:50:ce:d0:65:
         10:08:2e:d0:cc:94:c3:4a:96:d9:4a:67:16:37:c0:77:1b:72:
         c6:1d:bb:19:f5:c3:9f:cb:8b:b4:e3:1d:ed:ca:5f:e8:7d:c4:
         98:04:b8:5f:8e:8c:c9:16:d3:ba:d9:b4:02:ee:c7:83:af:69:
         04:32:8e:4a:d2:66:55:bb:4f:6f:58:12:7a:41:de:20:26:9c:
         a3:6b:cc:39:f8:5b:4b:54:5c:55:57:fc:58:70:5b:9f:ab:52:
         f4:d2:d7:58:7b:43:d9:b6:59:f5:e8:7f:35:68:15:c0:db:c0:
         e4:53:2f:aa:75:f7:e2:7c:d8:27:58:2c:d4:9d:2b:0a:18:ad:
         3b:b7:de:cf:24:9b:c4:67:39:4c:c2:f8:27:03:dd:32:72:55:
         a0:6b:63:d4:87:09:81:15:cb:0e:74:47:1b:d2:f6:4b:30:49:
         2a:4a:c6:d0:6c:92:8c:7f:b6:d1:71:e5:cb:77:6a:b2:bd:f5:
         2a:35:df:e9:c4:a1:b3:ca:90:47:8c:3b:9e:3a:d0:6e:f4:20:
         97:9d:c5:b7
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNjA2
QkVCMTM3Qjg4REJCRUVCQTc4NTFBMEE4RjhEN0QxODI5NEFGMB4XDTIyMTIxNDA0
MTQyMloXDTIzMTExNTAxMzAwMlowMzExMC8GA1UEAxMoN0ZGMjVEQ0JBMDlGNjA5
ODQzOTIyMDJBODIxMDczNDhCNTYxQjlERDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMv3JC6iJ8vlnpDbN03KV7hukqUkSRrn9ut0vgtqhGL34CJb6AVQ
YO2p9LgWrFv51YRy8DLUcE7OI6OW0BnWZuWYo0nALAajC16Tpw8pIUBmkDs9ocwG
fXsrR5Ie7PuQgPbygi7sENkx1A1SCUmZcxhygppcbp5CednsbeHLB1SgG4RlmhSt
30/IYrQNvUNo42IpY5Y+ayHKTLO+Sb5wmuT8T+CDyvS82+x9+OHRCPdGX2mG6Zux
hmBIuYYt9gpJVDAvl6OvJ+K1NJvZL9GBtT9g/aA3H99EapPZEb1YePhQNh2isanV
r2v3NuXrjn3W0KRXaNCHtd3/5XGnr4pBVd8CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBR/8l3LoJ9gmEOSICqCEHNItWG53TAfBgNVHSMEGDAWgBQWBr6xN7iNu+66eFGg
qPjX0YKUrzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxODMvRmdhLXNUZTRqYnZ1dW5oUm9LajQxOUdDbEs4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRmdhLXNUZTRqYnZ1dW5oUm9LajQx
OUdDbEs4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTgzL2ZfSmR5NkNmWUpoRGtpQXFnaEJ6U0xWaHVkMC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADK7FswDQYJKoZIhvcNAQELBQADggEBAI3VHCIOvhrvjpZlukC54wen
gtLdcnIDC85q9SncoC5+tYfpIgdxBSZA9FSR49MJCcSeUM7QZRAILtDMlMNKltlK
ZxY3wHcbcsYduxn1w5/Li7TjHe3KX+h9xJgEuF+OjMkW07rZtALux4OvaQQyjkrS
ZlW7T29YEnpB3iAmnKNrzDn4W0tUXFVX/FhwW5+rUvTS11h7Q9m2WfXofzVoFcDb
wORTL6p19+J82CdYLNSdKwoYrTu33s8km8RnOUzC+CcD3TJyVaBrY9SHCYEVyw50
RxvS9kswSSpKxtBskox/ttFx5ct3arK99So13+nEobPKkEeMO5460G70IJedxbc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org