Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/frCtemKisH3kFyZJr2p7lZxdnqI.roa
File:                     frCtemKisH3kFyZJr2p7lZxdnqI.roa (raw, json)
Hash identifier:          jRW2W2/nBZWtE7Ubs2P+IRnZjJf/fQbUr06nD8UN9uM=
Subject key identifier:   7E:B0:AD:7A:62:A2:B0:7D:E4:17:26:49:AF:6A:7B:95:9C:5D:9E:A2
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0152
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/frCtemKisH3kFyZJr2p7lZxdnqI.roa
Signing time:             Wed 15 Feb 2023 02:28:31 +0000
ROA not before:           Wed 15 Feb 2023 02:28:31 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.35/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:28:31 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=7EB0AD7A62A2B07DE4172649AF6A7B959C5D9EA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:3d:d1:f7:f9:57:ab:2c:0c:09:ed:87:bb:1e:
                    a5:89:50:42:8e:43:5c:9a:dd:e3:b3:dc:7b:87:3a:
                    5d:f3:ff:bf:7f:f2:b8:c0:1c:61:99:e8:e8:2e:54:
                    9a:cd:d2:b3:a8:fd:9d:09:ca:62:29:ae:ff:2d:2e:
                    0e:e1:0d:ee:6f:77:05:e2:4e:36:f7:e4:be:35:01:
                    62:7f:31:54:f4:8f:4a:1a:45:6e:8d:4f:e5:43:57:
                    e8:56:6b:c1:f7:e4:24:a3:e9:02:c3:1c:51:ab:3c:
                    0f:65:7c:5d:ac:2d:14:fc:60:10:d0:c8:23:41:8a:
                    2f:63:21:5b:b6:ad:bd:b3:ef:aa:6c:90:61:66:ed:
                    81:bc:28:b2:6b:ec:7d:91:af:7b:0c:ad:92:38:5c:
                    83:b0:32:4e:07:47:ae:a5:92:a5:de:71:0a:2f:ed:
                    d4:d6:3e:5b:02:c1:78:91:6f:7c:15:a0:e0:49:b5:
                    ee:4e:14:07:3f:1a:e1:7e:78:9b:0c:3b:9b:88:6c:
                    c8:6c:20:41:52:5c:c9:8a:79:b8:be:ba:e0:8b:0d:
                    93:b8:b0:c4:c5:b4:f4:5b:6d:45:e0:5b:a5:6b:fb:
                    d1:bd:2e:fc:af:fe:c9:84:e1:a7:62:31:9c:be:7b:
                    ff:60:50:a2:e7:af:fc:ea:37:8d:fe:3d:a3:26:52:
                    e8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B0:AD:7A:62:A2:B0:7D:E4:17:26:49:AF:6A:7B:95:9C:5D:9E:A2
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/frCtemKisH3kFyZJr2p7lZxdnqI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.35/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:a7:27:27:0f:a3:ff:85:d8:8b:e6:00:43:10:be:b5:fc:80:
         91:bb:ba:c2:d8:7b:06:2f:cf:44:3a:07:71:d5:50:56:d6:ec:
         b5:ed:f0:90:1b:c4:e5:6f:2f:7f:9a:cf:29:1a:82:1a:39:4e:
         fd:d7:af:54:bd:d9:4a:f6:84:33:ca:14:d1:e9:bc:f2:9d:b9:
         87:dd:30:02:45:f7:57:07:67:42:00:f1:9b:7e:d7:d3:41:b6:
         30:2d:17:48:a7:43:20:98:01:c2:fc:8f:0a:67:95:d1:c1:ef:
         f7:d5:31:dd:61:17:b5:75:45:0f:22:f0:27:d1:8c:57:33:e3:
         8d:d4:57:fd:88:d4:48:93:a8:3e:63:25:5e:dc:35:e4:63:45:
         27:73:fa:bd:cf:61:60:13:bd:98:a4:aa:ec:d8:14:d8:60:34:
         1a:77:a6:5c:6e:99:e4:76:8a:d6:2c:12:68:70:ed:27:77:68:
         57:10:ef:96:72:5f:9a:9d:69:d4:2c:dc:12:b0:76:e6:e3:f4:
         ac:b9:fb:46:28:b6:b8:07:43:7c:a9:97:ce:a1:d8:43:f4:a7:
         9f:14:f5:79:81:7d:08:2a:4a:6f:8a:33:a6:cd:57:e8:62:03:
         f3:c3:00:be:c1:74:de:65:13:32:9e:f2:93:60:38:5d:be:0c:
         be:b9:9e:c2
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMTUw
MjI4MzFaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdFQjBBRDdBNjJBMkIw
N0RFNDE3MjY0OUFGNkE3Qjk1OUM1RDlFQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD6PdH3+VerLAwJ7Ye7HqWJUEKOQ1ya3eOz3HuHOl3z/79/8rjA
HGGZ6OguVJrN0rOo/Z0JymIprv8tLg7hDe5vdwXiTjb35L41AWJ/MVT0j0oaRW6N
T+VDV+hWa8H35CSj6QLDHFGrPA9lfF2sLRT8YBDQyCNBii9jIVu2rb2z76pskGFm
7YG8KLJr7H2Rr3sMrZI4XIOwMk4HR66lkqXecQov7dTWPlsCwXiRb3wVoOBJte5O
FAc/GuF+eJsMO5uIbMhsIEFSXMmKebi+uuCLDZO4sMTFtPRbbUXgW6Vr+9G9Lvyv
/smE4adiMZy+e/9gUKLnr/zqN43+PaMmUujxAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUfrCtemKisH3kFyZJr2p7lZxdnqIwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9mckN0ZW1LaXNIM2tGeVpKcjJwN2xaeGRucUku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxaIzANBgkqhkiG9w0BAQsFAAOCAQEAoacnJw+j/4XYi+YAQxC+
tfyAkbu6wth7Bi/PRDoHcdVQVtbste3wkBvE5W8vf5rPKRqCGjlO/devVL3ZSvaE
M8oU0em88p25h90wAkX3VwdnQgDxm37X00G2MC0XSKdDIJgBwvyPCmeV0cHv99Ux
3WEXtXVFDyLwJ9GMVzPjjdRX/YjUSJOoPmMlXtw15GNFJ3P6vc9hYBO9mKSq7NgU
2GA0GnemXG6Z5HaK1iwSaHDtJ3doVxDvlnJfmp1p1CzcErB25uP0rLn7Rii2uAdD
fKmXzqHYQ/SnnxT1eYF9CCpKb4ozps1X6GID88MAvsF03mUTMp7yk2A4Xb4Mvrme
wg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org